Blue Team Engineer (Top Secret Clearance)

ShorePoint•Washington, DC

7d•Onsite

About The Position

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. We are seeking a Blue Team Engineer with experience supporting defensive cybersecurity operations across enterprise environments. This role focuses on assessing system security, validating controls and identifying vulnerabilities through testing, analysis and monitoring activities. The Blue Team Engineer supports authorization, continuous monitoring and threat detection efforts while working closely with stakeholders to strengthen overall security posture. This is a unique opportunity to shape the growth and culture of an exciting and fast-growing company in the cybersecurity market.

Requirements

Broad knowledge of security methodologies, solutions and industry best practices.
Experience with open-source and commercial testing tools such as Nessus, Metasploit, Burp Suite, App Detective and Nmap.
Advanced understanding of security tools with the ability to configure and troubleshoot them as needed.
Expertise in Unix/Linux or Microsoft operating systems, with extensive experience in at least one.
Familiarity with security policies of the Department of Justice (DOJ), FBI and National Institute of Standards and Technology (NIST) guidelines (e.g., 800-53, 800-53a).
Strong critical thinking and analytical skills, with the ability to interpret and synthesize complex data.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field or 10 years of relevant IT experience.
8 years+ of relevant experience. Equivalent combinations of education, certifications or demonstrable work may be considered in lieu of direct experience.
Demonstrated ability to apply critical thinking to develop undefined tasks into actionable processes and work streams.
Expertise in at least one of the following areas: Web applications and technologies, Networking technologies, Enterprise solutions, storage and databases, Cross-domain solutions, Virtualization technologies, Mainframes.
One or more of the following certifications: CISSP, ISACA, OSCP, CISA, GPEN, GWAPT or CEH.
Applicants must hold and maintain an active Top Secret with SCI eligibility and ability to pass a Counterintelligence (CI) polygraph.

Responsibilities

Conduct automated and manual tests on information systems using industry-standard tools such as vulnerability scans, source code reviews and web application testing.
Develop test plans, execute tests and prepare detailed after-action reports.
Document testing processes in accordance with agency regulations and Standard Operating Procedures (SOPs).
Contribute to Authorization & Accreditation (A&A), Plan of Action & Milestones (POA&M), vulnerability management and continuous monitoring efforts.
Use signature-based scanners, data collection tools and hardware analysis tools to assess potential threat events.
Perform Security Information and Event Management (SIEM) reviews to ensure proper detection and notification of threats.
Support vulnerability analysis and develop mitigation strategies to prevent future threats.
Support remote locations with traveling assessments as scheduled (30% travel expected, Continental United States).