Overview

Responsibilities

The Cloud Cyber Engineer III monitors and responds to incidents in the cloud environment. Keeping cloud infrastructure current, making recommendations with continually improving cloud security technologies. Analyzing, designing, and developing programs to improve the security posture of the University while overseeing scripts, tests, and infrastructure automation capabilities. Additionally, in this position you will:

 

• Work with minimal oversight as the technical lead for information security related projects and customer interactions
• Strong working knowledge with updating eMass with the RMF controls.
• Implement, administer, and maintain endpoint security with Azure Cloud Administration.
• Ensure all endpoint product agents and sensors are up to date and fully in compliance with customer requirements
• Monitor the Host Intrusion Prevention and Anti-Virus rules deployed to the MCU computers to ensure it is not interfering unintentionally with applications.
• Manage and monitor custom rules as needed and monitor USB devices connected to the systems.
• Engineer, implement and monitor security measures for the protection of computer systems, networks and information
• Identify and define system security requirements
• Building, upgrading and maintaining endpoint security environments on unclassified network & standalone networks.
• Design computer security architecture and develop detailed cyber security designs
• May configure and deploy Azure Cloud Administration posture.
• Maintain in-depth product knowledge of SACA and Azure Cloud enterprise solutions.
• Maintain and administer Cloud Security protocols and procedures, performing vulnerability scanning and reporting
• Configure and maintain McAfee ePO tasks, automation, EEDK packages, custom query development, performance optimization, policy management, and application life cycle management
• Perform maintenance and management of security policy management, forensic analysis, IOC management, utilize the Falcon API (psfalcon, falconpy), and real-time response to support Client operations teams
• Perform health checks and optimization activities on relevant security technologies or systems
• Provide incident response support through data collection and remediation activities, as they relate to endpoint security
• Assess information security risk and facilitate remediation of identified vulnerabilities for IT security and risk across the enterprise. Report on findings and provide recommendations for corrective action
• Provide guidance and best practice recommendations for IT security policies, procedures, and standards that meet standard and regulatory requirements
• Interact with project teams, providing technical direction and assist identifying compensating controls where preferred security requirements cannot be met.
• Prepare and document standard operating procedures and protocols
• Configure and troubleshoot security infrastructure devices
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement

Qualifications

• As a requirement of this position, all candidates must be a U.S. Citizen. In accordance with 8 U.S.C. 1324b(a)(2)(C), Epsilon will not consider candidates for this position who do not meet the aforementioned conditions.
• Must hold active DOD Interim Secret or Secret Clearance
• 8570 compliant IAT Level III Certification required (CASP+, CCNP Security, CISA, CISSP, GCED, GCIH, CCSP)
• Must have an Azure Cloud Security Certification.
• Experience with policy management in security tools like CrowdStrike or Defender.
• Working knowledge of McAfee endpoint security solutions.
• Advanced knowledge of Linux and Windows desktop and server operating systems.
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, network monitoring, log management, content filtering, etc.
• General working knowledge of network security; common ports and protocols.
• General knowledge of networking and troubleshooting network connectivity.
• Experience working with and/or managing a Threat and Vulnerability Management program.
• Experience in malware and threat analysis, software deployment, incident management, and patch management.

Pay Transparency StatementAMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $110,000.00/Yr. - USD $140,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.