Lead Security Engineer (Active Top Secret Clearance Required)

Seneca Holdings•Washington, DC

7h•Onsite

About The Position

Clear Creek Federal is seeking a Lead Security Engineer in Washington, D.C. The ideal candidate is a highly skilled and experienced Lead Security Engineer. The successful candidate will lead a team of three security engineers and will be responsible for ensuring the security and integrity of our systems and data. The ideal candidate will have extensive experience in security engineering, leadership, and working within a Risk Management Framework (RMF). Additionally, proficiency with Security Configuration Management (SCM) tools such as Tripwire and CyberArk is essential.

Requirements

Bachelor’s Degree in related-field or equivalent experience plus 5-10 years of hands-on experience.
IDS/IPS, penetration and vulnerability testing in a virtualized Windows server environment.
Firewall and intrusion detection/prevention protocols.
Security Configuration Management (SCM) tools such as Tripwire and CyberArk.
Windows Active Directory (AD).
Virtual machine encryption technologies.
Identity and access management principles.
Application security and data at rest encryption technologies.
Secure network architectures.
Information Assurance Assessment and Authorization (A&A) processes.
Active Top-Secret Clearance

Nice To Haves

Tools such as SafeNet (a plus).
Advanced Persistent Threats (APT), phishing, social engineering, network access controllers (NAC), gateway anti-malware, and enhanced authentication (a plus).
Strong leadership and team management skills.
Excellent problem-solving and analytical skills.
Strong communication and interpersonal skills.
Ability to work independently and as part of a team.
Ability to work under pressure and manage multiple tasks simultaneously.

Responsibilities

Lead and mentor a team of three security engineers, providing guidance, support, and professional development opportunities.
Implement and manage security measures in accordance with RMF guidelines.
Utilize Security Configuration Management (SCM) tools such as Tripwire and CyberArk to ensure system configurations meet security standards.
Configure, maintain, and troubleshoot Tripwire products and related systems. Coordinate with customer support and engineering SMEs to resolve issues and ensure compliance.
Implement and manage Intrusion Detection and Prevention (IDS/IPS) systems, conduct penetration and vulnerability testing in a virtualized Windows server environment.
Configure and manage firewall and intrusion detection/prevention protocols.
Leverage tools such as SafeNet for enhanced security measures.
Apply principles of identity and access management to secure systems and data.
Ensure the security of applications through robust security practices.
Ensure compliance with security policies and procedures, conduct Information Assurance Assessment and Authorization (A&A) processes, and report security irregularities.
Address Advanced Persistent Threats (APT), phishing, social engineering, and other security threats.
Ensure compliance with security policies and procedures and report security irregularities to appropriate personnel.

Benefits

Competitive pay
Benefits and perks
Flexible work-life balance
Professional development opportunities
Performance and recognition programs
Comprehensive benefits package that includes medical, dental, vision, life, and disability
Voluntary benefit programs (critical illness, hospital, and accident)
Health savings and flexible spending accounts
Retirement 401K plan
Paid leave programs