Cyber Security Engineer

Abacus Technology Corporation•Sumter, SC

21d•Onsite

About The Position

Abacus Technology Corporation is seeking a Cyber Security Engineer to join their team. This role involves installing, configuring, maintaining, and managing security devices for AFCENT/USCENTCOM, including IDS/IPS, LogRhythm Enterprise Security Manager, ACAS, and End-Point Security Systems (ESS)/Host-Based Security Systems (HBSS). The engineer will also provide technical advice, resolve network issues, diagnose end-user problems, and ensure adherence to security policies. Responsibilities include building network profiles, developing system concepts of operations, creating security requirements for new and existing systems with a focus on incident response, and developing reports on network performance and security incidents. The role requires staying current on vulnerabilities and exploits, developing methods to detect and prevent intrusive activities, and assisting in developing countermeasures. Troubleshooting and fault isolation for network connectivity to sensor equipment are also key duties. The engineer will conduct network security monitoring and intrusion detection analysis using various security tools and maintain ESS/HBSS and related DISA mandated point products. LAN/WAN support is also part of the role.

Requirements

3+ years of experience in cyber security.
Associate’s degree in a related field (additional years of experience may be substituted for degree requirements).
Security+ certification.
Network+ or CCNA certification.
ITIL Foundations certification or ability to obtain within 60 days of hire.
Familiarity with DIACAP, Risk Management Framework (RMF), STIGs, and IA Controls.
Experience with development/architecture for apps and services, and testing and administration.
Strong knowledge of Microsoft Windows technologies (Active Directory, Windows Administration, scripting, Windows configuration techniques).
Linux experience (Red Hat, Fedora).
Networking experience (routers, switches, web proxies, firewalls).
Experience with Cisco and Juniper.
Experience with SIEM, IDS/IPS, EDR, ENS (Trellix), and ACAS.
Detail-oriented with the ability to work in a multi-disciplined environment with an adaptive personality.
Strong analytical and communication skills.
Ability to apply intensive and diverse knowledge to problems and make independent decisions.
Team player able to work professionally and collaboratively with the government customer and other contract members.
Ability to provide support in a 24/7/365 environment, including occasional shift coverage and after-hours/weekend/holiday support on a rotational basis.
Ability to travel to CONUS sites for TDY support.
Must be a US citizen.
Hold a current Secret clearance.

Responsibilities

Install, configure, maintain, and manage AFCENT/USCENTCOM security devices (IDS/IPS, LogRhythm Enterprise Security Manager, ACAS, ESS/HBSS, VPN equipment/configurations).
Assist in development and documentation of sensor process and checklists.
Provide technical advice and assistance to AFCENT NOSC-Cybersecurity to resolve network issues and ensure IDS/IPS sensors are collecting and reporting network activity.
Diagnose and resolve end-user problems.
Ensure end-users adhere to proper security policies and procedures.
Build tactical and strategic network profiles of specific systems and complete network architecture.
Develop system concept of operations and engineering plans to execute security requirements for new and existing systems with a focus on incident response policies and procedures.
Develop reports and trend analysis documentation on bandwidth, network architecture, and network security incidents.
Maintain current knowledge on new vulnerabilities and exploits.
Develop methods to detect and prevent intrusive activities utilizing knowledge.
Assist in developing countermeasures to isolate, contain, and prevent intrusive activities and secure systems.
Conduct troubleshooting and fault isolation to ensure network connectivity to sensor equipment.
Conduct network security monitoring and intrusion detection analysis using AFCENT/USCENTCOM selected security tools (IDS/IPS, firewalls, proxy, router, ESM, Logger, Fidelis, HBSS, LogRhythm logs).
Maintain ESS/HBSS and all related DISA mandated point products.
Provide LAN/WAN support.