Sr. Cloud Security Engineer; Remote

Overview

• Tier One Technologies is seeking a Sr. Cloud Security Engineer to support our direct US Government client.
• This contract-to-hire position is 100% remote.
• US citizenship is required.
• SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.

• Responsible for the application security function and for information technology security (Cybersecurity/Info Sec) engineering, and design and serves as a technical expert authority.
• Solve significant problems complicated by interfaces and inter-relationships between and among programs, systems, functions, applications, and numerous critical issues for agency-wide information technology solutions, operations, and maintenance supporting the security of agency infrastructure, systems, and information.
• Manage and administer a wide range of security systems and tools:
  • Administer and operate cloud-based security tools such as, Azure Security Center (Sentinel, Log Analytics, Azure WAF, Defender for Identity, Privileged Identity Manager);
    Microsoft 365 Security Suite (Defender, Advanced Threat Protection, Cloud Application Security, Protection Portal);
    Microsoft Security and Compliance Center;
    Microsoft Endpoint Manager (Intune); multi-factor authentication (MFA); web content filtering; and secure document sharing and collaboration solutions.
  • Responsible for primary or alternate management of all IT Security systems including patch management, upgrades, integration engineering, and reporting.
  • Manage security incident detection, response, remediation.
  • Conduct cyber threat and vulnerability analysis and remediation.
  • Develop security metrics and manage reporting and compliance.
  • Serve as Incident Response Team member.
  • Support operational implementation of FISMA/NIST standards and industry best practices.
  • Manage IT Security awareness training program in coordination with the Learning Management team, to include developing and delivering IT Security awareness training modules.
  • Manage Password Management system in coordination with Service Desk.
  • Respond to IT Security trouble tickets generated by customers and IT staff. Identify solutions, work with customers and the team to execute solutions, and manage ticket input, updates, and resolution in the company’s ticketing system to maintain service level agreements.
• Support Security Operations and Engineering by providing technical solutions, support and expertise.
• Identify security risks and recommend risk mitigation strategies.
• Review new and existing systems to ensure baseline security requirements are met and to recommend security enhancements.
• Develop security architecture and technical solutions for security products.
• Develop and execute project plans to engineer, construct, deploy, and monitor/manage IT Security infrastructure solutions.
• Demonstrate in-depth understanding of security requirements associated with cloud- hosted environments, services, and solutions.
• Evaluate, recommend, and implement security controls associated with cloud-hosted environments, services, and solutions.

• Bachelor's Degree in Cybersecurity/Information Technology Security or related field of study from an accredited college or university.
• Advanced degree in Cybersecurity or related field (desired).
• 5+ years of specialized experience with hands‑on skills in performing IT Application Security Assessments and specialized experience in Secure SDLC and Source Code Analysis (Manual &Tools) on Web‑based Applications.
• CERTIFICATIONS (One or more required):
  • Certified Secure Software Lifecycle Professional (CSSLP)
  • Certified Cloud Security Professional (CCSP)
  • Offensive Security Certified Professional (OSCP)
  • EC-Council Certified Application Security Engineer (CASE)
  • GIAC Certified Web Application Defender (GWEB)
  • Azure Developer Associate
  • Microsoft 365 Certified Security Administrator Associate
  • Microsoft Certified Azure Security Engineer Associate
  • Public Trust Investigation security clearance.
• Hands‑on experience with Static and Dynamic Application Security Testing using tools like HP Fortify, HP Web Inspect, HCL Appscan, Snyk, Checkmarx, Synopsys, and Veracode.
• Strong experience in…