System Security Engineer

Black Canyon Consulting•Bethesda, MD

10d

About The Position

Black Canyon Consulting (BCC) is seeking a highly self-motivated System Security Engineer to support work for the National Center for Biotechnology Information (NCBI) at the National Library of Medicine (NLM), an institute of the National Institutes of Health (NIH). The role supports the team responsible for hosting a major U.S. government agency website and public data archives used by millions of people for biomedical research and public health information. The position is full-time and located at the NIH campus in Bethesda, Maryland, and/or remote. The engineer supports information assurance, vulnerability assessment, enterprise protection planning, security monitoring, incident response, cybersecurity, and cyber threat analysis. This includes firewall and IP management, vulnerability and system compliance management, architecture and system analysis, log analysis for incident remediation and threat hunting, and troubleshooting security and network problems. The role also participates in formal incident response efforts and analyzes SIEM patterns based on threat intelligence feeds.

Requirements

Bachelor's degree or four years of equivalent experience.
At least two years of hands-on firewall management experience.
At least two years of hands-on vulnerability management experience.
Working knowledge and demonstrated experience in network design, network security, and firewall technologies.
Experience testing for and identifying network and system vulnerabilities using tools such as Tenable.SC and BigFix.
Experience with log analysis.
Good understanding of computing security, authentication techniques, operating procedures, and general practices in an enterprise IT infrastructure.
Demonstrated self-initiated ability to analyze, debug, and track security issues.
Ability to identify problems, determine the accuracy and relevance of information, use sound judgment to evaluate alternatives, and make recommendations.
Excellent organization and time management skills, including the ability to prioritize a variety of tasks.
Excellent written and oral communication skills and the ability to work with people at every level.

Nice To Haves

Experience with Fortinet, Symantec endpoint protection, and Arista/Cisco ACLs.
Experience with Splunk.

Responsibilities

Manage firewalls.
Manage IP addresses.
Manage vulnerabilities and system compliance.
Analyze architecture and system functionality across a broad range of technologies.
Analyze logs for incident remediation and threat hunting.
Troubleshoot security and network problems.
Provide support for information assurance, vulnerability assessment, enterprise protection planning, security monitoring, incident response, cybersecurity, and cyber threat analysis.
Participate in formal incident response efforts, coordinating responses to major intrusions or exploits.
Investigate incidents, including intrusions and illegal software usage.
Determine Security Incident Event Management (SIEM) pattern analysis based on threat intelligence feeds.