Experience performing security engineering activities across the system lifecycle, including requirements analysis, architecture and design reviews, implementation oversight, vulnerability remediation, testing, deployment, and operational transition. Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems in accordance with RMF, ICD 503, NIST guidance, and agency assessment and authorization (A&A) processes.