SaaS Security Engineer

Noblis is hiring an experienced SaaS Security Senior Engineer to support the Software-as-Service (SaaS) Governance program for a Federal Government client. As part of the Noblis Federal Civilian Services team, you will be working with the agency’s OIT (Office of Information Technology) team deliver innovative and effective cybersecurity solutions and recommendations, drive IT transformation in support of and in collaboration with multiple business component partners.

JOB DESCRIPTION

We are looking for a skilled SaaS Security Senior Engineer to support our client’s Software as a Service (SaaS) Governance program.  This role is focused on helping the agency speed the secure use of SaaS through discovering and evaluating SaaS already in use, streamlining and automating the process to authorize new SaaS deployments, and monitoring the security posture of SaaS solutions.  Specifically in this role you will support the automated collection and maintenance of SaaS inventory data, and help the client use this data to drive business and risk decisions. This includes evaluating associated tools and technologies, developing processes, developing scripts and automation, evaluating SaaS provider security capabilities. You will also help maintain and enhance the SaaS governance framework. 

Responsibilities

• Utilize tools such as Cloud Access Security Broker (CASB) and others to discover and catalog SaaS applications across the enterprise.
• Conduct manual and automated discovery efforts to ensure a comprehensive SaaS inventory.
• Collaborate with the broader SaaS Governance team to share discoveries and insights.
• Assess and document the security posture of discovered SaaS applications.
• Provide inputs to streamline the process of requesting and approving SaaS/PaaS services.
• Participate in the continuous monitoring and assessment of SaaS usage and security configurations. Develop security monitoring and compliance approaches and processes for SaaS application.
• Collaborate to unveil insights and metrics for SaaS discovery.
• Recommend and provide guidance to business owners relative to the security risks associated with SaaS applications.
• Develop enterprise-wide standards for managing the cyber risk posture of SaaS applications.
• Provide recommendations to the CISO and business owners to improve the governance of acceptable SaaS applications.
• Evaluate tools and technologies to automate all aspects of SaaS Governance.
• Support and lead evolving business development efforts through the application of technical/functional expertise to develop sound business solutions.
• Identify and influence future work beyond current project, consistent with the account strategy or corporate objectives

Client Engagement

• Learn about the Noblis business development lifecycle, processes, tools, and account structure
  · Contribute specialized domain or technical content to proposal sections or client white papers
  · Build a productive relationship with the client and understand their structure and goals

• Bachelor's degree, preferably in computer science or a technology related field +15+ years of related IT/cyber work experience. OR asscoaite's degree, preferably in computer science or a technology related field +17+ years of related IT/cyber work experience. OR Master's degree, preferably in computer science or a technology related field +12+ years of related IT/cyber work experience
• Experience reviewing IT security and compliance documentation from a risk perspective.
• Familiarity with NIST SP 800-53 controls and its framework.
• Understanding of SaaS applications and their security considerations
• Strong working knowledge of application security concepts and approaches.
• Strong analytical and writing skills.
• Excellent teamwork, organizational, communication, and collaboration skills
• Ability to obtain and maintain a public trust (U.S. Citizen or green card holder). 

• At least five (5) years of experience with IT Security frameworks (FedRAMP, NIST, etc.).
• Application security or development experience.
• CISSP, CCSP, CISA, CISM or similar certification.
• Experience with cloud environments, particularly AWS, encompassing architecture, services, security, and governance.
• Prior federal government IT consulting experience.

Noblis and our wholly owned subsidiaries, Noblis ESI, and Noblis MSD tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us

Why work at a Noblis company?

Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards. Noblis maintains a drug-free workplace.

*Remote/hybrid status is subject to change based on Noblis and/or government requirements

At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.

Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis’ total compensation package.

Noblis is an Equal Opportunity Employer. Employment decisions are made without regard to race (as well as because of or on the basis of traits historically associated with race, including hair texture, hair type, and protective hairstyles such as braids, locks, and twists), color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, pregnancy, childbirth, lactation and related medical conditions, genetic factors, military/veteran status, or other characteristics protected by law.

Noblis is committed to the full inclusion of all qualified individuals. As part of this commitment, Noblis will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact employee-relations@noblis.org.