AFS IT is seeking an IT Cyber Engineer and CSPM specialist who is passionate about cyber security and cloud technologies and eager to apply AI and code-driven solutions to optimize infrastructure.  

The IT Cyber Team's purpose is to protect the AFS brand. This involves applying security strategies that implement safeguards for current and emerging security threats using all available tools, including the Wiz for Gov Cloud Security Posture Management CNAPP. 

The team member will coordinate incident response across infrastructure teams according to established processes and drive incidents toward resolution. The team will assess infrastructure's ability to fulfill proposed remediation actions and make recommendations for resolving security gaps. The team will work hand in hand with infrastructure teams and information security to ensure security compliance and risk mitigation best practices are applied to the enterprise. The team will develop and implement security enhancements to protect against current and emerging security threats while balancing usability and business operations. 

The Work: 

Specific responsibilities involved in this role include:  

Strategy (10%) 

• Develop IT cybersecurity strategies and roadmaps that will align with business goals and optimize security posture of the enterprise. 

• Leverage cybersecurity frameworks (CMMC, NIST-800-171, CIS) to evaluate and improve the security posture of the enterprise. 

  Innovation (10%) 

• Drive security enhancement innovations across infrastructure workstreams. 

  Engineering (60%) 

• Assess existing security issues within IT infrastructure. 

• Build and Implement security measures across the enterprise. 

• Evaluate new technologies and processes that enhance security capabilities. 

• Development and implementation of security enhancement solutions. 

• Respond to information security issues when infrastructure action is needed. 

  Ops (20%) 

• Serve as a technical escalation point for day-to-day activities for IT Cyber team. 

• Critical Vulnerability Response Management. This includes P1 incident creation and escalation mainly between Infrastructure (AFS IT Cyber) Team and Infrastructure teams. 

• Review and evaluate Wiz for Gov vulnerability findings for escalation and remediation. 

• Manage security vulnerabilities across AFS Infrastructure. This includes identifying and supporting system owners to manage risks and remediate vulnerabilities.  

• Drive server patch compliance through Patch Management Incident Ticket (Monthly and application) 

• Drive the removal of end-of-life software for both server and endpoint environments.  

• DevOps Team Member day-to-day activities 

• Effectively communicate progress and escalate impediments

• Create (design, build, test, deliver, document, etc.) work product and deliver the Product Increment according to quality standards (Definition of Done); 

• Align with other team members on operational work (such as dependencies, progress, issues, etc.) 

• Resolve impediments which can be solved independently or collaborate with the team and stakeholders to resolve them 

• Support the Product Owner in refining Product Backlog Items, for example by writing acceptance criteria, descriptions, test-scenarios, estimation, etc. 

• Gather feedback from users and collaborate with stakeholders to gather input and feedback during the Sprint to deliver a more valuable work product 

• Decompose sprint stories into tasks and provide estimated effort 

Create/deliver fully tested, documented, and deployable work product

What you need:

• U.S. Citizen located on U.S. soil (mandatory).
• Cyber Security Experience
• Experience with Agile methodology.
• Ability to work independently on moderately complex tasks and collaborate effectively. 

Bonus if you have:

• Cloud Security Posture Management (Azure and/or AWS, GCP). 
• Experience with Wiz.io’s Wiz for Gov platform