Mid Cybersecurity Engineer IRES - SSFB/HSV

Amentum•Colorado Springs, CO

3d•$120,000 - $130,000•Onsite

About The Position

The Mid Cybersecurity Engineer supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will perform cybersecurity duties on customer networks (proactively and reactively) to improve enterprise-wide security posture. This role involves analyzing and processing Cyber Task Orders (CTOs) to track, report, and brief on various tasks, performing and analyzing vulnerability scans using Assured Compliance Assessment Solution (ACAS/Nessus), and conducting network security threat/impact assessments. The engineer will utilize Defensive Cyber Operations (DCO) tools to analyze events, vulnerabilities, and STIGs from various network security devices and mission-critical infrastructure, analyze vulnerabilities against known exploits, and support the development and update of procedures, processes, and documentation. Additionally, the role includes assisting with host-based security using DoD Host based Security System (HBSS) and supporting Incident Response across the enterprise.

Requirements

Must have 2, or more, years of general (full-time) work experience
Must have 6, or more, months of directly related cyber or systems engineering experience
Must have 1 year of managerial experience.
Must have a current DoD 8570 IAT Level II certification (e.g., Security+, CISSP, etc.)
Must have, or obtain, an active DoW Secret Security Clearance
Experience with most MS Office applications (Word, Excel, PowerPoint, and Visio).
Able to multi-task and prioritize various projects and assignments in a dynamic work environment to meet scheduled/unscheduled customer requests.
Willing to travel up to 10% of the time.
Maintain the ability to support periodic on call requirements
Experience operating Tenable ACAS solutions
Experience operating McAfee ePolicy Orchestrator

Nice To Haves

Associate's or bachelor’s degree in Cybersecurity, Computer Science or related field
Experience with security analysis and solutions in a WAN/LAN environment to include Routers, Switches, Network Devices, and Operating Systems (e.g., Windows, and Linux)
Experience with other Security Operations Centers (SOC)/DCO tools/applications, such as Firewalls, Intrusion Detection Systems / Intrusion Prevention Systems, Network Security Manager, Bluecoat, Barracuda, etc.
Experience performing security compliance scans across a WAN (ACAS/Nessus preferred)
Background in configuration, troubleshooting, and deployment of host-based security (HBSS preferred)
Relevant computing environment certifications (HBSS/ESS, ACAS, Windows, Linux, etc.)
Familiarity with Security Operations Centers (SOC)/DoD
Active DoD Top Secret clearance

Responsibilities

Perform cybersecurity duties on customer networks (proactively and reactively) to improve enterprise-wide security posture.
Analyze and process Cyber Task Orders (CTOs) to track, report, and brief on tasks including, but not limited to: IAVM compliance, device confiscations, research and investigation, website blocks, and/or projects related to compliance, etc.
Perform and analyze vulnerability scans without affecting network operations utilizing Assured Compliance Assessment Solution (ACAS/Nessus) scanning tool.
Perform network security threat/impact assessments and prepare assessment reports.
Utilize available Defensive Cyber Operations (DCO) tools to analyze and correlate events, vulnerabilities, and STIGs from network security devices and mission critical infrastructure (e.g., network and host-based security systems, firewalls, routers, switches, servers, workstations, etc.) for indicators of compromise, attack vectors, and known attack patterns.
Analyze and interpret log data within various tools (e.g., ACAS, HBSS/ESS, etc.).
Analyze vulnerabilities against known exploits in enterprise cyber-threat environment and disseminate guidance to improve network defensive posture.
Support the development, establishment, review and update of Tier III LCC procedures, processes, manuals, and other documentation.
Assist with host-based security across the enterprise utilizing DoD Host based Security System (HBSS), to include antimalware, host-based intrusion protection system, data loss prevention, and rogue system detection.
Support Incident Response across the enterprise IAW DoD regulations and instructions.
Generate vulnerability assessment reports for customers and escalate for further review.
Create, update, and manage queries and dashboards pertaining to HBSS, ACAS, and related security tools.
Support the review and update of CND procedures, processes, manuals, and other documentation.