Software Guidance & Assistance, Inc., (SGA), is searching for a Lead Cloud Security Engineer with a CISSP f or a contract assignment with one of our premier Regulatory clients. Must be local and willing to work hybrid in one of these offices: Tysons VA or Rockville MD. Initial contract length 6 months (probable extension). Required Skills
- Strong AWS and Azure security experience
- 8+ years of security experience
- 2+ years in a Lead role (ideally current)
- CISSP — non negotiable
- Cloud Architect certification in AWS or Azure
- Cloud security reviews and assessments
- Identify and remediate security/non-compliance issues
- Implement preventative security controls
- Drive security issues from a configuration/admin perspective
- Cloud networking changes and security remediation
- Larger security projects, including:
- AWS GuardDuty
- Azure networking/security
- Work autonomously and drive issues to resolution
- Ensure that security risks are comprehensively and effectively managed though leading the application of established and ad hoc processes and techniques to identify, validate, and prioritize.
- Lead the identification of security requirement deficiencies, eliciting of security requirements, and the architecture and design of security controls.
- Develop and implement strategies to promote consistent use of security controls across the enterprise.
- Lead the operation and monitoring of security controls.
- Establish, implement, and promote security control operation and monitoring strategies.
- Ensure that controls are operating effectively; resolve operating discrepancies.
- Review, triage, and prioritize control output.
- Take appropriate action to resolve security discrepancies.
- Lead the identification, evaluation, and recommendation of new security technologies, techniques, and tools.
- Lead team in defining, reviewing, and promoting information security policies, standards, guidelines, and procedures.
- Lead and champion efforts to enforce and monitor compliance with internal and external regulations, policies, and standards.
- Establish and promote strategies to ensure that compliance is effectively monitored and enforced.
- Direct internal process improvement initiatives.
- Provide feedback on processes by offering suggestions.
- Mentor junior staff.
- Participate in external process improvement committees as a Quality Assurance representative.
- Provide backup coverage for next level management, as appropriate.
- Assist with adherence to technology policies and comply with all security controls.
- Ensure all work products meets/exceeds the firm standards. Demonstration of the firm's values. Collaboration, both in-person and virtually, in furtherance of the firm's mission of investor protection and market integrity.
Lead Cloud Security Engineer (CISSP) (Tysons Corner) in tysons corner at Unknown Company
This position is listed as contract and hybrid.