Job description
The Security Engineer supports overall product health and updates, ensuring baseline products are accredited in accordance with government standards. The Security Engineer uses a variety of processes and toolsets to ensure network/software health and compliance.
Responsibilities:
- Conduct proof of concept testing
- Design, test, and integrate new security products as directed by the government supervisor or POC
- Integration of security products
- Maintains a robust library of documentation to include network diagrams for cyber defense capabilities and sensors
- Maintains and conducts routine vulnerability scanning capabilities across networks
- Oversee patching, hardening, and baselining activities across networks; ensures other stakeholders are in compliance with established patching/hardening policies
- Maintains, configures, and ensures the successful deployment of logging/auditing tools across the networks; ensures logging activities are functional across all networks
- Maintains system baseline and configuration management items including security event monitoring policies in a manner determined and agreed to by the program management
- Provides engineering documentation and interacts with both engineers and O&M personnel to ensure a complete and functioning system that meets requirements
- Ensures all network defense capabilities are kept current, patched, and securely configured and communicates status to management
- Analyzes the data flows into, out of, and across networks to ensure security gaps do not exist and data exchange is in line with system classification levels
Basic Qualifications:
- An active TS/SCI with an active Polygraph
- Level 2: 2 years of relevant experience and a BS degree in Computer Science, Information Technology, or related technology; an additional 4 years of experience is required in lieu of a degree
- Level 3: 5 years of relevant experience and a BS degree in Computer Science, Information Technology, or related technology or 3 years of relevant experience and an MS degree; an additional 4 years of experience is required in lieu of a degree
- The ability to maintain, configure, and monitor network security applications, network devices, encryption technologies, operating systems (Windows/Unix/Linus), and storage appliances
- Hands-on experience and practical application securing information technology infrastructures including but not limited to: operating systems, network topologies/architectures, major web/database application systems, storage solutions, network perimeter/boundary devices, logging solutions, etc.
- Demonstrates junior level understand of policies and securing data flows and network boundaries; must demonstrate proficiency with large complex architecture and moving data at varying classification/compartmentation levels through IT systems
- Ability to identify alternative and/or innovative solutions or measures to protect networks, often within budgetary or infrastructure constraints
Preferred Qualifications:
- CISSP & CCNA
- Demonstrates strong interpersonal skills, the ability to work effectively as a member of an integrated team, and the ability to negotiate reasonable compromises among a diverse group of stakeholders
- Excellent analytical and problem solving skills
- Ability to work in a fast-paced, technically challenging area; ability to anticipate changes, problems, or activities, assess impacts, and recommend sound solutions
- Junior level experience with Windows, Linux, and Solaris family of operating systems
- Familiarity with penetration tests, assessments, and formal information security compliance inspections of Federal government classified systems
- Strong fundamental understanding of complex, intertwined systems and data flows and years of practical experience in the Federal IT Security space
- Experience with ICD 503 and A&A process
- Able to work independently and motivated and capable of working across teams and organizations
- Excellent interpersonal, organizational, writing, communications, and briefing skills; able to communicate complex technical concepts and project information clearly and concisely to both technical and non-technical audiences
abouteureka.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, abouteureka.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, abouteureka.com is the ideal place to find your next job.