Mid-Level InfoSec Threat Intelligence Engineer Consultant

ProSidian Consulting•Washington, DC

1d•Onsite

About The Position

ProSidian seeks a Mid-Level InfoSec Threat Intelligence Engineer Consultant focusing on Cyber-Security/Information Security (INFOSEC) and IT Effectiveness Solution related issues, to support and maintain the Information Technology (IT) and Service Support Structures on behalf of a Federal Agency INFOSEC Directorate. INFOSEC provides a wide range of information security support services to client Members, Committees, Leadership Offices, and staff. The primary objective is to ensure the continued operation of the systems that protect the Client Agency network against unauthorized access, modification of data, and malicious activity. These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur. The selected Mid-Level InfoSec Threat Intelligence Engineer Consultant will work collaboratively as part of a team of six personnel for on-site support to work The Federal Agency INFOSEC Directorate. This position may require the ability to work shifts, and be on-call, to provide 24/7 technical support for the Client Agency Information Security Technology Infrastructure. DESCRIPTION OF WORK: The Client Agency has established a security architecture consisting of high availability, load balanced systems providing the necessary protection required for The Client Agency assets. The On-Site Mid-Level InfoSec Threat Intelligence Engineer Consultant will primarily provide support to INFOSEC as described above, Monday-Friday excluding Federal holidays, during an eight-hour shift. This position may require the ability to work alternate hours as required to provide technical support for The Client Agency information security technology infrastructure. This position may require travel on an as-needed basis. Travel time should be less than 4% of the period of performance. IDEAL CANDIDATE CAPABILITY REQUIREMENTS/EXPERIENCE: In addition to the requirements and ability to provide the services listed, the ideal Mid-Level InfoSec Threat Intelligence Engineer candidate meets the below requirements: - Bachelor’s degree a computer-related field plus 5 years of professional experience or equivalent work experience. - Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation; - Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods; - Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, Intrusion Prevention Systems (IPS) and Intrusion Detection and Prevention Systems (IDPS) Systems, and advanced malware detection systems. The required IPS/IDPS Systems are network security appliances that monitor network or system activities for malicious activity. - Must be able to multi-task and work independently on moderate to complex assignments using independent professional discretion and judgment as well as transition quickly between projects with minimal supervision; - Ability to communicate effectively, both orally and in writing, with elected officials, senior staff, information systems professionals, and technical and non-technical users; - Ability to comprehend and integrate complex computer technology and software into an effective information systems security program. Must have the ability to verify the solution meets the requirements; - Unless otherwise stated, a minimum of a secret security clearance preferred, - Ability to maintain effective working relationships with colleagues, users, contractors, and vendors; and - One or more of the following Certifications preferred (CISSP, GIAC, EnCE, CCE, CEH). WORKPLACE DELIVERABLES: Workplace deliverables (on-site) for the Mid-Level InfoSec Threat Intelligence Engineer Consultant as part of The ProSidian Cybersecurity INFOSEC Engagement Team includes documentation, briefings, and analysis reports related to the following activities: - Monitoring security systems including IDS and firewalls; - Monitoring mobile threat platforms; - Conducting analysis of active and potential virtual server problems, and providing recommendations for their resolution; - Review and revise security procedures and policies as needed; - Assist in the analysis of correlated events and their resolution; and - Provide general security-relevant services required to support INFOSEC. LOCATION | PLACE OF WORK | WORK ENVIRONMENT: The Cybersecurity INFOSEC Threat Intelligence Engineer on The ProSidian Engagement Team shall perform work at The Client Agency Office Buildings located in the Metropolitan Washington, DC area. For all other Cybersecurity INFOSEC roles on The ProSidian Engagement Team, work shall be conducted at The Client Agency facilities located in the Manassas, Virginia area with the periodic requirement to work at The Client Agency office buildings in the Washington, DC area. INFOSEC shall provide workspace, equipment, and software required to complete all work necessary to support and maintain the information technology (IT) and service support structures on behalf of a Federal Agency INFOSEC Directorate. Qualifications For Mid-Level InfoSec Threat Intelligence Engineer - INFOSEC requires a Mid-Level InfoSec Threat Intelligence Engineer to provide support in the following tasks: - Proactively research emerging cyber threats. Apply analytical understanding of hacker methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits. - Utilize experience analyzing and synthesizing information with other relevant data sources, providing guidance to analysts and operators, evaluating, interpreting, and integrating all sources of information, and fusing computer network attack analyses with available threat feed data. - Communicate to team members and senior leadership both quantifiable and qualifiable cyber risk to the organization through operational briefings and threat intelligence reports. - Has in-depth knowledge of security systems and understands the life cycle of network threats, attacks, attack vectors, and methods of exploitation. - Possesses the ability to use in-depth knowledge to identify and present actionable intelligence to team members and senior leadership. - Develop and maintain analytical procedures to meet changing requirements and ensure maximum operations. - Minimum Secret security clearance required. - Perform other official duties as assigned.

Requirements

Bachelor’s degree a computer-related field plus 5 years of professional experience or equivalent work experience.
Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation
Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods
Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, Intrusion Prevention Systems (IPS) and Intrusion Detection and Prevention Systems (IDPS) Systems, and advanced malware detection systems. The required IPS/IDPS Systems are network security appliances that monitor network or system activities for malicious activity.
Must be able to multi-task and work independently on moderate to complex assignments using independent professional discretion and judgment as well as transition quickly between projects with minimal supervision
Ability to communicate effectively, both orally and in writing, with elected officials, senior staff, information systems professionals, and technical and non-technical users
Ability to comprehend and integrate complex computer technology and software into an effective information systems security program. Must have the ability to verify the solution meets the requirements
Unless otherwise stated, a minimum of a secret security clearance preferred
Ability to maintain effective working relationships with colleagues, users, contractors, and vendors
Minimum Secret security clearance required.

Nice To Haves

One or more of the following Certifications preferred (CISSP, GIAC, EnCE, CCE, CEH).

Responsibilities

Monitoring security systems including IDS and firewalls
Monitoring mobile threat platforms
Conducting analysis of active and potential virtual server problems, and providing recommendations for their resolution
Review and revise security procedures and policies as needed
Assist in the analysis of correlated events and their resolution
Provide general security-relevant services required to support INFOSEC
Proactively research emerging cyber threats.
Apply analytical understanding of hacker methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits.
Utilize experience analyzing and synthesizing information with other relevant data sources, providing guidance to analysts and operators, evaluating, interpreting, and integrating all sources of information, and fusing computer network attack analyses with available threat feed data.
Communicate to team members and senior leadership both quantifiable and qualifiable cyber risk to the organization through operational briefings and threat intelligence reports.
Has in-depth knowledge of security systems and understands the life cycle of network threats, attacks, attack vectors, and methods of exploitation.
Possesses the ability to use in-depth knowledge to identify and present actionable intelligence to team members and senior leadership.
Develop and maintain analytical procedures to meet changing requirements and ensure maximum operations.
Perform other official duties as assigned.