By Light Professional IT Services
Senior Security Subject Matter Expert (Cloud & Security)
Be an Early Applicant
Designs, implements, and maintains security controls for AWS and other cloud environments supporting Federal and DoD systems. Responsibilities include system hardening, vulnerability scanning, monitoring, incident response, log analysis, forensic support, security architecture, access control, patching, AI-related change reviews, compliance with CMMC, SOC 2, and ISO 27001, risk assessments, documentation, and audit readiness.
Company Overview
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position OverviewSecurity Subject Matter Expert (SME) to support secure cloud systems in Federal and DoD environments. This role is responsible for designing, implementing, and maintaining security controls across cloud infrastructure, cybersecurity operations systems while supporting compliance with industry and government standards.
The ideal candidate has hands-on cloud security experience, a strong understanding of risk and compliance, and the ability to secure emerging technologies.
Responsibilities- Design, implement, and maintain security controls across system development and operations.
- Secure AWS-based cloud environments; provide working knowledge of Azure and/or Google Cloud.
- Perform system hardening, vulnerability scanning, monitoring, and incident response.
- Analyze logs, develop alerts, and support forensic investigations.
- Support security architecture design and integration for new and existing systems.
- Provide support and oversight for systems, including:
- Patching selection and updates
- Training data security and integrity
- Network monitoring, access controls, and monitoring
- Review and approval of AI-related changes and updates
- Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001.
- Contribute to security documentation, risk assessments, and audit readiness efforts.
- Bachelor’s degree (or equivalent experience) plus 3+ years of relevant security experience
- Hands-on experience securing on-premise/AWS environments
- Experience with cloud security and enterprise security tools
- Proficiency in Python for automation or security tooling
- CompTIA Security+
- GIAC
- GICSP
- CompTIA Network+
- ITIL
- Experience supporting Federal, DoD, or regulated environments
- Familiarity with AI/ML systems or emerging technology security
- Active Top Secret w/Poly clearance
Similar Jobs
.png){kind=logo}
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Design, develop, and maintain high-performance Go- and Python-based software supporting VOD, live event, linear streaming, dynamic ad insertion, and manifest manipulation. Build resilient, observable, multi-region systems and contribute to multi-CDN strategies, routing, origin workflows, architecture, testing, and code reviews. Partner with SRE teams and distributed international engineering groups to optimize global streaming performance and reliability.
Top Skills:
AkamaiAutomated Testing FrameworksAWSAzureCi/CdCloudflareCloudfrontDashDockerFastlyGCPGitGoHlsKanbanKubernetesPythonScrumSre
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Lead enterprise cybersecurity programs from initiation through adoption and operationalization. Coordinate technical and operational workstreams, manage dependencies, risks, issues, milestones, KPIs, and executive reporting. Drive change management, governance, stakeholder alignment, operational readiness, and process maturity across cybersecurity, engineering, operations, product, and business teams. Facilitate decision-making, remove blockers, develop mitigation plans, and improve program delivery practices.
Top Skills:
JIRAMicrosoft TeamsPower BIPowerPointSharepoint
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Supports and maintains broadcast transmission, monitoring, automation, and distribution infrastructure across a network operations center and local stations. Troubleshoots on-air and business-critical issues, coordinates with engineering, operations, and vendors, performs upgrades and preventive maintenance, analyzes system health, documents procedures, and participates in on-call emergency response. The role requires expertise in broadcast automation, video formats, IP and SDI systems, networking, storage, virtualization, cloud platforms, and transmission technologies.
Top Skills:
Amagi CloudportAsiAWSAzureDtmfDvsEvertz EqxEvertz ExeEvertz MagnumEvertz SdvnEvertz VistalinkGCPGpioGrass ValleyGrass Valley IceGrass Valley IcontrolGrass Valley NvisionIpJpeg XsMediakindMpeg-2Mpeg-4NasPebbleRaidRtpRtspSanScte-104Scte-35SdiSmpte St 2110SnellSnmpUdpVgpiVmware EsxiVmware Vca/Vcp
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
