Countermeasures Engineer

The Newberry Group•Chambersburg, PA

1d•Onsite

About The Position

Newberry Group is seeking a Countermeasures Engineer to support its customer on the DISA DECO Task Order 22 Network Assurance Program. The role refines and maintains defenses for Cross Domain Enterprise Services (CDES) infrastructure. The engineer engages and collaborates with customers, anticipates their needs, and delivers cybersecurity solutions. The position calls for knowledge of cybersecurity fundamentals, threat-actor TTP frameworks such as MITRE ATT&CK, development and deployment of threat-detection and mitigation rules and analytics, and creation of solutions that defend customer networks in accordance with industry and government standards. This is a full-time, onsite position in Chambersburg, Pennsylvania; telework is not permitted. Travel is required approximately 10% of the time. The role requires an active DoD Secret clearance or higher and an active DoD-8570 IAT Level 2 baseline certification (Security+ CE) by the start date.

Requirements

Active DoD Secret security clearance or higher; the program can support up to TS.
Bachelor's degree from an accredited college in a related discipline and at least 4 years of professional experience; additional or equivalent experience may substitute for a degree.
Knowledge of Cyber Network Defense (CND), including protect, detect, respond, and sustain functions within a Computer Incident Response organization.
Ability to work independently in a high-visibility, frequently changing environment.
Understanding of enclave-level networking and sensor technologies.
Understanding of Endpoint Detection and Response (EDR) technologies.
Active DoD-8570 IAT Level 2 baseline certification (Security+ CE) by the start date.
Self-motivation and strong written and verbal communication skills.

Nice To Haves

Experience with DISA and DoD networks.
User-level experience with Microsoft SharePoint.
Privileged-user-level experience with Microsoft Azure and the Microsoft Defender Suite of tools.
Microsoft AZ-104, AZ-500, and SC-200 certifications, or other Microsoft Azure and Defender-related certifications.
Experience developing scripts in Python and PowerShell.
Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP, CCNA, CCNP, or CASP.
Experience in intelligence-driven defense.
Experience with DoD accreditation.

Responsibilities

Establish baseline security-relevant data in accordance with NSA National Cross Domain Services Management Office (NCDSMO) Raise the Bar (RTB) standards.
Maintain the integrity and efficacy of customer configurations; establish baseline customer configurations during onboarding and work with customers to track infrastructure changes.
Work with primary monitoring centers to validate access to data and CDES index or indices with a SIEM.
Collaborate with other teams to apply threat intelligence to analytics and countermeasures, and develop analytics and countermeasures.
Track and make recommendations for RTB compliance by DISA and mission partners.
Stay current with RTB standards; work with the DISA CDES office and NCDSMO to understand standards changes and determine changes needed by DISA CSSP to assist with compliance.
Work with peer teams to establish data-health and monitoring dashboards.