Lead Cloud Security Engineer (CISSP)

• Cloud security reviews and assessments
• Identify and remediate security/non-compliance issues
• Implement preventative security controls
• Drive security issues from a configuration/admin perspective
• Cloud networking changes and security remediation
• Larger security projects, including:
• AWS GuardDuty
• Azure networking/security
• Work autonomously and drive issues to resolution
• Ensure that security risks are comprehensively and effectively managed though leading the application of established and ad hoc processes and techniques to identify, validate, and prioritize.
• Lead the identification of security requirement deficiencies, eliciting of security requirements, and the architecture and design of security controls.
• Develop and implement strategies to promote consistent use of security controls across the enterprise.
• Lead the operation and monitoring of security controls.
• Establish, implement, and promote security control operation and monitoring strategies.
• Ensure that controls are operating effectively; resolve operating discrepancies.
• Review, triage, and prioritize control output.
• Take appropriate action to resolve security discrepancies.
• Lead the identification, evaluation, and recommendation of new security technologies, techniques, and tools.
• Lead team in defining, reviewing, and promoting information security policies, standards, guidelines, and procedures.
• Lead and champion efforts to enforce and monitor compliance with internal and external regulations, policies, and standards.
• Establish and promote strategies to ensure that compliance is effectively monitored and enforced.
• Direct internal process improvement initiatives.
• Provide feedback on processes by offering suggestions.
• Mentor junior staff.
• Participate in external process improvement committees as a Quality Assurance representative.
• Provide backup coverage for next level management, as appropriate.
• Assist with adherence to technology policies and comply with all security controls.
• Ensure all work products meets/exceeds the firm standards. Demonstration of the firm’s values. Collaboration, both in-person and virtually, in furtherance of the firm’s mission of investor protection and market integrity.

• Strong AWS and Azure security experience
• 8+ years of security experience
• 2+ years in a Lead role (ideally current)
• CISSP - non negotiable
• Cloud Architect certification in AWS or Azure

Software Guidance & Assistance, Inc., (SGA), is searching for a Lead Cloud Security Engineer with a CISSP for a contract assignment with one of our premier Regulatory clients. Must be local and willing to work hybrid in one of these offices: Tysons VA or Rockville MD., By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let’s work better together, we mean it. You’ll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .