Zermount, Inc.
Overview
Join to apply for the
CLOUD SECURITY ENGINEER
role at
Zermount, Inc. The Cloud Security Engineer will review security strategy to monitor and analyze our cloud infrastructure. This position focuses on finding security weaknesses and constructing scalable secure cloud solutions. You will participate in building the cloud security architecture, consult with other technology team members as they build and launch new products, proactively plan for security issues, and respond to incidents that occur. Responsibilities Oversee, evaluate, and support the documentation, validation, and accreditation processes necessary to assure that new information technology systems meet the organization's information assurance requirements and ensure compliance from internal and external perspectives. Design, develop, maintain, and make available to OCIO personnel security artifacts including detailed security drawings expressing current system security architecture, inventories of resources used by Library of Congress systems, and security baselines based upon applicable policy. Assess threats and vulnerabilities, determine deviations from acceptable configurations, assess risk, and develop/ recommend mitigation countermeasures in operational and non-operational situations. Document and audit log correlation requirements, select audit log correlation engines and recommend configuration guidelines. Perform analysis to determine the optimum configuration of network and host sensors. Analyze and recommend resolution of information security problems with knowledge of major information security products and services; SAS/CIO provides final approval of solutions. Develop alternatives of system designs and architectures considering trade-offs between security, operational requirements, and cost. Provide risk analysis for vulnerabilities, incidents and change requests; determine impact of new or changing applicable federal policy changes. Provide security engineering SME guidance in coordination with Enterprise Architecture and Technical Review Board for future updates and information security mechanisms. Support technology-related architecture guidance delivered via briefings, email, or white papers addressing vulnerabilities, risks, mitigation, and opportunities. Conduct research and analyses to evaluate emerging industry technology trends, government best practices, and security issues. Provide expertise for secure development and operation of systems; assist owners and engineers with selecting and implementing controls to maintain security and patron privacy. Identify gaps in security tool coverage and deploy vulnerability assessment capabilities in cloud projects; support and advise the CI/CD pipeline; deploy security tools to support DevSecOps. Incident Management Participates in threat modeling and architecture reviews. Ensures all security, governance, and compliance standards are met. Assists with gathering functional requirements and developing technical specifications. Supports outsourced development teams. Completes project deliverables ahead of schedule. Location Remote (Initial onboarding in Arlington, VA) Minimal travel may be required if requested by the agency. Clearance level : Library Specific Minimum Background Investigation (MBI) will be conducted. Experience : 5 years preferred / Minimum Related Cloud Experience: 3 years. Education : Bachelor's degree in computer science, cybersecurity, IT or relevant fields. Professional experience may be considered in substitute for a degree. Certifications (at least one is required; two is preferred) AWS Certified Cloud Practitioner AWS Certified Developer AWS Certified DevOps Engineer AWS Certified Data Analytics AWS Certified Security Certified Cloud Architect Certified Cloud Professional Certificate of Cloud Security Knowledge Cloud+ Cloud Essentials+ Google Associate Cloud Engineer Google Professional Cloud Architect Microsoft Certified Azure Fundamentals Microsoft Azure Administrator Associate Microsoft Azure Solutions Architect Expert
#J-18808-Ljbffr
Join to apply for the
CLOUD SECURITY ENGINEER
role at
Zermount, Inc. The Cloud Security Engineer will review security strategy to monitor and analyze our cloud infrastructure. This position focuses on finding security weaknesses and constructing scalable secure cloud solutions. You will participate in building the cloud security architecture, consult with other technology team members as they build and launch new products, proactively plan for security issues, and respond to incidents that occur. Responsibilities Oversee, evaluate, and support the documentation, validation, and accreditation processes necessary to assure that new information technology systems meet the organization's information assurance requirements and ensure compliance from internal and external perspectives. Design, develop, maintain, and make available to OCIO personnel security artifacts including detailed security drawings expressing current system security architecture, inventories of resources used by Library of Congress systems, and security baselines based upon applicable policy. Assess threats and vulnerabilities, determine deviations from acceptable configurations, assess risk, and develop/ recommend mitigation countermeasures in operational and non-operational situations. Document and audit log correlation requirements, select audit log correlation engines and recommend configuration guidelines. Perform analysis to determine the optimum configuration of network and host sensors. Analyze and recommend resolution of information security problems with knowledge of major information security products and services; SAS/CIO provides final approval of solutions. Develop alternatives of system designs and architectures considering trade-offs between security, operational requirements, and cost. Provide risk analysis for vulnerabilities, incidents and change requests; determine impact of new or changing applicable federal policy changes. Provide security engineering SME guidance in coordination with Enterprise Architecture and Technical Review Board for future updates and information security mechanisms. Support technology-related architecture guidance delivered via briefings, email, or white papers addressing vulnerabilities, risks, mitigation, and opportunities. Conduct research and analyses to evaluate emerging industry technology trends, government best practices, and security issues. Provide expertise for secure development and operation of systems; assist owners and engineers with selecting and implementing controls to maintain security and patron privacy. Identify gaps in security tool coverage and deploy vulnerability assessment capabilities in cloud projects; support and advise the CI/CD pipeline; deploy security tools to support DevSecOps. Incident Management Participates in threat modeling and architecture reviews. Ensures all security, governance, and compliance standards are met. Assists with gathering functional requirements and developing technical specifications. Supports outsourced development teams. Completes project deliverables ahead of schedule. Location Remote (Initial onboarding in Arlington, VA) Minimal travel may be required if requested by the agency. Clearance level : Library Specific Minimum Background Investigation (MBI) will be conducted. Experience : 5 years preferred / Minimum Related Cloud Experience: 3 years. Education : Bachelor's degree in computer science, cybersecurity, IT or relevant fields. Professional experience may be considered in substitute for a degree. Certifications (at least one is required; two is preferred) AWS Certified Cloud Practitioner AWS Certified Developer AWS Certified DevOps Engineer AWS Certified Data Analytics AWS Certified Security Certified Cloud Architect Certified Cloud Professional Certificate of Cloud Security Knowledge Cloud+ Cloud Essentials+ Google Associate Cloud Engineer Google Professional Cloud Architect Microsoft Certified Azure Fundamentals Microsoft Azure Administrator Associate Microsoft Azure Solutions Architect Expert
#J-18808-Ljbffr