Remote job
AWS Assessor
Job details
About this role
Role overview Assess the security of cloud systems supporting a federal education program. You will evaluate whether security and privacy controls are properly implemented and effective, then document findings and recommendations to support authorization decisions. The position is remote and contingent on customer approval.
Responsibilities - Assess cloud environments for security weaknesses and risks, including findings surfaced by cloud security posture management tools. - Review controls and control enhancements against applicable requirements, testing whether they are implemented correctly and operating as intended. - Develop and execute cloud Security Controls Test plans, then produce reports that explain assessment results and detailed findings. - Review cloud system documentation and other artifacts for completeness and accuracy in support of authorization to operate requests. - Analyze security needs and recommend improvements to cloud security strategies and controls.
Requirements - Bachelor’s degree or equivalent, with at least 10 years of related experience. - At least five years assessing security controls or responding to audit findings for cloud-based systems. - Senior professional security certification, such as CISSP or equivalent, and AWS Certified Cloud Practitioner or higher. - Experience in cloud security architecture, network security, identity and access management, CSPM tools, security-as-code methods, and container security. - Knowledge of risk assessment, security audits, compliance, and government frameworks and policies, including FedRAMP, RMF, FISMA, FIPS, and NIST. - Ability to obtain a high-risk public trust clearance; strong communication and interpersonal skills.
Nice to have - Top Secret clearance and experience with AWS Security Hub.
Benefits and work setup Remote work. Benefits listed include health, dental, vision, disability and life insurance; health and flexible spending accounts; paid time off and floating federal holidays; a 401(k) match; and incentives for relevant certifications.