By Light Professional IT Services
Senior Security Subject Matter Expert (Cloud & Security)
Be an Early Applicant
Designs, implements, and maintains security controls for AWS and other cloud environments supporting Federal and DoD systems. Responsibilities include system hardening, vulnerability scanning, monitoring, incident response, log analysis, forensic support, security architecture, access control, patching, AI-related change reviews, compliance with CMMC, SOC 2, and ISO 27001, risk assessments, documentation, and audit readiness.
Company Overview
By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.
Position OverviewSecurity Subject Matter Expert (SME) to support secure cloud systems in Federal and DoD environments. This role is responsible for designing, implementing, and maintaining security controls across cloud infrastructure, cybersecurity operations systems while supporting compliance with industry and government standards.
The ideal candidate has hands-on cloud security experience, a strong understanding of risk and compliance, and the ability to secure emerging technologies.
Responsibilities- Design, implement, and maintain security controls across system development and operations.
- Secure AWS-based cloud environments; provide working knowledge of Azure and/or Google Cloud.
- Perform system hardening, vulnerability scanning, monitoring, and incident response.
- Analyze logs, develop alerts, and support forensic investigations.
- Support security architecture design and integration for new and existing systems.
- Provide support and oversight for systems, including:
- Patching selection and updates
- Training data security and integrity
- Network monitoring, access controls, and monitoring
- Review and approval of AI-related changes and updates
- Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001.
- Contribute to security documentation, risk assessments, and audit readiness efforts.
- Bachelor’s degree (or equivalent experience) plus 3+ years of relevant security experience
- Hands-on experience securing on-premise/AWS environments
- Experience with cloud security and enterprise security tools
- Proficiency in Python for automation or security tooling
- CompTIA Security+
- GIAC
- GICSP
- CompTIA Network+
- ITIL
- Experience supporting Federal, DoD, or regulated environments
- Familiarity with AI/ML systems or emerging technology security
- Active Top Secret w/Poly clearance
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handles inbound calls and warm leads to consult customers on insurance needs, recommend appropriate Property and Casualty products and coverage, and convert prospects into policyholders. The role includes paid training and licensing, customer relationship building, sales closing, and brand representation. Employees must work a weekday and weekend schedule, maintain a professional home workspace, and meet high-speed internet requirements.
Top Skills:
Cable/Fiber/Dsl InternetPcWired High-Speed Internet
Consumer Web • eCommerce • Internet of Things
Represent the company in Internet standards working groups, track adjacent drafts and discussions, revise technical specifications, respond to reviews, and develop reference implementations, interoperability tests, and demos. Build credibility across standards and open-source communities while serving as a technical delegate to the CTO. Over time, author independent standards drafts and engage with engineering, enterprise, and government audiences.
Top Skills:
DnsInternet ProtocolsInteroperability TestingOauthOpenid ConnectPkiReference ImplementationsVerifiable Credentials
Cloud • Software
Design and build scalable, secure cloud-native platform components for ThousandEyes. Develop Java applications, event-driven systems, data pipelines, real-time enrichments, and microservices. Collaborate with product and engineering teams on planning, integration, prototypes, architecture, and implementation. Mentor junior engineers, conduct design reviews, and help ensure reliable services meet SLA targets while supporting significant platform growth.
Top Skills:
Amazon SnsAmazon SqsAWSAzureDockerGCPGradleJavaJvmKafkaKotlinKubernetesMavenMicroservicesNoSQLScalaSQL
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
