Senior Security Engineer

Command Post Technologies, Inc.•Orlando, FL

82d

About The Position

The Senior Security Engineer provides senior-level development, testing, and security support to designated NCRC Range Modernization product scrum teams. The role focuses on vulnerability management, governance, risk and compliance, and security architecture and engineering. The engineer secures and hardens systems, supports classified DoD networks, and contributes to Agile/Scrum processes.

Requirements

U.S. citizenship and an active security clearance.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience.
Strong understanding of network protocols, security architecture, and security practices.
Experience with Linux-based and Windows-based systems.
Proficiency in scripting, such as Python, PowerShell, or Bash.
Experience with automation tools, such as Ansible, Terraform, Chef, or Puppet.
Understanding of CI/CD.
In-depth knowledge of modern threat landscapes, vulnerabilities, mitigation techniques, security tools, and security processes.
Familiarity with NIST 800-53, NIST 800-171, SOC 2, and/or ISO 27001.
Ability to write clear and concise cybersecurity guidance, procedures, and documentation.
Security+ certification.

Nice To Haves

Experience with DoD RMF security practices and regulations.
Virtualization experience, preferably VMware.
Familiarity with open-source security tools.
Familiarity with ACAS, Tenable Security Center, and Tenable Nessus.

Responsibilities

Implement patching procedures for Linux, Windows, VMware, and Cisco operating systems and platforms.
Run and review vulnerability scans and Security Technical Implementation Guides (STIGs).
Prioritize vulnerability remediation across endpoints, networks, and applications.
Automate patching for Linux and Windows systems.
Secure and harden hardware and software systems.
Track and support resolution of program Plan of Action and Milestones (POA&M) items and milestones.
Develop and maintain security policies, procedures, and standards.
Ensure compliance with applicable standards, directives, and regulations.
Conduct risk assessments and support audit activities.
Keep abreast of emerging technologies, cyber threats, and security tools.
Design, implement, and manage security solutions such as SIEM, EDR, firewalls, IDS/IPS, IAM, and VPN.
Evaluate and integrate new security technologies and tools.
Advise the ISSO and ISSM on securing and monitoring classified DoD networks.
Create and maintain data flow and system boundary diagrams.
Participate in Agile/Scrum processes.