Cybersecurity Engineer - Health IT

Cormac Corporation Leesburg, Virginia, United States

CORMAC is seeking a Cybersecurity Engineer to safeguard the systems of the CMS Reporting and Quality division, which operate in the CMS AWS Cloud. This role guides teams on security policies and compliance and maintains a strong security posture across applications and cloud infrastructure. The Engineer works with CMS stakeholders on governance and works hands‑on with engineering and Dev Ops teams to implement required changes and drive remediation.

• Provide guidance to Product Owners, ISSOs, engineering, and infrastructure staff on implementation of security policies, standards, and procedures
• Analyze and interpret CMS security requirements, including ARS 5, FISMA, FedRAMP, HIPAA, NIST, and Zero Trust directives, and communicate them clearly to non-security personnel
• Develop, update, and defend ATO artifacts such as System Security Plans, incident response plans, contingency plans, and related security documentation
• Conduct vulnerability and compliance assessments, review findings from AWS Inspector and AWS Security Hub, and determine severity and remediation priority
• Drive closure of security findings in close collaboration with developers, Dev Ops, and infrastructure engineers, including findings from container and code scans in CI/CD pipelines
• Secure the AWS environment, including IAM least-privilege access, KMS encryption, Security Groups, AWS Backup, Cloud Watch monitoring, and logging
• Review and secure identity integration with HARP/IDM, including authentication, authorization, role mapping, and user access lifecycle
• Respond to alerts and security incidents, investigate and resolve higher level incidents, and maintain security tool dashboards and reporting
• Present vulnerability and compliance reviews to Government stakeholders and plan remediation or investigation activities
• Secure the Databricks environment, including workspace access controls, secrets management, encryption, and data protection for PII and PHI
• Track security findings, incidents, and remediation through Service Now, and monitor application and infrastructure logs using Amazon Cloud Watch and New Relic
• Assess security and privacy implications of AI/LLM-enabled capabilities, and of PII and PHI handling, and educate teams on secure development practices

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a similar field
• Must be a U.S. Citizen
• Must be able to obtain a Public Trust (Tier I) Clearance
• Minimum of 8+ years of progressive experience in information security, cybersecurity engineering, or system security roles
• Proven experience owning and maintaining an Authorization to Operate (ATO), including authoring and defending security artifacts such as System Security Plans, Incident Response Plans, and contingency plans
• Demonstrated hands‑on experience managing vulnerability and compliance scanning and remediation programs using tools such as AWS Inspector and AWS Security Hub
• Strong hands‑on experience securing cloud‑based environments on AWS (IAM, KMS, Security Groups, Cloud Watch)
• Working knowledge of FISMA, FedRAMP, NIST, ARS, and HIPAA requirements
• Ability to assess security findings, determine risk severity, prioritize remediation, and drive closure with engineering and Dev Sec Ops  teams
• Strong written and verbal communication skills, with the ability to explain security risks and remediation strategies to technical teams, leadership, and Government stakeholders, and to work within Agile (SAFe, Scrum, or Kanban) Dev Sec Ops  teams

• Master's degree in Cybersecurity, Computer Science, Information Technology, or a similar field
• Federal…