Network Cloud Security Engineer - TS/SCI with Polygraph

General Dynamics Information Technology•Herndon, VA

1d•Onsite

About The Position

Seize your opportunity to make a personal impact as a Network Cloud Security Engineer supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. At GDIT, people are our differentiators and as a Network Cloud Security Engineer, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Network Cloud Security Engineer joining our highly skilled team to be a premier provider of cyber security services to the customer. Our customer has a requirement for a Network Cloud Security Engineer with a background in Network Defense and Cloud Security in the areas below: Intrusion Detection/Intrusion Prevention Systems (IDS/IPS) - Trellix / FireEye Network Detection and Response (NDR) Experience with Vectra or similar (Vectra integration with Active Directory a plus); Packet brokers and optical taps Firewall experience (configuring Palo Alto NEXTGEN and/or Cisco FirePower) Creating and/or modifying Splunk dashboards Programming language experience, Python and PowerShell Experience working on/within the customer's enterprise network

Requirements

Education: Bachelors (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or closely related discipline)
Required Experience: 8+ yrs
Required Technical Skills: Demonstrated experience working in Network Defense, Network Security Architecture, and Networking Technology (various devices and vendors)
Experience designing a broad range of policy, standards and common risk management methodologies - for example, NIST, ISO 27001/27002, PCI/DSS, COBIT, ITIL, ISO 2000, etc.
Demonstrated experience with Splunk, SIEM, and network data analytics
Knowledge of IT and OT protocols, IP networks, OSI model, and other protocols utilized by the customer
Possess good troubleshooting and problem-solving skills, strong technical and analytical abilities, and strong oral and written communication skills.
Ability to identify new technologies, assess their technical and performance characteristics, as well as utilize proficiency in risk assessment methodologies
Ability to create complex system designs, resolve engineering problems, and propose preventive strategies.
Ability to write technical documents addressing complex, sensitive issues
Strong analytical and problem-solving skills
Demonstrated ability to analyze Information System (IS) test results and suggest compensating controls for meeting IS security requirements
Clearance Level Must Currently Possess: Top Secret SCI + Polygraph
Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph
US Citizenship Required: Yes

Nice To Haves

Linux (command line) experience (minimum of intermediate skill/experience), CENTOS, scripting languages (python, shell, etc.)
On-premises and Cloud software solutions for enterprise
Cyber security certification in one or more of the following: CISSP, CCNP, CCSP

Responsibilities

Communicate with team leaders and leadership, assess changes, and rapidly change direction in support of new and/or changing program requirements.
Identify risks to the critical infrastructure of the customer to protect against cyber threats from foreign states, hackers, and internal sources.
Utilize operations technology knowledge to integrate cybersecurity tools to identify, detect, protect, respond, and recover from cybersecurity events.
Serve as a customer facing expert in intrusion detection and prevention systems, network detection and response, packet capture, and/or other tools, supporting them to achieve success with the technology for their overall cybersecurity efforts.
Collaborate with project teams on their network architecture, sensor placement, and planning activities for the deployment of new technology.
Analyze and help maintain a process to coordinate improvements to the cyber security of critical infrastructure in a collaborative process with critical infrastructure owners to determine if current cyber security requirements are sufficient given current and projected risks.