Systems Security Engineer (Cybersecurity/Quarantine Release)

Bowhead•Dahlgren, VA

14h•$75,000 - $95,000•Onsite

About The Position

Bowhead is seeking an experienced Systems Security Engineer (Cybersecurity/Quarantine Release) to join its team in Dahlgren, Virginia. The role focuses on identifying and mitigating security-system vulnerabilities, conducting vulnerability scans, assessing application vulnerabilities, and applying system, network, and operating-system hardening techniques. The position requires knowledge of computer networking and protocols, network security methodologies, DoD network analysis tools, and cyber defense practices. Candidates must currently hold a Top Secret security clearance; U.S. citizenship is required for that clearance at this location.

Requirements

High school diploma required; a bachelor's degree is highly desired.
Three to five years of relevant experience required.
Knowledge of computer networking concepts and protocols, and network security methodologies.
Knowledge of network security architecture concepts, including topology, protocols, components, and principles such as defense-in-depth and zero trust.
Knowledge of basic system, network, and operating-system hardening techniques.
Knowledge of IDS/IPS tools and applications.
Knowledge of network protocols and services such as TCP/IP, Dynamic Host Configuration, DNS, and directory services.
Knowledge of application vulnerabilities.
Knowledge of system administration concepts and operating systems including Unix/Linux, IOS, Android, and Windows.
Must meet DoD 8570 Information Assurance Technical Level II certification requirements at time of hire.
Must currently hold a Top Secret security clearance.
U.S. citizenship is required for Top Secret clearance at this location.
Must be able to lift 10–20 pounds or more, stand and walk for prolonged periods, and periodically twist, bend, and squat.

Nice To Haves

Knowledge of cyber threats and vulnerabilities.
Knowledge of the operational impacts of cybersecurity lapses.
Knowledge of host and network access-control mechanisms, such as access control lists and capabilities lists.
Knowledge of cybersecurity and privacy principles and related organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation.
Knowledge of network traffic analysis methods.
Knowledge of VPN security.
Knowledge of transmission records and technologies such as Bluetooth, RFID, infrared networking, Wi-Fi, paging, cellular, satellite dishes, and VoIP, as well as jamming techniques.
Knowledge of network access, identity, and access management, including public key infrastructure, OAuth, OpenID, SAML, and SPML.
Knowledge of system and application security threats and vulnerabilities, including buffer overflows, mobile code, cross-site scripting, SQL/PL-SQL injection, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
Knowledge of different classes of attacks, including passive, active, insider, close-in, and distribution attacks.
Knowledge of application security risks.

Responsibilities

Conduct vulnerability scans and identify vulnerabilities in security systems.
Use DoD network analysis tools, such as ACAS and HBSS, to identify vulnerabilities.
Conduct application vulnerability assessments.
Analyze vulnerability and configuration data to identify systemic security issues.
Share insights about the organization’s threat environment to improve its risk management posture.
Apply cybersecurity and privacy principles to organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation.
Troubleshoot and diagnose cyber defense infrastructure anomalies and work toward resolution.
Perform impact and risk assessments.
Apply host and network access controls, such as access control lists.
Use VPN devices and encryption.
Protect networks against malware using measures such as NIPS, anti-malware, external-device restrictions, and spam filters.
Perform other duties as assigned.