Information Systems Security Engineer

Tlingit Haida Tribal Business Corporation•Arlington, VA

8h•$139,000 - $153,000•Onsite

About The Position

The Information Systems Security Engineer supports the National Military Command Center (NMCC) customer by providing cybersecurity and security engineering services, including system security engineering, cybersecurity risk assessments, and security architecture support. This position performs or reviews technical security assessments of computing environments to identify vulnerabilities and non-compliance with established cybersecurity standards and regulations and recommends appropriate mitigation strategies.

Requirements

Bachelor’s degree in computer science, information technology, or a related field and five or more years of systems engineering experience.
A master’s degree in computer science, information technology, or a related field and three years of related experience may be substituted for the bachelor’s degree and experience requirement.
In lieu of a degree, 12 years of intensive and progressive experience demonstrating the required proficiency levels related to the position may be considered.
Five or more years of experience with systems engineering, including design and architecture.
Demonstrated ability to identify security risks throughout information system network structures, including operating systems, hardware, and various data-transfer protocols.
Must currently possess and maintain an active DoD Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance, as required for the position.
Must be able to maintain the ability to access the government worksite.
Must possess and maintain a valid state driver’s license and a safe driving record, in accordance with company policy, to operate vehicles or equipment as required for the position.
Must possess a current CompTIA Security+ certification.
Knowledge and experience with ACAS scan results and vulnerability remediation.
Experience building, deploying, maintaining, and patching HBSS Windows and ACAS Red Hat Linux servers.
Experience building, maintaining, and patching ePO, Security Center, and Nessus servers.
Knowledge of HBSS/ePO, Tenable Security Center, DISA kickstart ISOs, and applicable licensing processes.
Experience implementing STIG requirements for Windows and RHEL servers and applicable security policies.
Experience running SCAP scans on Windows and RHEL servers.
Knowledge of Red Hat RPM updates and local YUM repositories used to patch offline ACAS servers.
Ability to deploy rogue sensors and identify rogue subnets and endpoints.
Ability to troubleshoot Security Center and Nessus scanner issues.
Effective communication and presentation skills, including the ability to present ideas effectively in formal and informal, group, and individual settings.
Strong planning, organizational, and time-management skills, including the ability to plan, organize, prioritize, and follow up on work to ensure completion.
Demonstrated initiative and ability to work independently.

Responsibilities

Design, implement, and maintain complex information technology systems, including the computing infrastructure required to accomplish key tasks, establish networking rules for cybersecurity, and troubleshoot network errors and other technical issues.
Lead the development of technical solutions from refinement of customer requirements through design, build, testing, and deployment.
Document and communicate technical solutions and results of analyses leading to recommended courses of action.
Build, deploy, and patch HBSS Windows and ACAS Red Hat Linux 7.9 and 8 servers.
Build, maintain, and patch ePO, Security Center, and Nessus servers.
Provide Security Center accounts for Vulnerability Managers to scan devices within ACAS.
Review ACAS scan results and support remediation of identified vulnerability findings.
Support the process for obtaining required licenses for HBSS ePO and Tenable Security Centers.
Support the process for obtaining HBSS and ACAS kickstart ISOs from DISA.
Build virtual servers and deploy and patch applicable McAfee modules through ePO.
Configure McAfee policies for applicable environments and implement STIG requirements for HBSS Windows operating systems, McAfee policies, and ACAS RHEL servers.
Run SCAP scans on Windows and RHEL servers.
Update Red Hat 7.9 and 8 RPMs as released and establish Red Hat YUM local RPM repositories to patch offline ACAS servers.
Deploy rogue sensors on applicable subnets and identify rogue subnets and endpoints.
Troubleshoot Security Center and Nessus scanner issues.
Adhere to company policies, procedures, and safety regulations.
Perform other duties as assigned.