Responsibilities
- Perform routine evaluations of cloud environments set up by engineering units
- Analyze infrastructure-as-code templates for alignment with established security benchmarks
- Examine adherence to internal and external security policies and recommended practices
- Evaluate cloud deployments against the security principles of the AWS Well-Architelled Framework
- Detect and record configuration errors and policy deviations in security controls
- Build and update dashboards that reflect current security posture
- Produce and revise documentation for secure configuration procedures and response playbooks
- Provide expert guidance to development teams on implementing secure architectures
- Deploy and manage AWS-native security tools to enforce hardening standards and complete engineering tasks
- Define and refine security configuration baselines for AWS environments
- Deliver educational sessions on security topics tailored to engineering staff
- Communicate assessment outcomes and suggested improvements during team discussions
- Explore and propose automation solutions for repetitive security validation processes
- Suggest enhancements to existing security tooling and monitoring systems
Compensation
Competitive salary with comprehensive benefits and flexible paid time off for eligible employees
Other
- U.S. Citizenship is mandatory to meet government contract requirements
- The organization offers a competitive compensation package, full benefits, and flexible paid leave options for qualifying employees
- Includes medical, dental, and vision coverage, health savings account, and flexible spending account options
- Provides short-term disability, long-term disability, supplemental life insurance, and accidental death and dismemberment coverage
- Features a robust 401k retirement savings plan
- Offers paid time off benefits
- The company is an Equal Opportunity Employer
- All official communications originate from @nffinc.com. Messages from other domains impersonating the company may be fraudulent. Exercise caution, confirm sender authenticity, and report suspicious emails promptly
