Systems Security Engineer (Cybersecurity/Quarantine Release)

Bowhead•Dahlgren, VA

1d•$110,000 - $135,000

About The Position

Bowhead is seeking an experienced Systems Security Engineer (Cybersecurity/Quarantine Release) to join its team in Dahlgren, Virginia. The role focuses on identifying and mitigating security-system vulnerabilities, conducting vulnerability scans, and applying system, network, and operating-system hardening techniques. The ideal candidate has a strong background in computer networking concepts and protocols and network security methodologies. The position involves using DoD network analysis tools, assessing application vulnerabilities, analyzing vulnerability and configuration data, troubleshooting cyber defense infrastructure anomalies, and performing impact and risk assessments. It also applies cybersecurity and privacy principles, access controls, VPNs, encryption, and malware-protection measures to organizational requirements. The targeted salary range is $110,000 to $135,000 annually, based on qualifications and experience. The position requires a current Top Secret security clearance; U.S. citizenship is required for Top Secret clearance at this location.

Requirements

High school diploma required; a bachelor's degree is highly desired.
Three to five years of relevant experience required.
Knowledge of computer networking concepts and protocols and network security methodologies.
Knowledge of network security architecture concepts, including topology, protocols, components, defense-in-depth, and zero trust.
Knowledge of basic system, network, and operating-system hardening techniques.
Knowledge of IDS/IPS tools and applications.
Knowledge of TCP/IP, Dynamic Host Configuration, DNS, and directory services.
Knowledge of application vulnerabilities.
Knowledge of system administration and network and operating-system hardening techniques.
Knowledge of system administration concepts for operating systems including Unix/Linux, IOS, Android, and Windows.
Must meet DoD 8570 Information Assurance Technical Level II certification requirements at time of hire.
Must currently hold a Top Secret security clearance.
U.S. citizenship is required for Top Secret clearance at this location.
Must be able to lift 10–20 pounds or more, stand and walk for prolonged periods, and twist, bend, and squat periodically.

Nice To Haves

Knowledge of cyber threats and vulnerabilities.
Knowledge of the operational impacts of cybersecurity lapses.
Knowledge of host and network access-control mechanisms, such as access control lists and capabilities lists.
Knowledge of cybersecurity and privacy principles and organizational requirements concerning confidentiality, integrity, availability, authentication, and non-repudiation.
Knowledge of network traffic analysis methods.
Knowledge of VPN security.
Knowledge of transmission records and technologies, including Bluetooth, RFID, infrared networking, Wi-Fi, paging, cellular, satellite dishes, and VoIP, and of jamming techniques.
Knowledge of network access, identity, and access management, including public key infrastructure, OAuth, OpenID, SAML, and SPML.
Knowledge of system and application security threats and vulnerabilities, such as buffer overflow, mobile code, cross-site scripting, PL/SQL and other injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
Knowledge of different classes of attacks, including passive, active, insider, close-in, and distribution attacks.
Knowledge of application security risks.

Responsibilities

Conduct vulnerability scans and recognize vulnerabilities in security systems.
Use DoD network analysis tools, such as ACAS and HBSS, to identify vulnerabilities.
Conduct application vulnerability assessments.
Identify systemic security issues through analysis of vulnerability and configuration data.
Share insights about the organization's threat environment to improve its risk management posture.
Apply cybersecurity and privacy principles to organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation.
Troubleshoot and diagnose cyber defense infrastructure anomalies and resolve them.
Perform impact and risk assessments.
Apply host and network access controls, such as access control lists.
Use VPN devices and encryption.
Protect networks against malware using measures such as NIPS, anti-malware tools, restrictions on external devices, and spam filters.
Perform other duties as assigned.