Senior Principal Information Security Engineer (supporting the Naval Research Lab)

ASRC Federal•Welcome Acres, MD

1d•$165,000 - $250,000•Onsite

About The Position

ASRC Federal System Solutions LLC, a subsidiary of ASRC Federal, is seeking a Senior Principal Information Security Engineer to support our Prime program at Blossom Point Tracking Facility in Welcome, MD for the Naval Research Lab. The ISSE shall be a part of the technical team that will upgrade and maintain the security posture of all networks at Blossom Point.

Requirements

Direct experience with anti-virus software, intrusion detection, firewalls and content filtering
Knowledge of risk assessment tools, technologies and methods
Experience designing secure networks, systems and application architectures
Knowledge of disaster recovery, computer forensic tools, technologies and methods
Experience planning, researching and developing security policies, standards and procedures
Professional experience in a system administration role supporting multiple platforms and applications
Ability to communicate network security issues to peers and management
Ability to read and use the results of mobile code, malicious code, and anti-virus software
Bachelor’s degree or equivalent in the fields of mathematics, telecommunications, electrical engineering, computer engineering, or computer science and 10 years related experience
Requires expert technical knowledge in security engineering and IT systems engineering
Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy
Strong IT system and application engineering background with experience in Red Hat Enterprise Linux 8/9, Windows 11, Windows Server 2012, Active Directory Group Policy, networking, VMware vSphere 5 & 6, ESS, and ACAS
Experience with certification testing, Risk Management Framework (RMF), information assurance tools, DoD STIG, and vulnerability assessment

Nice To Haves

CISSP, CISM, or DoD 8140 / 8570.1 certification (IAM level 3) desired
Network Security tools – Nessus, FireEye, Suricata, or Palo Alto knowledge highly desired
Security Information and Event Management tools - LogRhythm, ArcSight, NetWitness, Splunk Enterprise Security, or AlienVault experience highly desired

Responsibilities

Perform installation and processing of new security products and procedures
Will constantly monitor the networks and systems for security breaches or intrusions
Will install software that helps to notify the team of intrusions, and watch out for irregular system behavior
Conduct periodic scans of networks to find vulnerabilities and apply mitigation techniques
Perform incident response activities to minimize impact.