TASS (Current Contract) - Cybersecurity Engineer - Sr (Cloud Security Assessment)

Job Description

Job Description

About Us

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.

AGE Solutions is looking for a Senior Cloud Security Assessor to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer. In this position, you will perform DoD and FedRAMP Cloud Authorization on-going support to include ConMon, annual reviews and extensions, and significant change requests (SCRs) of CSPs through reviews, recommendations, written reports, and briefings.

Individuals in this role must be available to work full-time on-site at Ft. Meade, MD.

Essential Duties and Responsibilities :

• Conduct thorough reviews and analyses of Deviation Requests including validations or justifications for security findings
• Evaluate and develop Monthly One Pagers that summarize the cybersecurity posture of Cloud Service Offerings (CSOs)
• Perform Annual Assessments to validate the implementation of mandatory security controls across the CSO baseline and assess one-third of the remaining controls annually
• Prepare and review weekly Playbooks to report on the Continuous Monitoring (ConMon) status of designated CSOs
• Review and assess Security Change Requests (SCRs) that propose new requirements or capabilities for CSOs
• Analyze scan data, Plans of Action and Milestones (POA&Ms), and other change artifacts to assess ongoing risk posture changes of Cloud Service Providers (CSPs)
• Ensure the DoD and FedRAMP monitoring programs enable effective oversight of CSPs by providing risk-based data to inform Authorizing Officials (AOs)
• Perform ongoing assessments and validations to confirm that security controls are implemented and compliant with DoD and FedRAMP standards
• Ensure effective operation of system safeguards and controls through a proactive, risk-based monitoring approach
• Maintain continuous visibility into CSP applications and devices to support data-driven decision-making and adherence to authorized risk thresholds
• Support risk-based situational awareness for network security by conducting architectural reviews that expedite mitigation efforts
• Integrate security and risk management processes to identify actionable items driven by threat and vulnerability assessments
• Validate that CSPs regularly perform vulnerability scans as mandated by DoD and FedRAMP security control requirements
• Recommend and oversee the submission and review of POA&Ms, vulnerability scans, Playbooks, Change Requests, Deviation Reports, and Monthly One Pagers
• Contribute to a leverage model that reduces government costs, time, and resources associated with ConMon for cloud systems
• Conduct Annual Assessments in accordance with FedRAMP and DoD requirements
• Provide comprehensive ConMon compliance assessments and risk analyses for each assigned CSO including input for annual reviews, extension and change requests, Binding Operational Directives (BODs), and Emergency Directives (EDs) supported by documentation, recommendations, reports, and briefings
• Upload all documentation or changes in control status related to ConMon activities into eMASS or a government-designated Governance, Risk, and Compliance (GRC) system
• Document ConMon standards and frameworks
• Utilize government-specified cybersecurity tools to support cyber compliance monitoring and maintenance.

Requirements :

Work Environment :

Compensation : $120,000 - $130,000

This posting is part of a pipeline for future opportunities supporting the current TASS contract. Employment is contingent upon position availability and government customer approval. AGE Solutions is actively engaging talent and encourages incumbents and new candidates to express interest to be considered if / when opportunities may become available.

At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.

At AGE, you'll do work that matters, supported by a company that delivers for its people.