Senior Security Integration Engineer

KIHOMAC•Colorado Springs, CO

About The Position

Provide advice and training to end-users, and guide and inform senior leadership Demonstrate a firm understanding of network architectures including Cisco routers, switches, firewalls, IPS, and internal and external routing to delegate tasks to network engineering team Work directly with corresponding Team Leads, Project Managers, Network Engineers, and Network Architect for coordination of routine maintenance, break/fix repair, and planned changes, coordinating any down time with all appropriate leadership and stakeholders Perform end-user support to internal teammates and tenants/performers alike, including but not limited to Layer 1-3 troubleshooting, physical fault isolation cabling, etc. Generate network design guidance in coordination with architects, SMEs, and system engineers; along with the installation/deployment, configuration, testing, compliance enforcement, and reporting on MDSEA assets to include Cisco, Gigamon, and Riverbed hardware, along with the associated software suites and those of VMware NSX/ vCenter, SolarWinds, and other tools as necessary as well as assure and sustain the integrity and security of network infrastructure Update documentation (network diagrams, rack diagrams, etc.) utilizing approved work vehicles and the change management process Perform hardening and STIG checklist validation/verification for associated network infrastructure and virtual machines Provide mentorship and training to junior/mid engineers to ensure their participation in experience-gathering day-to-day activities, and review work products and efforts during their development Other duties as assigned

Requirements

Bachelor’s degree in relevant engineering or science discipline preferred
Active CCNA, CySA+, GSEC, or Security+ certification required
10+ years of general (full-time) work experience required
5+ years of directly related experience required
2+ years of experience in a management or leadership role required
Must have a strong understanding of enterprise networks, including routing, switching, VPNs, firewalls, and network security tools
Experience with data ingestion, processing, and enrichment techniques required
Ability to build and maintain network and data flow diagrams (e.g., Visio, Lucidchart, Draw.io)
Proficiency in Linux systems, command-line tools, and system administration fundamentals required
Experience working directly with customers in a technical consulting or engineering capacity required
Must be a US citizen
Candidate must be in possession of a minimum DoD issued Secret Clearance
Able to occasionally reach with hands and arms
Prolonged periods of computer screen use, while sitting or standing at a desk
Adhere to safety protocols when in work areas requiring use of PPE (e.g. eyewear, gloves, masks, hearing protection, steel toed shoes, etc.)
Able to safely lift and carry up to 20 pounds at a time

Nice To Haves

Elastic Certified Engineer, Elastic Certified Analyst, or relevant Elastic certifications preferred
Experience with cloud platforms and logging pipelines (AWS, Azure, GCP, cloud-native telemetry) preferred
Familiarity with ECS (Elastic Common Schema) and data normalization best practices preferred
Experience implementing detection engineering or threat hunting workflows in Elastic Security preferred
Knowledge of scripting languages (Python, PowerShell, Bash) to automate ingestion and data validation preferred
Experience integrating EDR, NDR, IAM, and vulnerability management logs into a SIEM preferred
Understanding of MITRE ATT&CK, cyber kill chain, and threat intelligence ingestion preferred
Experience mentoring or leading small technical teams preferred

Responsibilities

Provide advice and training to end-users, and guide and inform senior leadership
Demonstrate a firm understanding of network architectures including Cisco routers, switches, firewalls, IPS, and internal and external routing to delegate tasks to network engineering team
Work directly with corresponding Team Leads, Project Managers, Network Engineers, and Network Architect for coordination of routine maintenance, break/fix repair, and planned changes, coordinating any down time with all appropriate leadership and stakeholders
Perform end-user support to internal teammates and tenants/performers alike, including but not limited to Layer 1-3 troubleshooting, physical fault isolation cabling, etc.
Generate network design guidance in coordination with architects, SMEs, and system engineers; along with the installation/deployment, configuration, testing, compliance enforcement, and reporting on MDSEA assets to include Cisco, Gigamon, and Riverbed hardware, along with the associated software suites and those of VMware NSX/ vCenter, SolarWinds, and other tools as necessary as well as assure and sustain the integrity and security of network infrastructure
Update documentation (network diagrams, rack diagrams, etc.) utilizing approved work vehicles and the change management process
Perform hardening and STIG checklist validation/verification for associated network infrastructure and virtual machines
Provide mentorship and training to junior/mid engineers to ensure their participation in experience-gathering day-to-day activities, and review work products and efforts during their development
Other duties as assigned