FedRAMP Senior Cyber Engineer (Multiple Levels)
Noblis - Washington, DC
Apply NowJob Description
OverviewNoblis (and our wholly owned subsidiaries, Noblis ESI, and Noblis MSD tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us (work at a Noblis company? Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards (Noblis maintains a drug-free mitment to Non-DiscriminationAll qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us (is the Law (| E-Verify (| Right to Work (RewardsAt Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers pensation at Noblis is determined by various factors, including education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full-time status. For part-time or on-call staff, compensation is proportionately adjusted based on hours worked. Monetary compensation is only one component of Noblis’ total compensation package.Posted Salary RangeUSD $77,000.00 - USD $176,150.00 /Yr.Remote/hybrid status is subject to change based on Noblis and/or government requirements.ResponsibilitiesAre you a Cyber Security professional or a Cloud Computing Engineer/Architect interested in Cyber Security? Are you looking to make an impact across the entire federal government? Do you want to help reshape the Federal Security assurance model? Do you love researching new technologies and capabilities? Are you self-driven and detail oriented with excellent written and verbal skills? Then this job is for you! Come be a part of a growing team of highly skilled FedRAMP cyber security SMEs and help reimagine the FedRAMP process.FedRAMP Cyber Security Engineers are technologists with an eye for cyber security and policy. We are visionaries, reshaping how the Federal Government thinks about secure cloud implementation. We review security packages to evaluate compliance with FedRAMP security requirements and ensure package deliverables clearly and accurately represent the security and risk posture of the cloud service offering. FedRAMP Cyber Security Engineers review the system architecture, key performance indicators, security controls, and the results of an independent security assessment to determine suitability for government-wide use. Cyber Security Engineers work with the FedRAMP team to advise on new and emerging technologies with an emphasis on security impact. We are seeking qualified individuals to be FedRAMP SMEs and develop government-wide guidance.Key ResponsibilitiesPerform compliance reviews of cloud service offering (CSO) system security plans (SSPs) and/or Key Security Indicators to ensure the security posture is sufficient for multi-agency USG useProvide risk-based guidance to cloud service providers (CSPs) to address security concernsWork with a team of SMEs that are performing the same level of review on other portions of the compliance packageCollaborate with industry to advance transparency and efficiencyOperate in a high-visibility environment where your judgement will have significant impact on cybersecurity for the USGBe scrutinized in detail, first by colleagues within the program, and then by external stakeholdersBe completely supported by the program when finalizedMaintain focus on the highest priority package at handRapidly shift focus to support stakeholder review meetings to present findingsDaily reporting of package status to coordinate multiple teams reviewing multiple packagesContribute to and follow detailed standard operating procedures to ensure firm, fair, and consistent reviews from one package to the nextSecure handling of sensitive and proprietary vendor dataCoordinate document revision control with team membersLeverage experience in compliance focus areas such as encryption, authentication, cloud offerings, DNS, and policy evolutionResearch evolving Federal policy and guidance for FedRAMP initiatives and cloud service reviewsDevelop policy/guidance for new/emerging technologiesQualificationsUnderstanding of government cryptography requirementsStrong understanding of cloud architecture, cloud technologies, and security conceptsStrong understanding of networking principles and security best practices; strong analytical and writing skillsStrong technical research skillsStrong communication skills and ability to explain complex technical concepts to non-technical stakeholdersExcellent teamwork, organizational, communication, and collaboration skillsU.S. citizen and eligible for public trustJr levelBachelor/'s degree in Computer Science, Software Engineering, or a related field plus 3 years of experience OR Master’s degree in Computer Science, Software Engineering, or a related field plus 1 year of experience; or Associate/'s Degree + 6 years of experience, Or High School diploma or equivalent + 9 years of pensation: $77,000 - $120,275Mid levelBachelor/'s degree in Computer Science, Software Engineering, or a related field plus 5 years of experience. OR Master/'s degree + 3 years of experience; or Associate degree + 8 years of experience, Or High School diploma or equivalent + 11 years of pensation: $93,200 - $145,550Senior levelBachelor/'s degree in Computer Science, Software Engineering, or a related field plus 8 years of experience; OR Master/'s degree + 6 years of experience; or Associate/'s degree + 11 years of experience; or High School diploma + 14 years of pensation: $112,700 - $176,150Desired QualificationsApplication developmentSecurity automation techniquesSecurity testing and penetration testing experienceVulnerability management experienceAPI development and security practicesExperience developing enterprise security policies and proceduresOSCAL experienceCISSP, CISA, CISM or similar certificationsExperience with operating system or network security management; experience managing incident response and after-action remediationPost graduate degree in computer science, cybersecurity or information systemsOverviewWe are committed to helping federal missions through trusted solutions and a focus on results. #J-18808-Ljbffr
Created: 2025-10-07