Senior Security Subject Matter Expert (Cloud & Security)

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Subject Matter Expert (Cloud & Security) based in United States.** This role provides senior-level security expertise for cloud systems supporting complex Federal and Department of Defense (DoD) environments. You will design, implement, and maintain security controls across cloud infrastructure, cybersecurity operations, and system development lifecycles. The position combines hands-on cloud security engineering with risk management, compliance, vulnerability management, and incident response. You will primarily secure AWS environments while applying broader knowledge of Azure and/or Google Cloud technologies. Your work will help protect critical systems through hardening, monitoring, access controls, security automation, and forensic analysis. You will also contribute to emerging technology security, including the review of artificial intelligence-related changes and updates. This is an opportunity to influence security architecture and operational resilience while supporting rigorous government and industry compliance standards. ### Accountabilities - Design, implement, maintain, and continuously improve security controls across system development and operational environments. - Secure AWS-based cloud environments while applying working knowledge of Azure and/or Google Cloud security capabilities. - Perform system hardening, vulnerability scanning, security monitoring, and incident response activities to protect cloud and enterprise environments. - Analyze security logs, develop and refine alerts, and support forensic investigations into potential security incidents. - Contribute to security architecture design and the integration of security controls into new and existing systems. - Support patch selection, deployment, and updates while helping ensure systems remain secure and appropriately maintained. - Protect the security, integrity, and appropriate use of training data and other sensitive information. - Implement and oversee network monitoring, access controls, security monitoring, and related protective measures. - Review and approve security-related changes and updates involving artificial intelligence and other emerging technologies. - Support compliance initiatives aligned with Cybersecurity Maturity Model Certification (CMMC) Level 2, Service Organization Control (SOC) 2, and ISO/IEC 27001 standards. - Contribute to security documentation, risk assessments, control implementation, audit preparation, and ongoing compliance activities. - Apply security engineering and automation practices to strengthen operational efficiency, resilience, and threat detection capabilities. ### **Requirements** - A Bachelor’s degree in a relevant field is required, or equivalent professional experience may be considered. - At least 3 years of relevant professional security experience is required. - Hands-on experience securing on-premises and AWS environments is required. - Demonstrated experience with cloud security technologies, enterprise security tools, and security control implementation. - Proficiency in Python for security automation, tooling, scripting, or related engineering applications. - Strong understanding of cybersecurity principles, cloud infrastructure security, system hardening, vulnerability management, monitoring, access controls, and incident response. - Experience supporting security architecture and integrating security controls into enterprise systems is preferred. - Experience working in Federal, Department of Defense, or other regulated environments is highly desirable. - Familiarity with Cybersecurity Maturity Model Certification (CMMC), SOC 2, and ISO/IEC 27001 compliance requirements is preferred. - Experience with artificial intelligence, machine learning systems, or emerging technology security is desirable. - Relevant certifications such as CompTIA Security+, GIAC, Global Industrial Cyber Security Professional (GICSP), CompTIA Network+, or ITIL are preferred. - Strong analytical and problem-solving abilities, with the capacity to investigate security issues and develop practical solutions. - Ability to communicate technical security risks and recommendations clearly to technical and non-technical stakeholders. - An **active Top Secret clearance with polygraph** is required. ### **Benefits** - Opportunity to work on secure cloud and cybersecurity initiatives supporting Federal and Department of Defense environments. - Exposure to advanced cloud security, cybersecurity operations, compliance, artificial intelligence security, and emerging technologies. - Opportunity to contribute to security architecture, risk management, automation, and enterprise security improvements. - Professional environment focused on protecting mission-critical systems and strengthening security resilience. - Opportunity to apply and expand expertise across AWS and other major cloud platforms. - Experience supporting recognized security and compliance frameworks, including CMMC Level 2, SOC 2, and ISO/IEC 27001.