By Light Professional IT Services
Senior Security Subject Matter Expert (Cloud & Security)
Be an Early Applicant
Designs, implements, and maintains security controls for AWS and other cloud environments supporting Federal and DoD systems. Responsibilities include system hardening, vulnerability scanning, monitoring, incident response, log analysis, forensic support, security architecture, access control, patching, AI-related change reviews, compliance with CMMC, SOC 2, and ISO 27001, risk assessments, documentation, and audit readiness.
Company Overview
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position OverviewSecurity Subject Matter Expert (SME) to support secure cloud systems in Federal and DoD environments. This role is responsible for designing, implementing, and maintaining security controls across cloud infrastructure, cybersecurity operations systems while supporting compliance with industry and government standards.
The ideal candidate has hands-on cloud security experience, a strong understanding of risk and compliance, and the ability to secure emerging technologies.
Responsibilities- Design, implement, and maintain security controls across system development and operations.
- Secure AWS-based cloud environments; provide working knowledge of Azure and/or Google Cloud.
- Perform system hardening, vulnerability scanning, monitoring, and incident response.
- Analyze logs, develop alerts, and support forensic investigations.
- Support security architecture design and integration for new and existing systems.
- Provide support and oversight for systems, including:
- Patching selection and updates
- Training data security and integrity
- Network monitoring, access controls, and monitoring
- Review and approval of AI-related changes and updates
- Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001.
- Contribute to security documentation, risk assessments, and audit readiness efforts.
- Bachelor’s degree (or equivalent experience) plus 3+ years of relevant security experience
- Hands-on experience securing on-premise/AWS environments
- Experience with cloud security and enterprise security tools
- Proficiency in Python for automation or security tooling
- CompTIA Security+
- GIAC
- GICSP
- CompTIA Network+
- ITIL
- Experience supporting Federal, DoD, or regulated environments
- Familiarity with AI/ML systems or emerging technology security
- Active Top Secret w/Poly clearance
Similar Jobs
Cloud • Software
Design and build scalable, secure cloud-native platform components for ThousandEyes. Develop Java applications, event-driven systems, data pipelines, real-time enrichments, and microservices. Collaborate with product and engineering teams on planning, integration, prototypes, architecture, and implementation. Mentor junior engineers, conduct design reviews, and help ensure reliable services meet SLA targets while supporting significant platform growth.
Top Skills:
Amazon SnsAmazon SqsAWSAzureDockerGCPGradleJavaJvmKafkaKotlinKubernetesMavenMicroservicesNoSQLScalaSQL
Digital Media • Fintech • Information Technology • Machine Learning • Financial Services • Cybersecurity • Automation
Develop and manage a branch-based wealth management practice by conducting client discoveries, creating tailored financial plans, driving new business development and referrals, conducting proactive outreach, and coordinating with internal specialists for investment, insurance, estate, and financial planning services.
Artificial Intelligence • Marketing Tech • Software
Owns end-to-end client implementations for Movable Ink’s personalization platforms. Manages launch projects, develops implementation plans, configures and QA-tests campaigns, designs technical solutions, trains clients, troubleshoots issues, and coordinates with developers, engineers, architects, product teams, and stakeholders to achieve client goals and KPIs.
Top Skills:
APIsCloud Data WarehousesData LakesEmail Service ProvidersETLHTMLJavaScriptMmsMovable Ink Da VinciMovable Ink StudioPush MessagingSms
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
