Systems Engineer Virginia

This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance.2HB Incorporated is seeking a Systems Engineer in order to support its government customer in Herndon, VA. This role is targeting a junior to mid level candidate with relevant background and experience to meet the needs of the position. The successful candidate will:

• Manage security assessment, security compliance, change management, and continuous monitoring activities across 5 cloud service providers (Amazon Web Services, Google Cloud, Oracle Cloud, Microsoft Azure, and IBM Cloud) through the United States Government's office.
• Assess cloud security technologies for security gaps and weaknesses according to industry standards.
• Analyze security scan findings and perform risk analysis on securityscan findings.
• Review cloud security body of evidence packages for completenessand accuracy.
• Collaborate with other internal components and security peers todetermine security and potential weaknesses of cloud infrastructure and cloud services.
• Advise United States Government leadership on cloud security services.
• Analyze system alerts to determine if a security weakness exists anddocument risk mitigation procedures.
• Sustain and evolve the United States Government's standard operating procedures to meet Program Objectives.
• Facilitate technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.

Required Skills and Demonstrated Experience:

• Demonstrated experience facilitating TEMs with cloud service providers to review cloud service architectures
• Demonstrated experience maintaining assessment and authorization (A&A) packages across multiple services or systems in accordance with FIPS-199, NIST 800-53, and CNSS 1253 requirements.
• Demonstrated experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, IBM Cloud, or Microsoft Azure cloud architecture.
• Demonstrated experience utilizing or reviewing cross domain technology and common architecture designs.
• Demonstrated experience consulting project teams on system architecture and security posture.
• Demonstrated experience with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.
• Demonstrated experience creating, monitoring, or closing system or service Plans Actions and Milestone items (POA&Ms).
• Demonstrated experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.
• Demonstrated experience with the common control provider concept within the NIST Risk Management Framework.
• Demonstrated experience with security control assessments to include working with SCAs and preparing security packages for SCAs.
• Demonstrated experience conducting information system security engineering activities.

• Demonstrated experience using the Sponsors or IC element A&A process.
• Demonstrated experience creating or reviewing A&A body of evidence documentation in a cloud security environment.
• Demonstrated experience identifying, implementing, or reviewing appropriate information security controls.
• Demonstrated experience working in Xacta 360.

This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance.