Cloud Information Systems Security Engineer

LATG is seeking a Cloud Information Systems Security Engineer to join its AWS-based cloud operations team. The role develops and maintains secure cloud architectures, supports Federal Government compliance and authorization processes, manages security risks, and collaborates with engineering and security teams on assessments, monitoring, remediation, and cybersecurity process improvement.

Responsibilities:

• Design and maintain cybersecurity architecture for AWS cloud environments, ensuring alignment with Federal Government standards and the Risk Management Framework (RMF)
• Lead the development and upkeep of authorization artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs), within eMASS
• Conduct security assessments, vulnerability scans, and technical testing using tools such as ACAS, STIGs, and AWS-native security services
• Manage Authorization to Operate (ATO) processes and compliance activities across IaaS, PaaS, and SaaS models
• Collaborate with cloud engineering teams to integrate secure Infrastructure-as-Code (IaC) and DevSecOps practices
• Utilize AWS Security Hub, GuardDuty, CloudWatch, CloudTrail, and Splunk for monitoring, log analysis, and incident response
• Provide technical guidance on interpreting ACAS/STIG results and ensure compliance with security baselines
• Support audits, inspections, and risk assessments by delivering documentation and remediation strategies
• Continuously improve cybersecurity processes, tools, and documentation to maintain audit readiness and enhance security posture

Requirements:

• Active SECRET Security Clearance
• DoD 8570 IAM Level II certification (e.g., CISSP, CAP, or Security+ CE)
• Minimum of 4 years of cybersecurity experience, with 2+ years in cloud security (AWS preferred)
• Expertise in RMF, eMASS artifact development, and NIST 800-53 control assessments
• Proficiency with AWS cloud security tools (Security Hub, GuardDuty, CloudWatch, CloudTrail) and Splunk
• Experience with ACAS scanning, STIG compliance, and vulnerability management tools (Trellix, Invicti, Anchore)
• Familiarity with Infrastructure-as-Code (Terraform, Bicep) and DevSecOps integration
• Strong communication, problem-solving, and documentation skills