Systems Security Engineer (Cybersecurity/Quarantine Release)

UIC Alaska•Dahlgren, VA

About The Position

Bowhead is seeking an experienced Systems Security Engineer (Cybersecurity/Quarantine Release) to join its team in Dahlgren, Virginia. The role focuses on identifying and mitigating security-system vulnerabilities, conducting vulnerability scans and application assessments, and applying system, network, and operating-system hardening techniques. The engineer uses DoD network analysis tools and vulnerability and configuration data to identify security issues, assess risk, and provide insights that support organizational risk management. The position also involves troubleshooting cyber defense infrastructure anomalies and applying cybersecurity and privacy principles to organizational requirements.

Requirements

High school diploma required; a bachelor’s degree is highly desired.
Three to five years of relevant experience required.
Knowledge of computer networking concepts and protocols and network security methodologies.
Knowledge of network security architecture concepts, including topology, protocols, components, and principles such as defense-in-depth and zero trust.
Knowledge of basic system, network, and operating-system hardening techniques.
Knowledge of IDS/IPS tools and applications.
Knowledge of network protocols and services, including TCP/IP, Dynamic Host Configuration, DNS, and directory services.
Knowledge of application vulnerabilities.
Knowledge of system administration concepts for operating systems including Unix/Linux, iOS, Android, and Windows.
Must meet DoD 8570 Information Assurance Technical Level II certification requirements at time of hire.
Must currently hold a Top Secret security clearance.
Must be a U.S. citizen to meet the Top Secret clearance requirement at this location.

Nice To Haves

Knowledge of cyber threats and vulnerabilities.
Knowledge of the operational impacts of cybersecurity lapses.
Knowledge of host and network access-control mechanisms, such as access control lists and capabilities lists.
Knowledge of cybersecurity and privacy principles and organizational requirements concerning confidentiality, integrity, availability, authentication, and non-repudiation.
Knowledge of network traffic analysis methods.
Knowledge of VPN security.
Knowledge of transmission records and technologies, including Bluetooth, RFID, infrared networking, Wi-Fi, paging, cellular, satellite dishes, and VoIP, as well as jamming techniques.
Knowledge of network access, identity, and access management, including public key infrastructure, OAuth, OpenID, SAML, and SPML.
Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and other injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
Knowledge of different classes of attacks, including passive, active, insider, close-in, and distribution attacks.
Knowledge of application security risks.

Responsibilities

Conduct vulnerability scans and recognize vulnerabilities in security systems.
Use DoD network analysis tools, such as ACAS and HBSS, to identify vulnerabilities.
Conduct application vulnerability assessments.
Identify systemic security issues through analysis of vulnerability and configuration data.
Share insights about the organization’s threat environment to improve its risk management posture.
Apply cybersecurity and privacy principles to organizational requirements concerning confidentiality, integrity, availability, authentication, and non-repudiation.
Apply host and network access controls, such as access control lists.
Use VPN devices and encryption.
Protect networks against malware using measures such as NIPS, anti-malware, external-device restrictions, and spam filters.
Troubleshoot and diagnose cyber defense infrastructure anomalies and work through their resolution.
Perform impact and risk assessments.
Perform other duties as assigned.