Sr. Security Engineer

Dynanet Corporation

50d•Remote

About The Position

We are looking for a highly skilled Sr. Security Engineer with expertise in understanding the threat landscape and implementing holistic countermeasures. In this role, you will focus on security architecture and incident management, contributing to the organization’s ability to identify, mitigate, and resolve cybersecurity threats effectively.

Requirements

Possess Strong written and verbal communication skills.
Highly organized with an ability to prioritize, balance, and effectively advance multiple competing priorities in a high-volume, fast-paced environment.
Ability to interact in a professional and collaborative manner with fellow Dynanet Teammates and the clients, and business partners that we work with.
Ability and desire to challenge and educate yourself to support and advance IT services delivery in the Federal agencies we serve.
Excellent judgment and creative problem-solving skills.
Respond to team members and client requests via email, MS teams, or other communication means during core business hours.
Active listening skills to understand clients' needs, and collaboration skills to work with other developers and designers.
Bachelor’s degree in computer science, IT or relevant field
10 years' experience
Extensive experience with:
WAF Solutions: Barracuda Cloud WAF, AWS WAF.
Monitoring Tools: Splunk (including monitoring, reporting, and dashboarding).
Security Solutions: DBProtect for database security and risk assessment.
Proficiency in:
Cybersecurity architecture design and implementation.
Incident management and security incident response.
Vulnerability remediation and cyber risk mitigation.
Familiarity with:
NIST directives (e.g., 800-53), FedRAMP, and the ATO process
Experience conducting third-party vendor risk assessments.
Strong technical skills in creating detailed infrastructure and security architecture diagrams.
Background in performing comprehensive cloud risk reviews.

Responsibilities

Threat Analysis & Response:
Conduct Web Application Firewall (WAF) traffic load analysis and monitor performance impacts.
Assess potential attack characteristics based on mission-critical infrastructure.
Identify and define site-specific data collection requirements to enhance threat detection capabilities.
Security Problem Resolution:
Analyze and resolve information security issues using expertise in major security products and services.
Recommend and implement security solutions based on knowledge of infrastructure security disciplines and technology limitations.
Cybersecurity Architecture & Compliance:
Design and implement robust cybersecurity controls across multiple environments.
Ensure compliance with NIST directives (e.g., 800-53), FedRAMP, and ATO processes.
Monitoring & Reporting:
Utilize tools like Splunk for monitoring, reporting, and dashboard creation.
Prepare and provide detailed security reports, including diagrams, for infrastructure and security teams.
Risk Management & Vendor Assessment:
Conduct third-party vendor risk reviews and cloud risk assessments.
Recommend strategies for mitigating cyber risks and remediating vulnerabilities.
Incident Management:
Lead the response to security incidents, ensuring rapid containment and resolution.
Document lessons learned and enhance incident response protocols based on real-world experiences.