Systems Security Engineer (Top Secret Clearance)

Description:

• Seasoned cyber security professional with deep understanding of the full security incident response and management lifecycle.
• Support systems engineers in hardening the full stack of current and future deployments, spanning everything from the underlying virtual machines’ configurations to application-level security controls.
• Lead efforts to ensure continuous compliance with federal and agency-provided standards and regulations for system patches, software upgrades, etc., for both servers and workstations.
• Monitor overall network, application, database, and system security within Splunk Enterprise (Enterprise Security) and other monitoring tools.
• Develop incident-response plans and collaborate with both the DevSecOps engineers and developers to execute penetration testing for high-value systems and applications.
• Spearhead incident-response actions, including both customer communication and technical procedures.
• Assess overall security posture for applications and services across all networks (both on-premises and in the cloud), and provide recommendations for improvements to architecture, monitoring, etc.

Requirements:

• Minimum four years of specialized experience supporting 24x7 enterprise-class applications in a significant cybersecurity role.
• Demonstrated experience developing and implementing end-to-end incident-response plans.
• Deep knowledge of cybersecurity with practical experience to know the steps, from start to finish, to address a POA&M.
• Knowledge and experience of security framework to lead the team in terms of managing the organization’s security posture.
• Ability to operate as the sole systems security engineer in the DevSecOps division, working in tandem with software developers and systems engineers to improve overall security posture, monitor threats, and manage incidents.
• Experience operating in a secure environment to include deploying security controls to the Windows operating system.
• A bachelor’s degree in computer science, network security, or a related field and at least four years of experience in a security-engineering role OR at least six years of experience in a security-engineering role.
• Experience using Splunk Enterprise (Enterprise Security) for proactive monitoring and incident response.
• Advanced troubleshooting and problem-solving skills, evidence of skills analyzing information technology issues, evaluation alternatives, and making logical recommendations based on findings, ability to define problems, collect data, establish facts, and draw valid conclusions.
• Perform scheduled maintenance and support release deployment activities after hours.
• Proven ability to effectively manage multiple priorities and meet deadlines.

Preferred Qualifications:

• Industry certifications, including: GIAC Certified Incident Handler, SANS, CEH, CISSP, CASP , and Security .
• Experience working in a security-engineering role at Federal Agency (including familiarity with iPost).
• A master’s degree in computer science, network security, or a related field.
• Experience performing penetration testing.