Cyber Security Engineer/Analyst

Our client, a prestigious Federal contractor, is seeking a hands-on Cyber Security Engineer/Analyst to join our client's Land Border Integration program and put their Program Security Architect-s vision into practice.

The position is Hybrid, and the candidate will need to come onsite 2 days per week in Ashburn, VA. Our client is looking to onboard as a 6-month contract to hire.

Responsibilities:

- Proactive Threat Intel and Vulnerability Management: Track threat actors and associated tactics, techniques, and procedures (TTPs)
- Oversee the monitoring of security systems, logs, and alerts to detect and respond to threats.
- Investigate security alerts and incidents and take appropriate mitigation steps.
- Fix vulnerabilities and responsible for creating security incident reports.
- Perform static code analysis to analyze source code for application-s safety and security.
- Provide guidance to system and application owners to remediate identified vulnerabilities.
- Install security software such as firewalls and encryption programs.
- Continuously improve security operations processes and procedures.
- Work with Security Architect to research, evaluate and recommend new security tools, techniques, and technologies in alignment with enterprise IT security strategy.
- Provide security awareness training to program teams and recommend security enhancements.
- Provide periodic risk assessment and penetration tests.
- Ensure security of facilities, equipment, tools, data, networks, and resources throughout the program: design, development, build, test, storage, delivery, operations, and support.
- Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.
- Provide support to plan, coordinate, and implement tactical response to improve the organization's information security posture.
- Possess working knowledge of security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols; encryption techniques/tools; familiarity with commercial products, current Internet/EC technology, and open-source methodologies.
- Stay current on cloud and cyber security technology trends.
- Ability to write and verbally communicate information security and risk-related concepts effectively to both technical and non- technical audiences.

- Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience
- Strong understanding of security principles, best practices, frameworks, and technologies.
- Fundamental technical knowledge of DHCP, DNS, Active Directory, Windows and Linux OSes, firewalls, networks.
- Experience writing Windows Bash and PowerShell scripting, python, and other scripting languages.
- Good understanding of Security Development Lifecycle.
- Must have strong problem-solving and analytical skills and demonstrate poise and ability to act calmly and competently in high-pressure, high stress situations.
- Familiarity with network and host-based Intrusion Detection Systems (IDSs) and Security Incident Event Management (SIEM)
- Security certification preferred, such as (CISM, CISSP, CSSP Incident Responder Certification)

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.