Cloud Information Assurance Engineer
Telos Corporation is trusted by the most security-conscious organizations to protect their vital IT assets. Our reputation rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our cyber, cloud, and enterprise security solutions and be part of the Telos culture.
Location: Tysons, VA (Google Client Site)
About the role
As a Cloud Information Assurance Engineer, you will contribute to the end-to-end compliance lifecycle for client cloud products, guiding them from initial inception through final authorization. This role demands a balanced expertise in GRC governance and hands-on Cloud Security Engineering, all while navigating our client's unique, fast-paced environment. The ideal candidate will combine a deep technical understanding of cloud architectures and security with proficiency in the Risk Management Framework (RMF) to drive secure innovation.
Responsibilities
- Steer novel cloud services and products from inception to authorization.
- Partner with engineering and compliance teams to develop all necessary artifacts for the compliance package.
- Conduct Security Impact Analyses (SIAs) for all System Change Requests (SCRs) and update compliance documentation to reflect approved changes.
- Perform end-to-end maintenance of System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
- Lead internal and external audit evidence management, ensuring 100% on-time fulfillment of requests.
- Maintain and update compliance artifacts in GRC tools, ensuring precise mapping of controls to frameworks.
- Consult with engineering teams to ensure security controls are defined and implemented throughout the system development lifecycle.
- Collaborate with the Configuration Change Board (CCB) to ensure changes align with security policies and verify that they do not introduce new vulnerabilities.
- Leverage client automation tools to identify security workflow bottlenecks and design automated solutions for compliance operations.
Requirements
- Active TS/SCI clearance.
- Bachelor’s degree in computer science, engineering, information assurance, or a related discipline and at least 5 or more years of experience in an information technology role. Additional experience may be substituted for a degree.
- Currently DOD 8140 certified or possesses certifications to be eligible for DOD 8140 certification.
- Experience with cloud service providers such as AWS, Azure, GCP, etc.
- Experience in information assurance and/or governance, risk, and compliance.
- US citizenship (required for access to sensitive information).
Skills
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong attention to detail and ability to document findings accurately.
- Effective communication and interpersonal skills to collaborate with diverse stakeholders.
- Ability to work independently and as part of a team.
- Demonstrated "self-starter" traits.
Benefits
- Generous paid time off.
- Medical, dental, and vision coverage.
- Tuition reimbursement.
- 401k retirement plan.
Pay
The annual salary range for this role is $135,000–$155,000.