Job Title: IT Cloud Security Engineer

B3 Group, Inc. is a fast-growing Service-Disabled Veteran-Owned Small Business (SDVOSB) certified health IT firm providing end-to-end technology support services to the federal government and enterprise customers. Our values-driven team of business, IT and management professionals blend innovation and client-first thinking to deliver sustainable solutions for better healthcare outcomes. Established in 2008 and located in Herndon, Virginia, B3 Group is founded on the principles of servant leadership. Those principles are reflected in every aspect of our operations.
B3 Group Inc is looking for an IT Cyber Security Engineer (Cloud) to help support the design, development, and delivery of enterprise-level cloud solutions for a federal client. The ideal candidate will have experience in all aspects of IT Security with a vast array of IT systems involving end-user as well as enterprise-level networks, cloud environments (AWS and MS Azure) including experience in IT Security Tools, network topologies, intrusion detection, PKI, cybersecurity and other secured networks. The Cyber Security Engineer will support all security operations and tasks, as well as assisting in technical support to monitor, correlate, identify, mitigate, manage, track and support processes for security incidents to facilitate continuous monitoring.
A B3 Technical Sr. Analyst will apply expert systems analysis and design techniques to complex enterprise systems. They will have a broad knowledge of data sources/flow, interactions of complex systems, and capabilities/limitations of systems software and computer equipment. The B3 Technical Sr. Analyst will be able to establish frameworks for new computer systems from feasibility studies to post-implementation evaluation, recognize probable conflicts, and integrate diverse data sources. They will provide innovative solutions for a variety of complex problems, and prepare overall project recommendations.

Qualifications

Key Responsibilities:
Working collaboratively with Developers, other Security and Systems Engineers, Project Managers, and internal stakeholders to implement and support the level of protection systems will need during the development and deployment process. Deep understanding of DevSecOps. Assist with identifying and supporting what changes or processes will satisfy the organization's security requirements. Supporting technical solutions that address vulnerability findings and security gaps Analyzing current system designs and requirements to ensure all current systems and system updates meet goals and expectations. Collaborate using information and knowledge sharing networks and professional relationships to achieve common goals between technical and non-technical personnel. Evaluating information security technologies and create recommendations and plans for implementation. Supporting the Sr. Cyber Subject Matter Expert (SME) in the review of technical, management, and operational Security Controls in accordance with the NIST and FedRAMP approved cloud and on premises system environments to ensure the completeness and effectiveness of the IT system's information technology and security solutions. Applied experience and knowledge of NIST Risk Management Framework (RMF) and how federal agencies apply this to secure their information systems. Applied experience and knowledge with Assessment and Authorization (A&A) including Authority To Operate (ATO) packages and its alignment with RMF processes. Act as a Cloud technical cybersecurity SME to meet current and future security design, and architecture requirements for IaaS, PaaS, and SaaS implementations. Experience integrating security controls in cloud environments to provide a holistic enterprise security view. Understand architectural, design, implementation, and security monitoring measures related to computer networks and software testing and validation procedures, programming, and documentation (Cloud Security, Application Security, Vulnerability Management, Machine Learning, AI Sandboxing). Understand and interpret cloud services that are offered on a platform, to include 3rd party services Conduct compliance reviews to ensure all products developed are in accordance with security standards. Perform qualitative assessment of current Cloud Computing Framework particularly as it relates to security in cloud environments. Summarize and document all security-related activity, with emphasis on high-risk activities and potential/actual security breaches and violations. In order to be successful in this position, we expect you to have the following skills and experience:
Bachelor's Degree in information systems, Computer Science, or related field required, OR 8 years additional years of work experience. Prefer at least 6 years of experience of related cybersecurity experience. Prefer industry-recognized certifications such as Certified Information Systems Security Professional (CISSP) and Certified Cloud Security Professional (CCSP). Demonstrated expertise in Cloud and on-premises security best practices. Requires strong analytical and organizational skills to include strong attention to detail. Strong interpersonal skills and ability to work collaboratively in a dynamic team environment. Excellent communication and technical documentation skills. Ability to prioritize and work on multiple projects and initiatives simultaneously and adapt to changing priorities and tight deadlines. Desired / Preferred Qualifications:
Experience supporting Department of Veterans Affairs (VA) and/or other federal organizations. Experience with Agile methodology and Scrum approach. AWS Certified Cloud Practitioner or Microsoft Certified Azure Fundamentals Demonstrated experience deploying/operating cloud security enterprise technologies Successful B3 Group employees will display the following characteristics:
You strive to be an expert in your field currently and in the future. You take care in learning your customer's business and drivers in order to ensure solutions meet not only technical needs, but also support their mission properly in a way that meets their client's mission. You like to make your client look good. You find solutions, where others only see problems. You are proactive, you make and meet commitments, and you perform your duties exceedingly well. You are aware of the client's needs at all times and are well-versed in what both your team and B3 Group can offer them as a whole. You have the ability to work with diverse, integrated, deliverable-driven teams to accomplish the larger mission. You take a collective responsibility to create an environment where colleagues feel included, respected, and comfortable to be themselves. Competitive Benefit Package available to all full time hires and is effective the first of the month following hire date.
B3 Group, Inc. does not discriminate in employment opportunities, terms and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.