Information Security Engineer

Information Security Engineer

Nightwing is a mission‑critical provider of cyber operations and intelligence support. As part of the Engagement Support Services (ESS) contract we are deploying secure, cloud‑based engagement kits for cyber incident response and threat hunting. The Information Security Engineer will ensure the security, compliance, and resilience of these Bespin cloud kits throughout their lifecycle.

• Implement and maintain security controls for cloud engagement infrastructure.
• Enforce encryption standards (TLS
  1.2/1.3) and hardened cloud configurations.
• Conduct continuous security monitoring and threat detection.
• Manage vulnerability assessment and remediation processes.
• Implement namespace obfuscation and data protection measures.
• Ensure compliance with federal security frameworks (NIST, FedRAMP, etc.).
• Conduct security reviews of engagement kit configurations and deployments.
• Coordinate incident response activities related to security events.
• Develop and maintain security documentation and standard operating procedures.
• Perform security assessments of third‑party cloud services and dependencies.
• Implement and manage identity and access management controls.
• Monitor for and respond to potential security incidents or anomalies.
• Support security aspects of engagement kit decommissioning and data sanitization.
• Provide security guidance and training to operations teams.

• U.S. Citizenship.
• Active TS/SCI clearance (must be able to obtain DHS suitability).
• 5+ years of experience in information security, preferably in cloud environments.
• Strong knowledge of AWS security services and best practices.
• Experience with security monitoring and SIEM tools.
• Understanding of encryption, PKI, and data protection technologies.
• Knowledge of federal security compliance requirements (FISMA, FedRAMP, NIST
  800‑53).
• Experience with AWS EC2/S3/VPC deployment and configuration, Cloud Trail, Cloud Watch, AWS Security Hub.
• Experience with Nmap, Nessus, Splunk administration/configuration.
• Linux/Unix system administration (Alma9, RHEL, CentOS, Ubuntu).
• Experience with NIST, STIG, ATO, SOC, or system hardening.
• Experience with vulnerability management and penetration testing.
• Strong understanding of network security principles.
• Experience with security automation and scripting.
• Relevant security certifications (CISSP, Security+, CCSP, or similar).

• Experience supporting incident response or threat hunting operations.
• Knowledge of container and Kubernetes security.
• Experience with infrastructure‑as‑code security scanning.
• Familiarity with STIG implementation and compliance automation.
• Background in forensics or malware analysis.
• Experience with cloud security posture management tools.
• Knowledge of Dev Sec Ops  practices and tools.

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; or High School diploma and 7+ years of directly relevant experience.

• AWS Certified Security – Specialty
• DoD
  8140 IAT Level3
• Syndeo: ESS‑3416

Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age or any other federally protected class.