Senior Cloud Information System Security Engineer

• Lead, mentor, act as a SME (Subject Matter Expert) and supervise a team of contractor security professionals responsible for the end-to-end implementation of the Risk Management Framework (RMF) lifecycle for FBI IT systems.
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.

• 10 + years of experience in secure design, analysis, and test of information security systems and products.
• 10 + years of experience applying methods, standards, and approaches for ensuring baseline security safeguards are appropriately implemented and documented.
• 10 + years of experience creating and updating security test plans for detecting and mitigating risk to information systems.
• Bachelor’s degree or equivalent (6 additional years of experience) or Master’s degree with 7 + years of relevant experience.
• Must possess one of the following DoD 8140.03 Advanced proficiency certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP., * Possession of a Cloud certification (e.g., AWS Certified Security - Specialty, CCSP, AWS Solutions Architect Associate, AZ-500, or Google Professional Cloud Security Engineer).
• Demonstrated experience leading RMF lifecycle teams across cloud and hybrid enterprise environments.
• Experience with DOJ/FBI GRC applications such as Xacta or JCAM.

Clearance Requirements:

• Active Top Secret clearance with SCI eligibility is required.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets and office machinery.
• Frequently communicates with co-workers, management, and customers, and must be able to exchange accurate information in these situations.