Security Engineer

ASM Research • Ashburn, VA

6d

About The Position

Evaluates application security in all phases of the software development life cycle. Works closely with team members to define application security best practices, performs software architecture and design reviews, and supports the identification, interpretation, and remediation of vulnerabilities across a variety of applications, programming languages, and platforms.

Requirements

• Bachelor’s Degree in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience.
• Minimum of 5 years of experience in Security Engineering.
• Experience maintaining the SIEM infrastructure and OS to support the collection and aggregation of all appropriate data sources including but not limited to IDS data from network sensors, raw data from collection agents, firewalls, proxy servers, DLP, antivirus, and vulnerability scanner elements.
• Technology Evaluation.
• Security Tool Engineering and Maintenance.
• Analysis of Alternatives.
• Logging Capabilities and Requirements.
• Data Retention and Storage Requirements.
• Hardware Life Cycle Management.
• Software Maintenance and Assurance.
• Configuration Management.
• Experience supporting LAN / WAN and cloud security solutions.

Responsibilities

• Provide Security Engineering and Sustainment (SES) support in existing technologies (e.g., datacenter location(s)), transitional locations, and Cloud environments.
• Advise and assist with maintenance and engineering of the OPR IOD Cyber Forensic Enterprise Network (OCFEN) infrastructure to include hardware and software throughout its lifecycle to ensure adaptability.
• Utilize, by means of the agency Internal Change Request processes and internal ticketing system, to identify priorities and service requests, take action, track and update and close tickets upon completion.
• Document all operating procedures / processes.
• Be available for activities that are likely to affect security or availability including: Change Management, Configuration types of critical equipment and Vulnerability Management (including patching).
• Obtain approval by both senior engineering and IT security staff prior to execution of all changes.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level