Information Systems Security Engineer, Raft

• Five-plus years of hands-on experience with Terraform, SIEM, AWS, Single Sign On (SSO), IDP such as Okta, SAML, OIDC
• Five-plus years of working knowledge and experience in managing multiple AWS environments (VPCs, firewalls, IAM, GuardDuty, Cloud Trail, WAF such as Signal Sign On)
• Must have solid working experience in designing secure network & system architectures, virtualization & cloud technologies, application security, encryption technologies, and IPS/IDS technologies
• Experience with planning and implementation of defense-in-depth security engineering and conducting security testing against the environment
• Deep understanding of DevSecOps methodologies & implementing security tooling within CI/CD pipelines
• Experience with containerization technologies such as Kubernetes & Docker and related scanning tools such as TwistLock, Trivy, Zarf, JFrog Xray, or Anchore
• Experience hardening on-prem & cloud-based Linux & Windows systems using DISA STIGs & SRGs or other industry best practices
• Experience building & maintaining relevant security documentation such as SBOMs, PPS lists, data flow & network diagrams, and SSPs
• Willing to occasionally work in a classified environment such as a Closed Area or SCIF on a quarterly basis
• Stay current with industry trends, making recommendations as needed to help the company excel
• Obtain CompTIA Security+ or other DoD 8570 IAT Level II or higher certification within the first 90 days of employment with Raft
• Industry Certifications such as:
• CKS or CKA
• AWS Certified Solutions Architect – Professional
• AWS Certified DevOps Engineer – Professional
• AWS Certified Security – Specialty
• CISSP (or any concentration)
• CCSP
• SSCP
• Master's degree in Information Security, Cybersecurity, Information Assurance, Computer Science, or similar field
• Ability to obtain and maintain a Top Secret security clearance

Desirable

• We’re looking for an experienced Information Systems Security Engineer to support our customers and join our passionate team of high-impact problem solvers
• As an ISSE, you'll embed within a client team specializing in security engineering and leveraging DevSecOps methodology
• Your daily responsibilities range from building and running an EKS cluster that houses our SIEM or analyzing data to find potential security issues to responding to incidents & working with teams to remediate after vulnerabilities are discovered
• You'll rely on your knowledge of Kubernetes and AWS to provide ways forward for the client while also supporting teammates and empowering product teams across the client's portfolio