Cloud Response Subject Matter Expert (SME)
About the role
Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is hiring a Cloud Response Subject Matter Expert (SME) to support our customer in Quantico, VA. The Cloud Response SME will build and maintain detection use cases to detect unauthorized activity. They will also assist with incident investigation and help the customer design and implement new defensive cyberspace tools in cloud computing environments.
Responsibilities
- Developing detection use cases specifically focused on detecting unauthorized activity in cloud computing environments using the customer's existing cloud computing defense tools
- Assisting with the investigation of and response to cyberspace incidents involving cloud computing environments and technologies
- Assisting the customer with designing and deploying new capabilities in cloud computing environments
- Demonstrating effectiveness by successfully identifying and preventing Red Team activity in the customer's cloud computing environment
- Updating tactics, techniques, procedures, training, and education documentation as needed
- Preparing and presenting a course that covers the basics of Cloud Computing security, common attack scenarios, and specific tactics, techniques, processes, and procedures
- Providing support to maintain the customer's CSSP accreditation per the standards, including documentation and technical writing support
This position is considered essential and will be required to report during hazardous weather, power outages, fuel shortages, pandemics, and other emergencies.
Requirements
- Active TS/SCI (DoD TOP SECRET clearance with SCI eligibility) is required. Applicant selected will be subject to security investigation(s) and must maintain eligibility requirements for access to classified information
- Five (5) years of practical experience in a Cybersecurity, Engineering, T&E, or A&A-related field (Cloud Investigations, Incident Response, Detection Engineering, etc.)
- College degree in a technical or managerial-related discipline; OR a High School diploma/H.S. equivalency certificate with seven (7+) years of experience in Cybersecurity, Engineering, T&E, or A&A
- DoD/W 8570 IAT Level III certification (valid/current)
- DoD/W 8570 CSSP Analyst certification (valid/current)
- Future requirement (in lieu of DoD/W 8570 certification requirements): DoD/W 8140 Cyber Workforce (DCWF) Role 511 Cyber Defense Analyst (i.e., CCNA Cybersecurity, CySA+, CFR, GCFA, GCIA, GICSP) and/or 531 Cyber Defense Incident Responder (i.e., CISSP, CySA+, CFR, GCFA, GCIA, GICSP) certification at the Advanced Proficiency Level
Desired (one or more of the following):
- CompTIA Cloud+
- CCSP (Certified Cloud Security Professional)
- Microsoft Azure Fundamentals
- AWS Certified Solutions Architect - Associate
- AWS Certified Solutions Architect - Professional
- AWS Certified Cloud Practitioner
- Google Associate Cloud Engineer