Develop, implement, and maintain security policies, procedures, and documentation in compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA), raising the bar on quality and consistency.
Create and maintain media sanitization (clearing, purging, or destroying) and reuse procedures, ensuring repeatable and auditable processes.
Develop and document processes, procedures, and guidelines for protection requirements (e.g., e-mail labels, media labels), control procedures (e.g., discretionary access control, need-to-know sharing), incident management reporting, remote access requirements, system management, and use of encryption.
Configure, update, and monitor classified network infrastructure devices including routers, firewalls, intrusion detection/prevention components, and switches; proactively identify and remediate vulnerabilities.
Leverage customer-authorized tools to test and secure systems, including vulnerability scanners and antivirus solutions; document findings and drive remediation.
Perform system administration functions for modern operating systems and applications, including installing and configuring operating systems, applying patches and updates, tuning security controls to meet federal requirements, monitoring operations, and managing system backups.
Identify opportunities to automate, simplify, or improve security processes and mechanisms; document and share best practices across the team.
This position requires the candidate to be a U.S. Citizen and must currently possess and maintain an active TS/SCI security clearance.
This position is based in Arlington VA, some travel will be required.
Bachelor's degree or equivalent in Computer Science, Engineering, Information Systems Management, Information Security or other related fields
5+ years of experience with cybersecurity policies and implementation of Risk Management Framework (RMF), including DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
Current certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
5+ years of experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM) supporting classified programs
Experience working in Special Access Programs (SAP)
Working knowledge of Intelligence Community Directives (ICDs), including ICD 704, 705, and 503
KMI Certification
Demonstrated ability to build scalable security processes and mechanisms in a growing or dynamic environment
Experience writing technical documentation, standard operating procedures, or runbooks
Track record of identifying and driving process improvements in a security or compliance domain
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually
