HUD - Cloud Security Engineer
Role summary
cFocus Software is seeking a remote Cloud Security Engineer for their program supporting the Housing and Urban Development (HUD). The role requires a Public Trust clearance and a Bachelor's degree in a relevant field, with at least 3 years of experience in cloud security or cybersecurity engineering. Key responsibilities include designing, implementing, and maintaining security controls in AWS GovCloud, supporting security architecture validation, managing cloud-native and third-party security tools, performing continuous monitoring, and responding to security incidents. The engineer will also conduct vulnerability assessments, manage IAM, support data protection, and ensure compliance with federal cybersecurity frameworks like NIST and FISMA.
cFocus Software seeks a Cloud Security Engineer to join our program supporting Housing and Urban Development (HUD). This position is remote. This position requires a Public Trust clearance.
Qualifications:
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
- 3+ years of experience in cloud security engineering or cybersecurity engineering.
- Hands-on experience with AWS (preferably GovCloud) and cloud security services.
- Strong knowledge of federal cybersecurity frameworks (NIST SP 800-53, RMF, FISMA).
Duties:
- Design, implement, and maintain cloud security controls across AWS GovCloud and integrated cloud platforms.
- Support cloud security architecture validation, ensuring alignment with Zero Trust principles and federal mandates.
- Implement and manage cloud-native security tools (AWS Shield, GuardDuty, logging, etc.) and third-party tools (SIEM, SOAR, EDR).
- Perform continuous monitoring of cloud, network, and endpoint environments to detect and respond to threats in real-time.
- Support Security Operations Center (SOC) activities including incident detection, response, and mitigation.
- Conduct vulnerability assessments and manage remediation efforts, including tracking CISA Known Exploited Vulnerabilities (KEVs).
- Implement log aggregation, analysis, and security event monitoring using SIEM platforms such as Splunk.
- Support threat detection, threat hunting, and integration of threat intelligence feeds.
- Perform fit/gap analysis of cloud security posture and recommend improvements or new solutions.
- Configure and maintain identity and access management (IAM), privileged access management, and authentication systems.
- Support data protection strategies including encryption, DLP, and secure data handling.
- Implement and maintain security automation and orchestration (SOAR) for incident response.
- Support audit readiness, compliance reporting, and adherence to NIST, FISMA, FedRAMP, and RMF requirements.
- Collaborate with architects, engineers, and SOC analysts to ensure secure integration across systems.
- Maintain documentation of cloud security configurations, processes, and procedures.
zG4WOFcFxl