Cyber Security Engineer 235

Freedom Technology Solutions Group • Chantilly, VA

21h • Onsite

About The Position

Freedom Technology Solutions Group is seeking a motivated, career- and customer-oriented Cyber Subject Matter Expert - Scientist to join its Cybersecurity Data Analysis Services team in Springfield, Virginia. The role manages engineering, integration, and administration support needed to deliver capabilities and services to the operational baseline. The position works in a government environment as part of a multi-contractor team and supports cybersecurity data analysis, audit services, and SIEM operations.

Requirements

• Hold a TS/SCI clearance with CI Poly.
• Have a bachelor's degree or relevant experience in a related field.
• Have 7–10 years of related experience.
• Possess the required DoD Directive 8570.1 IAT Level II or higher certification, or be able to obtain it within six months.
• Be able to work independently and in teams, take on tasks quickly with minimal direction, and lead others.
• Have strong organizational, analytical, and troubleshooting skills and a high level of attention to detail.
• Demonstrate understanding and appropriate application of DoD policy and technical security guidance to information systems.
• Have expert-level Linux systems administration and engineering skills, knowledge of general operating system security practices, and knowledge of TCP/IP networking and network security concepts.

Nice To Haves

• Familiarity with the Certification & Accreditation process.
• Ability to learn and apply training as an individual contributor and team member.
• Experience building large-scale environment automation using Ansible or similar tools.
• Ability to provide architectural recommendations to program management and government officials that balance frugality and efficiency.
• Practical experience developing custom scripts using Bash, Python, Perl, or similar languages.
• Ability to coordinate complex, out-of-the-box solutions that meet stakeholder needs.
• Ability to ingest raw data and parse relevant fields for detection and correlation.
• Cribl experience or certifications.
• Splunk Architect or Core Consultant certification.
• Experience with SIEM platforms, preferably Splunk.
• Cloud environment experience with SQS, SNS, Lambda, CloudFormation, Direct Connection, AWS load balancing, VPC peering, or relevant certifications.
• Experience with Linux, Windows Server and workstations, Red Hat, and CentOS.
• Ability to modify feed creation to ingest customer logs in a standard format that meets policy requirements.
• Familiarity with ICS 500-27 audit collection requirements.
• Familiarity with other enterprise security services, including Host Based Security Service, Enterprise Vulnerability Scanning Service, and UAM.
• Ability to clearly articulate ideas for executive-level and technical audiences.

Responsibilities

• Perform customer tasks and requests using the ServiceNow delivery platform and resolve incident tickets issued through ServiceNow.
• Onboard customer assets, including operating systems, applications, and network devices, across multiple enclaves.
• Lead exploration of emerging technologies by arranging demonstrations, providing technical evaluations, and contributing to customer roadmap development.
• Assist program and project engineers with testing and implementing future enhancements.
• Use, evaluate, and update engineering instruction sets and standard operating procedures.
• Learn and perform testing of Audit SIEM platform applications in physical and virtual environments.
• Perform Linux and Windows systems administration and engineering tasks related to the operational system.
• Verify and validate that system segments operate as intended, audit events are processed and parsed properly, metrics are generated, and required systematic audit events are accomplished.
• Operate and multitask in a dynamic, high-tempo environment.
• Provide engineering, integration, and administration support for successful delivery of capabilities and services to the operational baseline.
• Facilitate enablement, collection, and verification of customer data within SIEM tools.
• Develop SIEM search queries to support Enterprise Audit service requirements.
• Learn custom audit solutions that use advanced parsing techniques.
• Lead and coordinate beta testing of future Audit Enterprise system enhancements and provide feedback.

Benefits

• Flexible work environment.
• Friendly, like-minded colleagues and a team-oriented environment.
• Opportunity to work with innovative, cutting-edge technologies.
• Competitive compensation and benefits.
• Work-life balance.
• Career growth and advancement opportunities.
• Matching 401(k).
• Fully paid medical coverage.
• Generous paid time off, including paid site closure days.
• Paid training and tuition reimbursement.
• Referral bonuses.
• Fully paid life and disability coverage.
• Annual logo wear allowance.
• Company-sponsored events, including game nights, holiday parties, summer parties, and happy hours.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior