greenhouse

Cloud Security GRC Consultant

Dark Wolf Solutions

Herndon, USA

Junior · 2+ years experience

Onsite

Discovered 3 weeks ago

gcppythonterraform

Full Job Posting

Work collaboratively within a fast paced Agile team environment
Stay up-to-date on the latest Google Cloud services and technologies
Implement security best practices for Google Cloud solutions
Serve as a key contributor for federal compliance requirements, including FedRAMP, NIST SP 800-53, and agency-specific security overlays
Support development and implementation of innovative methods to achieve compliance with government and commercial cybersecurity frameworks
Conduct detailed technical security control assessments against system components and configurations within the GCP environment, identifying gaps, risks, and recommended mitigations
Actively contribute to the development and finalization of authorization artifacts
Partner with cloud architecture and engineering teams to provide actionable compliance guidance, ensuring security is built-in from system design through deployment
Utilize Google Cloud native tools and features to aid in continuous monitoring (ConMon) activities, vulnerability management, and security posture management
Support reviews with the Authorizing Official (AO), security assessors (e.g., 3PAOs), and federal agency security teams during control assessments and authorization reviews
Develop clear, compelling Plan of Action and Milestones (POA&M) entries, helping the team communicate system risks, impact, and mitigation strategies to stakeholders
Support strategic consulting efforts on evolving federal cloud security policy and best practices

2+ years of relevant experience
At least one Google Cloud Professional Certification
Experience supporting RMF processes, acting as an ISSO, Security Controls Validator, or performing information assurance engineering
Hands-on with eGRC tools like eMASS and XACTA
Ability to clearly communicate complex security concepts to both technical and non-technical stakeholders
Strong problem-solving skills with a proven ability to quickly learn and apply new technologies to solve complex client challenges
Familiarity with cloud automation, Infrastructure as Code (e.g., Terraform), or scripting to help automate compliance tasks
Understanding of Google Cloud services and technologies
B.A. or B.S. Information Security, Computer Science, or related discipline
US Citizenship and clearable up to a Secret Security Clearance

Experience working within Agile teams
Experience working with Google Cloud compliance products such as Security Command Center and Assured Workloads
Hands-on experience with modern compliance automation, OSCAL, Python, or Infrastructure as Code (e.g., Terraform)
Experience working with customers in the U.S. Public Sector
U.S. Federal Government security clearance
Experience with DoD/DISA cybersecurity policies
This position will be a hybrid role based out of Herndon, VA.
The salary range for this position is estimated to be between $100,000.00 - $140,000.00, commensurate on experience and technical skillset.
We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Trusted by over 500,000 job seekers on Base Career