CyberSecurity Engineer

steampunk • Washington, DC

2d • $130,000 - $180,000

About The Position

As a Cybersecurity Engineer , you will provide technical expertise and solutions to remediate persistent and challenging portfolio-wide vulnerabilities. We’re looking for someone who has passion for IT, resourceful problem-solving abilities, and a desire to learn our indicators of success in this role. The ideal candidate will have a breadth of experience over a variety of technologies that are typically used to build and run enterprise applications. The candidate will not necessarily have deep experience in all domain areas but should have a good understanding of how the various layers of an enterprise application stack interact with one another. You will work directly with system admin teams to assist and remediate vulnerabilities and harden environments, while providing recommendations on ways to enhance vulnerability management. Additionally, you will work in a team environment to develop proactive solutions to improve overall enterprise security posture through process streamlining and automation. Contributions

Requirements

• Ability to obtain a U.S. government Security Clearance
• Bachelor's Degree and 3 years of relevant experience, OR No Degree and 5 years of experience.
• Possesses at least one professional certification relevant to the technical service provided.
• Maintain a certification relevant to the product being deployed and/or maintained.

Nice To Haves

• Preferred Certifications: AWS, ComptTIA, SANs, or equivilent CyberSecurity realted certs
• Excellent written and verbal communication skills, interpersonal and collaborative skills
• Experience with documenting an as-is state of the environment, performing gap analysis, and producing artifacts that articulate options and recommendations preferred
• Experience with scripting or automating Cybersecurity tasks

Responsibilities

• Provide subject matter expertise in various risk assessments, working in an Agile environment with an understanding of the full software development lifecycle.
• Advocate for and ensure appropriate security practices are communicated and implemented within application development portfolios.
• Ability and proven experience in implementing, configuring, and securing multiple areas of an enterprise application stack, including the OS, Database, Application Server, Load Balancer, and Web Server layers. Understanding how PKI/TLS certificates work is a must.
• Integrate with both the application development and security assurance divisions to ensure vulnerability findings are understood, remediated or baselined as appropriate
• Document security findings and remediations in an enterprise knowledge base
• Support Information System Security Officers (ISSO) with activities such as security scan analysis and partner with development teams to facilitate a common understanding of security findings and applicability.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level