Cybersecurity Engineer

This role is responsible for securing and maintaining AWS GovCloud infrastructure in support of continuous authorization (cATO) within classified environments. The position combines hands-on cloud security engineering including boundary protection, vulnerability management, STIG/SRG assessments, patching, and POA&M tracking with NIST 800-53 and FedRAMP compliance evidence production and continuous monitoring. The engineer will triage security findings, review infrastructure-as-code changes for security impacts, coordinate incident response across cross-contractor teams, and build strong client relationships through clear, consistent communication.

DUTIES AND RESPONSIBILITIES

Client Relationship

• Build a great relationship with the client

Understand our clients

drivers, needs, and pains

• Work with internal and external leadership and engineering teams to formulate the best and consistent client communication

Technical Responsibilities

• Operate and maintain cloud boundary protection capabilities, including perimeter controls, segmentation, security logging, and monitoring
• Perform infrastructure vulnerability assessments, configuration reviews, hardening, patching, and remediation validation against applicable STIG, SRG, and cATO requirements
• Maintain infrastructure POA&Ms and track critical and high findings through remediation or approved disposition within BESPIN Security’s cATO timelines
• Produce and maintain infrastructure authorization evidence, including boundary diagrams and dataflows, inventories, implemented and inherited controls, STIG/SRG/SCAP results, patch records, and continuous monitoring records
• Keep evidence current before each boundary change and consolidate infrastructure evidence quarterly ahead of the companion contractor’s BOE delivery
• Review security impacts of landing-zone, identity and access, network, and infrastructure-as-code changes; coordinate security requirements at cross-domain interfaces
• Implement and document security controls aligned with NIST 800-53 and FedRAMP compliance requirements, supporting continuous authorization activities across cloud environments

REQUIRED QUALIFICATIONS

• Ability to quickly secure Secret security clearance
• Experience working in classified environments and handling classified information in accordance with applicable security requirements
• Bachelor’s degree
• Applying secure coding practices and documentation standards
• Collaborating with cross-functional teams and other vendors to define, design, and deploy features
• Demonstrated experience securing AWS cloud infrastructure, including identity and access, networking, segmentation, logging, monitoring, and boundary protection
• Hands-on experience with infrastructure vulnerability management, patching, STIG/SRG assessments, SCAP results, and POA&M tracking
• Experience with security incident triage and coordination across infrastructure, application, and Government security teams
• Ability to review infrastructure-as-code and configuration changes for security impacts
• Demonstrated proficiency with AWS GovCloud environments and AWS-native security services
• Ability to troubleshoot and debug applications to ensure optimal performance

PREFERRED QUALIFICATIONS

• Knowledge of DoD policies, regulations, procedures, and processes
• Experience in the technology industry or related field
• Experience with professional services or consulting
• Direct experience with AWS GovCloud, JOSCE/JWCC environments, eMASS, and cross-domain interfaces would also be valuable
• Experience with GitLab, including security pipeline configuration and management, multi-repository pipeline jobs, and CVE analysis and allow-list maintenance
• Experience supporting RMF/cATO processes and preparing infrastructure control and configuration evidence, including familiarity with NIST 800-53 and FedRAMP compliance frameworks
• Ability to distinguish inherited controls from contractor-implemented controls and maintain evidence as infrastructure changes

PHYSICAL AND MENTAL REQUIREMENTS

• Continuous mental and/or visual attention required
• Requires the ability to remain stationary for long periods of time
• Regularly communicates to various people
• Large amount of reading and analysis is required
• Requires the ability to focus for an extended period of time
• Requires the ability to travel
• Requires the ability to work both remotely and at clients’ offices