• Typically requires a bachelors degree in related field and five or more years of professional computer system security experience or related field. Equivalent professional experience may be substituted in lieu of education. • Equivalent professional experience may be substituted in lieu of education. • Must demonstrate a complete understanding of computer system security principles, concepts, practices and techniques. • Must have experience organizing, planning scheduling, conducting, and managing work assignments to meet project milestones or established completion dates. • Must possess the ability to understand new concepts quickly and apply them in an evolving environment while contributing to the development of new processes. • Must be customer focused and possess: • (1) the ability to identify issues, analyze and interpret data and develop solutions to a variety of complex issues; • (2) strong analytical skills, verbal and written communication skills to accurately document, report and present findings; • (3) strong interpersonal skills and ability to interface with other professionals; and • (4) strong computer skills. • Ability to work both independently and in a team environment is essential as is the ability to work extended hours as required. Desired Skills: • Experience supporting DoD contracts and working with Controlled Unclassified Information (CUI). • Experience conducting or supporting security audits, assessments, or authorization activities for cloud systems. • Familiarity with FedRAMP, NIST SP 800-171, NIST SP 800-53, or other USG cybersecurity frameworks. • Hands-on experience with AWS security services (e.g., IAM, KMS, CloudTrail, GuardDuty, Security Hub, Config) and securing workloads at IL5 or similar impact levels. • Experience with cloud security architecture and best practices for multi-account AWS environments, including network segmentation, zero trust concepts, and secure landing zones. • Experience with GRC (Governance, Risk, and Compliance) platforms. • Knowledge of supply chain risk management requirements (e.g., NIST SP 800-161). • Experience with SIEM tools, vulnerability scanners, and other cybersecurity monitoring platforms. • Relevant certifications such as CISSP, Security+, CISM, CISA, CRISC, AWS Certified Security - Specialty, or AWS Certified Solutions Architect. • Experience supporting RMF or other authorization processes for cloud-based USG information systems.