Cloud Security Engineer - Mid

Description

Contingent Upon Contract Award

Remote with occasional on-site support

Connected Logistics is seeking a Mid-Level
Cloud Security Engineer to support the Cybersecurity Architecture and Engineering Services supporting the Department of Veterans Affairs (VA) Office of Information Security (OIS) Cybersecurity Operations Systems Engineering (COSE) program
.

The Mid-Level
Cloud Security Engineer serves as a Cybersecurity Information Security Analyst responsible for protecting sensitive information and supporting incident response activities across enterprise and cloud environments. The role focuses on the identification, containment, eradication, and recovery of cybersecurity incidents involving Personally Identifiable Information (PII) and PII-related data breaches. The Cloud Security Engineer applies Data Loss Prevention (DLP) capabilities to identify improperly stored or transmitted PII, supports the quarantine and remediation of exposed information, and recommends appropriate actions to reduce the risk of unauthorized access.

The engineer works closely with technical stakeholders and mission partners to coordinate incident response activities, validate corrective actions, and maintain compliance information security and privacy requirements.

• Perform cybersecurity incident response activities involving PII incidents and PII-related data breaches, including identification, containment, eradication, recovery, and validation of corrective actions.
• Utilize Data Loss Prevention (DLP) tools and security technologies to identify PII that is improperly stored, handled, or transmitted.
• Identify and investigate potential exposure of PII data at rest and data in transit.
• Perform or coordinate the quarantine of improperly stored PII to prevent unauthorized access, disclosure, or further distribution.
• Analyze security incidents and recommend appropriate technical and procedural actions to mitigate risks associated with unauthorized access to sensitive information.
• Support the implementation and validation of appropriate security controls designed to safeguard PII and other sensitive information.
• Engage with system owners, cybersecurity teams, privacy personnel, technical stakeholders, and mission partners to facilitate the containment, eradication, remediation, and recovery of PII-related incidents.
• Track remediation efforts and validate that corrective actions effectively address identified security and privacy risks.
• Ensure incident response and remediation activities comply with applicable iformation security and privacy policies.
• Support the assessment of security events and potential data breaches to determine scope, affected information, and required remediation activities.
• Document incident findings, remediation activities, security recommendations, and validation results to support compliance and operational reporting.
• Collaborate with cloud, infrastructure, application, and cybersecurity teams to integrate appropriate data protection and information security controls into supported environments.

• Public Trust: T4 or T5 (TS)
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related technical discipline or an Associate's degree in the above discipline with an additional 2 years of experience.
• Minimum of 5 years of relevant professional experience in cybersecurity, security engineering, security architecture, information technology, or a closely related field.
• Demonstrated experience analyzing and defining security requirements for complex IT systems or applications.
• Experience evaluating security technologies and incorporating security capabilities into technical solutions.
• Experience designing, engineering, or implementing cybersecurity solutions.
• Experience performing cybersecurity risk analysis and risk assessments.
• Ability to analyze technical, mission, and security requirements and translate those requirements into implementable security solutions.
• Ability to communicate complex cybersecurity concepts and technical recommendations to engineering teams, technical leadership, and other stakeholders.
• Experience providing technical direction, oversight, or supervision to technical personnel.

• Experience designing and securing cloud-based, hybrid-cloud, or enterprise IT environments.
• Knowledge of cloud security architecture, security engineering principles, and security control implementation.
• Experience integrating…