Job Description

PRIMARY DUTIES & RESPONSIBILITIES:

• Conducts regular risk assessments to identify potential vulnerabilities and threats within the AWS IL5 environment
• Develops strategies for risk mitigation and implements necessary controls to address identified risks
• Maintains a risk register documenting identified risks and corresponding mitigation actions
• Ensures AWS configurations align with IL5 security requirements, including encryption, access controls, and network segmentation
• Implements and enforces compliance with relevant security standards and regulations, such as NIST SP 800-53 and DoD IL5 requirements
• Monitors AWS configurations for deviations from security baselines and promptly remediates any non-compliant settings
• Implements strong IAM policies to enforce least privilege access across AWS resources
• Regularly reviews IAM roles and permissions to ensure alignment with the principle of least privilege
• Enables multi-factor authentication (MFA) for privileged accounts and sensitive operations
• Deploys robust monitoring tools to detect unauthorized access attempts, suspicious activities, and security breaches
• Establishes incident response procedures to promptly respond to security incidents and minimize their impact
• Conducts post-incident reviews to identify lessons learned and improves incident response processes
• Implements encryption mechanisms to protect data at rest and in transit within the AWS IL5 environment
• Regularly reviews encryption policies and key management practices to ensure effectiveness
• Provides regular security training and awareness programs to AWS IL5 users and administrators
• Educates users about common cyber threats, phishing attacks, and best practices for secure usage of AWS resources
• Encourages a culture of security awareness and proactive risk mitigation among all stakeholders
• Conducts periodic security assessments and audits to evaluate the effectiveness of cyber security controls
• Identifies areas for improvement and implement enhancements to strengthen the security posture of the AWS IL5 Cloud SCCA
• Stays abreast of emerging cyber threats, vulnerabilities, and industry best practices to adapt security measures accordingly
• Travels approximately 3-4 days a quarter, as required

DESIRED SKILLS & REQUIREMENTS:

• RMF experience
• USMC Cyber experience
• SAFe (Scaled Agile Framework) experience

Job Tags

Similar Jobs