Mid Security SME

Conviso Inc is hiring MBI Public Trust Cleared Security SME position. This is a 100% Remote set-up position & comes with benefits, 401K & some accrued PTO. The Ideal Candidate will support enterprise security operations, vulnerability remediation, and infrastructure hardening within a federal Azure environment.

Position Title: Security SME
Remote Roles

MBI Public Trust Clearance is needed.

Key Responsibilities
• Translate security requirements into actionable implementation, validation, and documentation activities.
• Support security planning and control traceability across Windows Server migration, network segmentation, encryption, and Entra ID authentication.
• Validate server hardening, patching, vulnerability scanning, endpoint protection, compliance monitoring, CIS benchmark implementation, and Azure security-tool integration.
• Review and validate network segmentation, trust boundaries, approved traffic flows, administrative access, hybrid connectivity, and production/non-production isolation.
• Support Zero Trust, least-privilege, RBAC, Azure Policy, logging, and governance requirements.
• Assess and validate TLS 1.3, certificates, encryption in transit, deprecated protocol remediation, and protected communication paths.
• Support customer-managed key governance, including authorized access, rotation, decryption authority, auditability, backup, and recovery considerations.
• Validate Microsoft Entra ID authentication, phishing-resistant MFA requirements, managed identities, service principals, database authorization, and removal of shared or long-lived credentials.
• Coordinate with ISD on security scanning, findings, remediation, delta ATO requirements, and operational readiness.
• Develop or review security test cases and participate in installation, integration, regression, security, rollback, and recovery testing.
• Track security findings, risks, decisions, dependencies, and mitigation activities.
• Prepare security control evidence, configuration records, validation results, review packages, and materials supporting RMF and ATO activities.
• Participate in CCB meetings, implementation readiness reviews, stakeholder briefings, and security signoffs.

Required Qualifications
• Recommended minimum of five years of experience in cybersecurity, cloud security, information assurance, security engineering, or security compliance.
• Experience with Azure security controls, network segmentation, identity and access management, vulnerability management, and security monitoring.
• Working knowledge of Microsoft Entra ID, RBAC, managed identities, service principals, MFA, and least-privilege design.
• Experience reviewing Windows Server hardening, TLS, certificates, encryption, firewall rules, and secure connectivity.
• Experience developing security documentation, control evidence, remediation plans, risk registers, and validation results.
• Ability to work with technical and governance stakeholders and communicate security requirements in practical implementation terms.
• Familiarity with formal change control, security review, and operational readiness processes.

Preferred Qualifications
• Experience supporting federal Risk Management Framework or Authority to Operate activities.
• Experience with Azure Defender or Microsoft Defender, CIS benchmarks, vulnerability scanners, and compliance monitoring tools.
• Security certification such as Security+, CISSP, CISM, CCSP, or an equivalent credential.
• Experience with customer-managed keys, Azure Key Vault, TLS 1.3, or protected application interfaces.
• Experience supporting cloud migration or modernization programs in regulated environments.