Security Impact Analysis (SIA) Engineer
Location: Washington, DC (Hybrid)
Company: Big Impact Tech (BIT)
Clearance Required: Secret, must be able to obtain TSA clearance
The experience expected from applicants, as well as additional skills and qualifications needed for this job are listed below.
About Big Impact Tech
Big Impact Tech (BIT) is a Small Business providing IT and business management consulting to federal and commercial clients. We deliver mission-focused solutions in data, cloud, cybersecurity, and program management.
Position Overview
The Security Impact Analysis (SIA) Engineer reviews Requests for Change (RFCs) and determines their security impact, completing approximately 1,200 RFC/SIA analyses per year. This position also leads compliance reviews of emerging technology, performs cloud and AI assessments, and supports the Enterprise AI Security framework. The minimum 6 years of experience reflects the need for strong engineering judgment across a high volume of change reviews.
Responsibilities
• Reviews RFCs and performs Security Impact Analyses (approximately 1,200 per year).
• Conducts compliance reviews of emerging technologies.
• Performs cloud and AI security assessments.
• Contributes to the Enterprise AI Security framework.
• Recommends updates to Security Assessment (SA) and Ongoing Authorization (OA) standard operating procedures.
• Other duties as assigned.
Required Qualifications
• BA/BS degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Minimum Experience Required:
• Minimum 6 years of cybersecurity engineering or security assessment experience.
• Demonstrated experience performing SIAs within a federal change management process.
• Demonstrated knowledge of cloud security (AWS, Azure, or GCP) and FedRAMP.
• Demonstrated understanding of AI security risks and frameworks such as the NIST AI Risk Management Framework.
• Demonstrated ability to manage a high volume of reviews with fast turnaround.
Additional Experience:
CISSP, CCSP, or CGRC certification. xhqgsiq
Cloud security certification (e.g., AWS Security Specialty, Azure Security Engineer).
Security Impact Analysis Engineer in washington at Unknown Company
This position is listed as full time and hybrid.