Security Systems Engineer, Senior

Innosoft Corporation•Pikesville, MD

3d•Onsite

About The Position

The Senior Security Systems Engineer will perform offensive and defensive information security work to maintain the integrity, security, and availability of Maryland Department of State Police (MDSP) statewide public safety systems. These include body-worn and in-car cameras, mobile computer and radio systems, servers, network equipment, and related communications infrastructure. The position investigates potential security incidents, reviews system, firewall, and network monitoring logs, performs risk assessments, and supports MDSP IT staff with server and firewall patching and firmware updates. The role also defines, designs, develops, documents, and implements solutions to multi-level security (MLS) requirements; supports secure remote access, VPN, intrusion detection, port scanning, web security, and vulnerability assessment and remediation; and configures, deploys, and supports security tools including SolarWinds SEM, CrowdStrike Falcon, Tenable Security Center, and Nessus. The engineer analyzes information requirements and workflow or planning problems, develops corrective action plans, and documents findings and communicates results to MDSP IT staff and management. This is an on-site position at 1201 Reisterstown Road, Pikesville, Maryland, though some telework may be permitted. Local candidates are preferred. The engagement is for two years with one two-year renewal option and is contingent upon contract award. Employment begins only after contract award and successful completion of the required Maryland State Police background check, including Livescan fingerprinting. Candidates must be authorized to work in the United States and able to work on-site in Pikesville.

Requirements

At least six years of experience in information systems security engineering.
At least three years of experience investigating and identifying potential information security incidents, connecting investigation evidence, and determining whether an incident occurred.
At least three years of experience reviewing computer and server log files, firewall log files, and network monitoring logs for potential information security incidents.
Demonstrated ability to perform risk assessments based on computer, server, firewall, and network monitoring log data.
Experience using interactive, interpretive security systems with online, real-time investigation and research capabilities.
Ability to assist IT resources with server and firewall patching and firmware updates.
Bachelor's degree from an accredited college or university, with a major in computer science, information systems, engineering, business, or another related scientific or technical discipline.
Must pass a Maryland Department of State Police background check before reporting, including fingerprinting at a Maryland Livescan location.
Must be authorized to work in the United States.
Must be able to work on-site in Pikesville, Maryland.

Nice To Haves

At least two years of experience defining, designing, developing, documenting, and implementing solutions to MLS requirements.
At least two years of experience gathering and organizing technical information about an agency's data and network security needs, existing security products, and ongoing MLS programs.
At least two years of experience implementing solutions for secure remote access, VPN, intrusion detection, port scanning, web security, and vulnerability assessment and remediation.
At least 12 months of experience configuring, deploying, and supporting more than one of the following: SolarWinds SEM, CrowdStrike Falcon, Tenable Security Center, Nessus, Microsoft Windows Server, Microsoft Windows workstation operating systems, Linux, or Google Workspace.
Experience supporting public safety, law enforcement, or other public sector organizations.
Previous experience supporting the Maryland Department of State Police.

Responsibilities

Identify and investigate potential information security incidents, connect evidence found during investigations, and determine whether an incident occurred.
Review computer and server log files, firewall log files, and network and communication monitoring logs for potential information security incidents.
Use interactive, interpretive security systems with online, real-time investigation and research capabilities.
Perform risk assessments using data from computer, server, firewall, and network monitoring logs.
Perform offensive and defensive information security work to protect statewide public safety systems.
Define, design, develop, document, and implement solutions to multi-level security (MLS) requirements.
Gather and organize technical information about agency data and network security needs, existing security products, and ongoing MLS programs.
Implement solutions for secure remote access, VPN, intrusion detection, port scanning, web security, and vulnerability assessment and remediation.
Configure, deploy, and support SolarWinds SEM, CrowdStrike Falcon, Tenable Security Center, and Nessus.
Analyze information requirements and workflow, organization, and planning problems; develop and implement corrective action plans.
Assist IT resources with server and firewall patching and firmware updates.
Document investigation findings, risk assessments, and corrective actions, and communicate results to MDSP IT staff and management.
Abide by State of Maryland and MDSP security policies.