Cloud Security AuditornnQuantico, VA 22134, USA Req #173nnWednesday, December 4, 2024nnASRC Federal Broadleaf Division (Prime) is actively hiring a Cloud Security Auditor in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico VA. This is primarily a Telework position with a requirement to be onsite at least two (2) days a week at Quantico Marine Corps Base VA.nnDUTIES:As a Cloud Security Auditor, you will be responsible for assessing the organization's cloud implementations and security controls to determine whether they meet DoD and industry standards. As the Cloud Security Auditor, you will assess the cloud security status by conducting posture reviews of all Agency Cloud Systems to include:nn• Identify and document all gaps against cloud cybersecurity requirements, ensuring thorough analysis and accuracy• Provide weekly Cloud Security Posture Review Reports detailing all identified gaps and actions taken to address them• Produce a full Cloud Security Posture Review Report at the end of the month, summarizing all gaps and the corresponding remediation efforts• Collaborate with stakeholders to ensure alignment of audit findings with organizational cybersecurity goals and requirements• Collaborating with Cloud Engineers to develop and implement effective cloud security strategies • Maintain detailed documentation and reports of all posture review activities, findings, and responses• Stay current with the latest cloud security trends, tools, and best practices to ensure the effectiveness of posture reviews• Working together with stakeholders to implement necessary security improvements• Provides security and technical expertise to support the development of security objects to satisfy business requirements BASIC QUALIFICATIONS: Candidates should have a proven background working in cloud environments with experience and knowledge in the following areas:nn• Security automation with tools such as Splunk and STIG scanner• Analyzing and administering security policies to control physical and virtual system access• Identifying and investigates security issues and develops security solutions that address compliance requirements that can/ do impact security• Identifying, developing, and implementing mechanisms to detect security incidents to enhance compliance and support of the security standards and proceduresnn• Assessing business role requirements, reviews authorization roles, and supports authorizationsnn• Demonstrating a comprehensive skill set with testing authorizations for multiple environments and coordinates testing with business/technical usersnn• Validating system configurations to ensure the safety of information systems assets and protects information systems from intentional or inadvertent access or destructionnn• Implementing best practice when applying knowledge of information systems security standards/practices (e.g. Access control and system hardening, system audit and log file monitoring, security policies, and incident handling)nn• Design and coordinating activities/engagements with other departmentsnn• Identifying security gaps that expose the Agency to potential exploit and develop short- and long-term prioritized remediation to address those gapsnn• Developing and executing security controls, defenses, and countermeasures to intercept and prevent internal/external data infiltrationsnn• Determining strategy and protocol for network behavior, analysis techniques, and tool implementationnn• Providing subject matter expertise in systems security policies, standards/practices, protocols, and technologiesnnYEARS EXPERIENCE:nnAt least Five (5) Years – Experience with assessing, analyzing and implementing information assurance and security engineering systems in cloud environmentsnnEDUCATION REQUIREMENTS:nnBachelor’s Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information TechnologynnCERTIFICAITON(S):nnDD8140/DoD8570.01-M IAT Level II e.g., CCNA-Security, CySA+, GICSP, GSEC, Security + CE, CND, SSCP or higher-level certificationnnA Cloud Security Certification is required e.g., Certified Cloud Security Engineer, AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate or equivalentnnCertification in cybersecurity (e.g., CISSP, CISM, CISA) is a plus.nnCLEARANCE LEVEL:nnActive Top Secret with the ability to obtain TS/SCInnWORK ENVIRONMENT AND PHYSICAL DEMANDS:nnThis is primarily a Telework position with a requirement to be onsite at least two (2) days a week. Onsite days may be higher during initial project design and implementation.nnIf alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.nnMust speak English well enough to communicate complex technical ideas to a diverse customer both verbally and in written form.nnWe invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.nnEEO StatementnnASRC Federal and its Subsidiaries are Equal Opportunity /Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.nnOther detailsnnJob FamilyInformation TechnologynnJob Sub-FamilyCyber SecuritynnPay TypeSalarynnTravel RequiredNonnTelecommute %60nnRequired EducationBachelor’s DegreennJob Start DateWednesday, December 4, 2024nnQuantico, VA 22134, USAnn