Security Engineer (Senior)

Cintel Inc•Huntsville, AL

About The Position

Cintel, Inc. is seeking a detail-oriented, experienced Security Engineer to protect multiple applications, including AWS, DevSecOps, cloud security, and identity and access management. The role covers secure cloud infrastructure operations, application and platform security, cybersecurity monitoring, incident response planning, and compliance with defense-in-depth security policies and guidelines. The engineer will work with government and industry partners to identify and address security vulnerabilities.

Requirements

Eight years of relevant experience.
Bachelor’s degree in a related field, or an additional four years of experience in lieu of a degree.
Active Top Secret clearance with ability to obtain SCI eligibility.

Responsibilities

Oversee the security of multiple applications.
Produce incident response and recovery plans.
Apply knowledge of cyber resiliency, planning, and web application and platform security testing.
Design monitoring and alerting capabilities to identify anomalous activity across multiple systems.
Monitor platforms and applications for anomalous activity.
Understand applications’ critical data and vulnerability points.
Coordinate with industry partners to advise the government on security vulnerabilities and recommendations.
Correlate data to support detection, remediation, monitoring, and feedback on changes.
Operate secure cloud infrastructure, platforms, and software.
Install, maintain, and upgrade cloud computing environments and core infrastructure.
Develop, build, maintain, upgrade, and continuously improve cloud networks and cloud-based systems in accordance with defense-in-depth security governance policies and guidelines.
Manage organizational COMSEC resources (CNSSI 4009) or serve as key custodian for a crypto key management system (CKMS).
Perform procedures to protect the organization’s website, Internet transactions, confidential order information, and external business-to-business connections.
Apply Internet firewall and encryption technologies to maintain organizational and customer security.
Update and delete users, monitor and follow up on compliance violations, and develop security policies, practices, and guidelines.