About the position
Our client, a prestigious Federal contractor, is seeking a hands-on Cyber Security Engineer/Analyst to join our client's Land Border Integration program and put their Program Security Architect's vision into practice. The position is Hybrid, and the candidate will need to come onsite 2 days per week in Ashburn, VA. Our client is looking to onboard as a 6-month contract to hire.
Responsibilities
- Proactive Threat Intel and Vulnerability Management: Track threat actors and associated tactics, techniques, and procedures (TTPs)
- Oversee the monitoring of security systems, logs, and alerts to detect and respond to threats.
- Investigate security alerts and incidents and take appropriate mitigation steps.
- Fix vulnerabilities and responsible for creating security incident reports.
- Perform static code analysis to analyze source code for application’s safety and security.
- Provide guidance to system and application owners to remediate identified vulnerabilities.
- Install security software such as firewalls and encryption programs.
- Continuously improve security operations processes and procedures.
- Work with Security Architect to research, evaluate and recommend new security tools, techniques, and technologies in alignment with enterprise IT security strategy.
- Provide security awareness training to program teams and recommend security enhancements.
- Provide periodic risk assessment and penetration tests.
- Ensure security of facilities, equipment, tools, data, networks, and resources throughout the program: design, development, build, test, storage, delivery, operations, and support.
- Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.
- Provide support to plan, coordinate, and implement tactical response to improve the organization's information security posture.
- Possess working knowledge of security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols; encryption techniques/tools; familiarity with commercial products, current Internet/EC technology, and open-source methodologies.
- Stay current on cloud and cyber security technology trends.
- Ability to write and verbally communicate information security and risk-related concepts effectively to both technical and non-technical audiences.
Requirements
- Must be US Citizen due to government requirements with the ability to obtain and maintain a DHS Public Trust
- Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience
- Strong understanding of security principles, best practices, frameworks, and technologies.
- Fundamental technical knowledge of DHCP, DNS, Active Directory, Windows and Linux OSes, firewalls, networks.
- Experience writing Windows Bash and PowerShell scripting, python, and other scripting languages.
- Good understanding of Security Development Lifecycle.
- Must have strong problem-solving and analytical skills and demonstrate poise and ability to act calmly and competently in high-pressure, high stress situations.
- Familiarity with network and host-based Intrusion Detection Systems (IDSs) and Security Incident Event Management (SIEM)
Nice-to-haves
- Security certification preferred, such as (CISM, CISSP, CSSP Incident Responder Certification)
