Network Operations Center - Security Engineer at Steerbridge · LumiJobs

Qualification

Eligibility Requirements8+ years of experience in cybersecurityExperience with AWS Organizations

Eligibility Requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidates must also be able to obtain and maintain the security clearance required for the role.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
8+ years of experience in cybersecurity, cloud security, or security engineering, including 3+ years designing security architectures for complex cloud or enterprise systems, with expertise in multi-account AWS security (identity and access management, network segmentation, encryption and key management, and centralized logging).
Expertise with federal security requirements (FISMA, FedRAMP, NIST SP 800-53, and RMF), including creating and maintaining SSPs and ATO packages, and with commercial requirements such as GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO, with the ability to translate requirements into architecture and control evidence.

10+ years of cybersecurity experience in federal or large enterprise environments, including leadership of security architecture, threat modeling, and authorization activities in AWS GovCloud, VA programs, or other regulated federal cloud environments.
Master’s degree or PhD in a related field, and/or certifications such as CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional.
Experience with AWS Organizations, service control policies, landing zones, container security (ECS, Fargate, or Kubernetes), and infrastructure-as-code and CI/CD supply chain security.
Experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access using Zscaler ZPA/ZIA, Palo Alto VM-Series, or comparable technologies.
Experience conducting vendor and third-party security due diligence, including reviewing SOC reports and CUECs, interpreting contractual security flow-down requirements, and translating vendor assurance into ATO control inheritance and risk documentation.

Network Operations Center - Security Engineer