We need following candidate:

Title: Security Subject Matter Expert (SME)

Duration: 12 Months

Remote Work (Occasional Onsite visits in Washington, DC for meetings)

**** Active DHS Clearance ****

**Job Description:**
**Overview:**
As a Security SME, you will be responsible for providing expertise and guidance on security best practices throughout the migration of an Oracle database to Amazon Web Services (AWS). Additionally, you will evaluate the security posture of alternative database providers and advise on measures to ensure the security of the migrated database solution.

**Responsibilities:**
1. **Security Assessment:** Conduct security assessments of the existing Oracle database environment to identify vulnerabilities, misconfigurations, and compliance gaps. Assess security controls related to data protection, access controls, encryption, and logging.
2. **AWS Security Architecture:** Design security architecture for the AWS infrastructure to support the migration project. Implement security controls such as identity and access management (IAM), network security, encryption, and monitoring using AWS services.
3. **Compliance Requirements:** Ensure compliance with industry regulations and security standards (e.g., GDPR, HIPAA, ISO 27001) throughout the migration project. Identify compliance requirements specific to the database environment and implement controls to address them.
4. **Data Protection:** Implement data protection measures to safeguard sensitive data stored in the database. Implement encryption at rest and in transit, data masking, and access controls to protect data from unauthorized access and disclosure.
5. **Identity and Access Management:** Design and implement IAM policies and roles to control access to the database and AWS resources. Implement least privilege principles and multi-factor authentication (MFA) to ensure secure access to sensitive data.
6. **Threat Detection and Monitoring:** Implement logging, monitoring, and alerting mechanisms to detect and respond to security incidents in real-time. Configure AWS CloudTrail, CloudWatch, and other monitoring tools to track and analyze security events.
7. **Incident Response:** Develop incident response plans and procedures to address security incidents and breaches. Define roles and responsibilities, escalation paths, and communication protocols for responding to security incidents effectively.
8. **Security Training and Awareness:** Provide security training and awareness sessions to project teams and stakeholders involved in the migration project. Raise awareness of security risks and best practices to promote a culture of security within the organization.
9. **Vendor Security Assessment:** Evaluate the security posture of alternative database providers to Oracle. Assess security features, compliance certifications, and data protection capabilities to ensure the security of the migrated solution.
**Qualifications:**
- Bachelor's degree in computer science, information security, or related field.
- 5 years of experience in information security, with a focus on cloud security and database security.
- Strong understanding of AWS cloud services and security best practices.
- Knowledge of database security principles and technologies, particularly related to Oracle and alternative database providers.
- Familiarity with security standards and regulations such as GDPR, HIPAA, and ISO 27001.
- Security certifications such as CISSP, CISM, or AWS Certified Security Specialty are preferred.
- Excellent communication and interpersonal skills, with the ability to interact with technical and non-technical stakeholders.
**Additional Information:**
This position offers the opportunity to work on a critical database migration project and make a significant impact on the security posture of the organization. The ideal candidate will be a subject matter expert in cloud security and database security, with a strong focus on implementing robust security controls in complex IT environments.