Cybersecurity Engineer

Job Summary

To safeguard the systems of the CMS Reporting and Quality division operating in the CMS AWS Cloud, the full-time Cybersecurity Engineer will guide teams on security policies and compliance, maintain a strong security posture, and collaborate with engineering and DevOps teams to implement necessary changes and drive remediation.

Key responsibilities:

• Provide guidance on the implementation of security policies, standards, and procedures to various stakeholders
• Conduct vulnerability and compliance assessments, prioritize remediation, and collaborate with development teams to address security findings
• Secure cloud environments, including AWS and Databricks, and manage security incidents and alerts

Required qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field
• U.S. Citizenship and the ability to obtain a Public Trust (Tier I) Clearance
• Minimum of 8+ years of experience in information security or cybersecurity engineering roles
• Proven experience managing Authorization to Operate (ATO) processes and security documentation
• Hands-on experience securing AWS environments and familiarity with FISMA, FedRAMP, NIST, ARS, and HIPAA requirements