Provide Incident Response (IR) and security operations support for the USAF Cloud One (C1) enterprise cloud environment supporting AWS, Azure, Oracle, and GCP
Maintain audit log configuration, monitoring, and retention compliance.
Support incident reporting and documentation in accordance with DFARS 252.204-7012 and 252.239-7010.
Ensure compliance with SCCA and Cloud SRG requirements.
Support secure configuration of AWS, Azure, Oracle, and GCP cloud environments.
Support the development, updates, and maintenance of RMF authorization artifacts.
Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment.
Support ATO maintenance and sustainment activities for C1 and DPaaS environments.
Support Authority to Use (ATU) conditions and remediation tracking as directed by the AO.
Assist Government ISSO/ISSM with maintaining compliance with DoDI 8500.01, DoDI 8510.01, AFI 17-101, DoD Cloud Computing SRG, DISA STIG/SRG, CNSSI 1253
Support security control assessments, audit readiness, and third-party cybersecurity inspections.
Requirements
Bachelors and 2+ years or more of experience
Sufficient Cloud Experience
CSSP experience
SIEM experience
Incident Response
Additional experience may be accepted in lieu of degree.
Active Secret clearance required
US citizenship required
CompTIA Security+ (IAT Level II) or equivalent required
Preferred Qualifications
Experience with USAF Cloud One or Platform 1
Experience with Zero Trust Architecture
Cloud certifications in AWS, Azure, Google, or Oracle clouds
Automation experience
Certifications: CISSP (IAT Level III) or equivalent