Lead Security Engineer (Active Top Secret Clearance Required)

Seneca Holdings • Washington, DC

3d

About The Position

Great Hill is seeking a Lead Security Engineer in Washington, D.C. The ideal candidate is a highly skilled and experienced Lead Security Engineer. The successful candidate will lead a team of three security engineers and will be responsible for ensuring the security and integrity of our systems and data. The ideal candidate will have extensive experience in security engineering, leadership, and working within a Risk Management Framework (RMF). Additionally, proficiency with Security Configuration Management (SCM) tools such as Tripwire and CyberArk is essential.

Requirements

• Bachelor’s Degree in related-field or equivalent experience plus 5-10 years of hands-on experience.
• IDS/IPS, penetration and vulnerability testing in a virtualized Windows server environment.
• Firewall and intrusion detection/prevention protocols.
• Security Configuration Management (SCM) tools such as Tripwire and CyberArk.
• Tools such as SafeNet (a plus).
• Windows Active Directory (AD).
• Virtual machine encryption technologies.
• Identity and access management principles.
• Application security and data at rest encryption technologies.
• Secure network architectures.
• Information Assurance Assessment and Authorization (A&A) processes.
• Advanced Persistent Threats (APT), phishing, social engineering, network access controllers (NAC), gateway anti-malware, and enhanced authentication (a plus).
• Active Top-Secret Clearance

Nice To Haves

• Strong leadership and team management skills.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Ability to work under pressure and manage multiple tasks simultaneously.

Responsibilities

• Lead and mentor a team of three security engineers, providing guidance, support, and professional development opportunities.
• Implement and manage security measures in accordance with RMF guidelines.
• Utilize Security Configuration Management (SCM) tools such as Tripwire and CyberArk to ensure system configurations meet security standards.
• Configure, maintain, and troubleshoot Tripwire products and related systems. Coordinate with customer support and engineering SMEs to resolve issues and ensure compliance.
• Implement and manage Intrusion Detection and Prevention (IDS/IPS) systems, conduct penetration and vulnerability testing in a virtualized Windows server environment.
• Configure and manage firewall and intrusion detection/prevention protocols.
• Leverage tools such as SafeNet for enhanced security measures.
• Apply principles of identity and access management to secure systems and data.
• Ensure the security of applications through robust security practices.
• Ensure compliance with security policies and procedures, conduct Information Assurance Assessment and Authorization (A&A) processes, and report security irregularities.
• Address Advanced Persistent Threats (APT), phishing, social engineering, and other security threats.
• Ensure compliance with security policies and procedures and report security irregularities to appropriate personnel.

Benefits

• We provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs.
• We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level