Mid Cybersecurity Engineer IRES - SSFB/HSV

Amentum•Colorado Springs, CO

1d•Onsite

About The Position

The Mid Cybersecurity Engineer supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will perform cybersecurity duties on customer networks (proactively and reactively) to improve enterprise-wide security posture. This role involves analyzing and processing Cyber Task Orders (CTOs), performing vulnerability scans, conducting network security threat/impact assessments, and utilizing Defensive Cyber Operations (DCO) tools to analyze events and indicators of compromise. The engineer will also support the development and update of procedures, assist with host-based security using DoD Host based Security System (HBSS), support Incident Response, generate vulnerability assessment reports, and manage queries and dashboards for security tools.

Requirements

2, or more, years of general (full-time) work experience (May be reduced with completion of advanced education)
6, or more, months of directly related cyber or systems engineering experience
1 year of managerial experience.
A current DoD 8570 IAT Level II certification (e.g., Security+, CISSP, etc.)
A current DoW Secret Security Clearance
Experience with most MS Office applications (Word, Excel, PowerPoint, and Visio).
Ability to multi-task and prioritize various projects and assignments in a dynamic work environment to meet scheduled/unscheduled customer requests.
Willingness to travel up to 10% of the time.
Ability to support periodic on call requirements
Experience operating Tenable ACAS solutions
Experience operating McAfee ePolicy Orchestrator

Nice To Haves

An Associate's or bachelor’s degree in Cybersecurity, Computer Science or related field
Experience with security analysis and solutions in a WAN/LAN environment to include Routers, Switches, Network Devices, and Operating Systems (e.g., Windows, and Linux)
Experience with other Security Operations Centers (SOC)/DCO tools/applications, such as Firewalls, Intrusion Detection Systems / Intrusion Prevention Systems, Network Security Manager, Bluecoat, Barracuda, etc.
Experience performing security compliance scans across a WAN (ACAS/Nessus preferred)
Background in configuration, troubleshooting, and deployment of host-based security (HBSS preferred)
Relevant computing environment certifications (HBSS/ESS, ACAS, Windows, Linux, etc.)
Familiarity with Security Operations Centers (SOC)/DoD
An active DoD Top Secret clearance

Responsibilities

Perform cybersecurity duties on customer networks (proactively and reactively) to improve enterprise-wide security posture.
Analyze and process Cyber Task Orders (CTOs) to track, report, and brief on tasks including, but not limited to: IAVM compliance, device confiscations, research and investigation, website blocks, and/or projects related to compliance, etc.
Perform and analyze vulnerability scans without affecting network operations utilizing Assured Compliance Assessment Solution (ACAS/Nessus) scanning tool.
Perform network security threat/impact assessments and prepare assessment reports.
Utilize available Defensive Cyber Operations (DCO) tools to analyze and correlate events, vulnerabilities, and STIGs from network security devices and mission critical infrastructure (e.g., network and host-based security systems, firewalls, routers, switches, servers, workstations, etc.) for indicators of compromise, attack vectors, and known attack patterns.
Analyze and interpret log data within various tools (e.g., ACAS, HBSS/ESS, etc.).
Analyze vulnerabilities against known exploits in enterprise cyber-threat environment and disseminate guidance to improve network defensive posture.
Support the development, establishment, review and update of Tier III LCC procedures, processes, manuals, and other documentation.
Assist with host-based security across the enterprise utilizing DoD Host based Security System (HBSS), to include antimalware, host-based intrusion protection system, data loss prevention, and rogue system detection.
Support Incident Response across the enterprise IAW DoD regulations and instructions.
Generate vulnerability assessment reports for customers and escalate for further review.
Create, update, and manage queries and dashboards pertaining to HBSS, ACAS, and related security tools.
Support the review and update of CND procedures, processes, manuals, and other documentation.