Cloud Seucrity SME / Security Engineer

Get a free resume review

Key Responsibilities

Cloud Security: Design, implement, and manage security architectures for cloud environments (e.g., Google Cloud, AWS, Azure). This includes securing cloud resources, managing access control, implementing network security, and ensuring data protection.
Software Security: Integrate security practices throughout the software development lifecycle (SDLC). This involves conducting code reviews, performing vulnerability assessments, and promoting secure coding practices.
AI System Security: Assess and mitigate security risks specific to AI systems, including data poisoning, adversarial attacks, and model theft.
Compliance and Accreditation: Ensure that systems and processes meet relevant government security standards and regulations (e.g., FedRAMP, NIST 800-53, DISA Impact Levels). This includes conducting security audits, preparing documentation, and participating in accreditation activities.
Incident Response: Develop and execute incident response plans, investigate security breaches, and implement corrective actions.
Security Awareness: Promote security awareness across the organization through training, communication, and best practice guidance.
Threat Intelligence: Stay abreast of emerging security threats and vulnerabilities, and proactively implement measures to mitigate risks.

Desired Qualifications

Compliance Expertise: Knowledge of government compliance frameworks and accreditation processes, such as FedRAMP, NIST 800-53, and FISMA
Experience with the DISA Cloud Security Requirements Guide (SRG)
Deep knowledge of security technologies such as firewalls, intrusion detection systems, and security information and event management (SIEM) tools
Familiarity with secure coding practices, vulnerability assessments, and vulnerability remediation
Experience with security automation and DevSecOps practices and Infrastructure as Code (IaC)

What we are looking for in a strong candidate:

Strong understanding of cloud security, software security, and AI system security
Experience documenting system security posture and adherence to security controls, including creating and maintaining security plans, risk assessments, and incident reports
Hands-on experience with security tools and technologies for cloud environments (e.g., Google Security Command Center, AWS Security Hub, Azure Security Center, Tenable Products)
Knowledge of specific AI/ML frameworks and libraries and how to assess their implementations for security
Bonus points for relevant security certifications (e.g., CISSP, CCSP, Professional Cloud Security Engineer)
Experience working with Department of Defense (DoD) security stacks including VDMS, VDSS, BCAP, and other related security frameworks, tool, and common practices

Game Plan Tech is an equal opportunity employer committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all individuals, regardless of race, color, religion, gender, gender identity, sexual orientation, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable federal, state, or local law. We value diversity and are committed to ensuring a respectful, inclusive, and supportive environment for all employees, contractors, and applicants.

If you require reasonable accommodation during the application process or employment, please contact hr@gameplan.tech.

What You Should Know About Cloud Seucrity SME / Security Engineer, Game Plan Tech

At Game Plan Tech, we're on the lookout for a Cloud Security SME / Security Engineer to join our dynamic team! This role is ideal for someone passionate about safeguarding cloud environments and ensuring the secure functionality of AI systems. As a Cloud Security SME, you'll be responsible for designing and implementing robust security architectures across various cloud platforms such as Google Cloud, AWS, and Azure. You’ll dive deep into managing access controls and implementing network security tactics, ensuring data protection is top-notch. You'll also integrate security features throughout the software development lifecycle, performing code reviews and vulnerability assessments to promote secure coding practices. It's crucial that you're updated on emerging threats, as you'll assess risks that pertain specifically to AI systems, addressing challenges like data poisoning and adversarial attacks. With your expertise, you will guide our compliance efforts, ensuring we meet governmental security standards such as FedRAMP and NIST 800-53. The role isn’t just about prevention; you’ll develop incident response plans, handle breaches, and promote security awareness in our organization. If you thrive in a collaborative and innovative environment, and are ready to make an impact, we would love to hear from you!

Frequently Asked Questions (FAQs) for Cloud Seucrity SME / Security Engineer Role at Game Plan Tech

What are the primary responsibilities of a Cloud Security SME / Security Engineer at Game Plan Tech?

As a Cloud Security SME / Security Engineer at Game Plan Tech, you will design and manage security architectures for cloud environments, integrate security practices during the software development lifecycle, assess risks related to AI systems, ensure compliance with standards like FedRAMP, and develop incident response plans to tackle breaches effectively.