Today
Secret
Unspecified
Unspecified
IT - Hardware
New Carrollton, MD (On-Site/Office)
Zachary Piper Solutions is seeking a Cloud Security SME to provide cloud and security infrastructure, tools, and capabilities support to prevent/deter, detect and respond to threats targeting the IRS's people, processes, and technologies. This position is fully remote but must be local to New Carrollton, MD area.
Responsibilities:
· Design and develop a Security Operations Center (SOC) capability for cloud cyber security monitoring, with a focus on Azure and AWS environments.
· Define and implement security controls, policies, and procedures specific to cloud-based systems and infrastructure.
· Monitor cloud environments for security incidents, vulnerabilities, and potential threats, using industry-standard tools and techniques.
· Collaborate with cloud service providers and other internal teams to ensure compliance with relevant security standards, regulations, and best practices.
· Develop and maintain incident response plans and playbooks for cloud cyber security incidents.
· Investigate and respond to security incidents, including conducting forensic analysis, implementing remediation measures, and reporting on findings.
· Stay up to date with the latest trends and developments in cloud computing, cyber security, and relevant technologies.
· Provide technical guidance and expertise to internal teams regarding cloud cyber security best practices and recommendations .
Qualifications:
· 7+ years of experience and a Bachelor's degree in Computer Science, Information Security, or a related field. Advanced certifications in cloud computing and cyber security are highly desirable.
· Proven experience working with Azure and AWS cloud platforms, specifically in designing and implementing security measures.
· Extensive knowledge and understanding of cloud operation, cloud computing concepts, including infrastructure-as-a-service (IaaS), platform-as-a-service (PaaS), and software-as-a-service (SaaS).
· Strong understanding of cyber security principles, technologies, and best practices, with a focus on cloud security.
· Experience in setting up and managing a Security Operations Center (SOC) or cloud security monitoring function.
· Familiarity with industry-standard cloud security frameworks and regulations (e.g., NIST, CSA, ISO 27001, GDPR)
· Proficiency in using cloud security tools and technologies, such as Azure Security Center, AWS Security Hub, and CloudTrail.
· Knowledge of network security protocols, encryption technologies, and access control mechanisms within cloud environments.
· Demonstrated experience in incident response and handling security incidents within cloud environments.
· Familiarity with Paolo Alto PRISMA Cloud and Cortex
Technical Requirements (MUST haves, needs not wants)
· 12+ Years of IT/Cyber Security
o No degree can be substituted for 16 years of exp.
o Master's degree only requires 10 years exp.
o PhD requires 6 years of exp.
· Expertise with Cloud Security for AWS, Azure, etc..
o Understanding of Cloud Security Posture Management tools is key
o GCP may be OK, but they have Azure/AWS
· Experience with AWS Cloud Trails, AWS Guard Duty, Azure/O366, MS XDR, MS EDR - how to leverage these from engineering standpoint and how to incorporate those into a detect and response capability.
· Experience working as a SOC Analyst or Supporting Cyber Incident Response
o Prior experience will allow them to engage with analysts and provide IR support for cloud technologies
o Need to understand how to pull and analyze logs from various sources
· Clearance: US Citizen with ability to obtain IRS Public Trust
o Highly preferred: Active IRS public trust
o 2nd best option: Secret clearance (or higher)
Compensation:
$180,000 - $200,000 ** depending on experience and degree**
Full Benefits -Medical, Dental, Vision, 401K, Paid Holidays, PTO, Sick Leave if required by law
This job opens for applications on 10/23/2025. Applications for this job will be accepted for at least 30 days from the posting date
#LI-Onsite
#LI-GC2
Key words: Information Assurance, IA, Risk Management Framework, RMF, Security Authorization, A&A, Continuous Monitoring, Security Controls Assessment, SCA, Incident Response, Vulnerability Management, Security Compliance, security, ISSO, information systems security officer, ISSM, ISSE, information systems security manager, information systems security expert, System Security Plan, SSP, Plan of Action and Milestones, POA&M, NIST, NIST SP 800-53, 800-37, 800-171, FISMA, Compliance, STIGs, Security Technical Implementation Guides, SIEM, Splunk, ArcSight, cyber, cybersecurity, cyber security, CISSP, CISA, DHS, Department of Homeland security, Archer, CSAM, National Cyber Security Division, NCSD, NSS, National Security systems, Network Security, Endpoint Protection, Encryption Standards, Firewalls, IDS, IPS, Cloud Security, AWS, Azure, FedRAMP, ), Contingency Plans, CPs, Contingency Plan Tests, CPTs, Privacy Impact Assessments, PIAs, Privacy Threshold Analyses, PIA, Business Impact Assessments, BIAs
Responsibilities:
· Design and develop a Security Operations Center (SOC) capability for cloud cyber security monitoring, with a focus on Azure and AWS environments.
· Define and implement security controls, policies, and procedures specific to cloud-based systems and infrastructure.
· Monitor cloud environments for security incidents, vulnerabilities, and potential threats, using industry-standard tools and techniques.
· Collaborate with cloud service providers and other internal teams to ensure compliance with relevant security standards, regulations, and best practices.
· Develop and maintain incident response plans and playbooks for cloud cyber security incidents.
· Investigate and respond to security incidents, including conducting forensic analysis, implementing remediation measures, and reporting on findings.
· Stay up to date with the latest trends and developments in cloud computing, cyber security, and relevant technologies.
· Provide technical guidance and expertise to internal teams regarding cloud cyber security best practices and recommendations .
Qualifications:
· 7+ years of experience and a Bachelor's degree in Computer Science, Information Security, or a related field. Advanced certifications in cloud computing and cyber security are highly desirable.
· Proven experience working with Azure and AWS cloud platforms, specifically in designing and implementing security measures.
· Extensive knowledge and understanding of cloud operation, cloud computing concepts, including infrastructure-as-a-service (IaaS), platform-as-a-service (PaaS), and software-as-a-service (SaaS).
· Strong understanding of cyber security principles, technologies, and best practices, with a focus on cloud security.
· Experience in setting up and managing a Security Operations Center (SOC) or cloud security monitoring function.
· Familiarity with industry-standard cloud security frameworks and regulations (e.g., NIST, CSA, ISO 27001, GDPR)
· Proficiency in using cloud security tools and technologies, such as Azure Security Center, AWS Security Hub, and CloudTrail.
· Knowledge of network security protocols, encryption technologies, and access control mechanisms within cloud environments.
· Demonstrated experience in incident response and handling security incidents within cloud environments.
· Familiarity with Paolo Alto PRISMA Cloud and Cortex
Technical Requirements (MUST haves, needs not wants)
· 12+ Years of IT/Cyber Security
o No degree can be substituted for 16 years of exp.
o Master's degree only requires 10 years exp.
o PhD requires 6 years of exp.
· Expertise with Cloud Security for AWS, Azure, etc..
o Understanding of Cloud Security Posture Management tools is key
o GCP may be OK, but they have Azure/AWS
· Experience with AWS Cloud Trails, AWS Guard Duty, Azure/O366, MS XDR, MS EDR - how to leverage these from engineering standpoint and how to incorporate those into a detect and response capability.
· Experience working as a SOC Analyst or Supporting Cyber Incident Response
o Prior experience will allow them to engage with analysts and provide IR support for cloud technologies
o Need to understand how to pull and analyze logs from various sources
· Clearance: US Citizen with ability to obtain IRS Public Trust
o Highly preferred: Active IRS public trust
o 2nd best option: Secret clearance (or higher)
Compensation:
$180,000 - $200,000 ** depending on experience and degree**
Full Benefits -Medical, Dental, Vision, 401K, Paid Holidays, PTO, Sick Leave if required by law
This job opens for applications on 10/23/2025. Applications for this job will be accepted for at least 30 days from the posting date
#LI-Onsite
#LI-GC2
Key words: Information Assurance, IA, Risk Management Framework, RMF, Security Authorization, A&A, Continuous Monitoring, Security Controls Assessment, SCA, Incident Response, Vulnerability Management, Security Compliance, security, ISSO, information systems security officer, ISSM, ISSE, information systems security manager, information systems security expert, System Security Plan, SSP, Plan of Action and Milestones, POA&M, NIST, NIST SP 800-53, 800-37, 800-171, FISMA, Compliance, STIGs, Security Technical Implementation Guides, SIEM, Splunk, ArcSight, cyber, cybersecurity, cyber security, CISSP, CISA, DHS, Department of Homeland security, Archer, CSAM, National Cyber Security Division, NCSD, NSS, National Security systems, Network Security, Endpoint Protection, Encryption Standards, Firewalls, IDS, IPS, Cloud Security, AWS, Azure, FedRAMP, ), Contingency Plans, CPs, Contingency Plan Tests, CPTs, Privacy Impact Assessments, PIAs, Privacy Threshold Analyses, PIA, Business Impact Assessments, BIAs
group id: 10430981