Cyber Security Engineer

Dark Wolf Solutions is looking for a Cyber Security Engineer. The Information Systems Security Engineer will be responsible for designing, implementing, and managing security measures to protect information systems from unauthorized breaches and cyber threats. They will ensure the confidentiality, integrity, and availability of sensitive data systems and architectures. This position is set to be supported in a hybrid work environment out of Tampa, FL. Key responsibilities include, but are not limited to: 

• Executing the Assessment & Authorization (A&A) process in accordance with government requirements.
• Conducting technical evaluation of information systems design, and information security aspects and accreditation.
• Performing vulnerability assessments using standardized tools (e.g., Nessus, DISA STIGs) and implementing configuration updates as required.
• Preparing comprehensive security assessment testing documentation to validate applied security controls in support of A&A testing.
• Assessing and mitigating system security threats, risks, and vulnerabilities throughout the program life cycle.
• Participating as a member of a security engineering team designing, developing, implementing, evaluating, and/or integrating security architectures, systems, or components.
• Assisting customer staff in resolving operational security issues involving vendors who support the program.
• Analyzing, modifying when necessary and maintaining the Program’s operational security posture.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline
• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline
• 5+ years of experience in IT security, information assurance and/or DevSecOps engineering.
• Hands on experience applying STIGS to Linux Distros (RHEL 8/9 & Ubuntu) & Windows Servers
• Must have hands on experience working with Linux CLI.
• Knowledge of security system design tools, methods, and techniques including Zero Trust principles
• Ability to harden containers for DoD use using automated processes, familiarity with IronBank a plus
• Experience working with container scanners such as Trivy, and/or Twistlock (Prisma Cloud)
• Hands on working knowledge of and Nessus; deploying, configuring, and utilizing
• Ability to develop best practices for processes and standards that will improve the system through penetration testing
• Working knowledge of IT security principles and methods (e.g., firewalls, demilitarized zones, encryption)
• Experience configuring continuous monitoring solutions including AWS FlowLogs, AWS CloudTrail, WAZUH, and/or Elastic.
• Knowledge of network access, identity, and access management (e.g., PKI with Keycloak, EntraID/AD, and/or IDM/FreeIPA)
• Knowledge of DoD/IC system security control requirements NIST SP 800-53
• Possesses strong technical skills and analytic ability
• Knowledge and experience with eMASS
• US Citizenship and an active Secret security clearance

Desired Qualifications:

• Any certifications relevant to system and cyber security
• Experience using the XACTA application.
• Experience with Common security tools such as Nessus, WASSP, SECSCN, and/or MBSA
• Familiarity with the Joint Special Access Program (SAP) Implementation Guide (JSIG)
• Worked or familiar with the operations of a Special Access Program Facility (SAPF)
• Experience with task management, metrics collection, and status reporting to management
• Proficient with Google Cloud Platform (GCP) technology
• Demonstrated knowledge/experience in the areas of resource allocation, workload management, and contract management

The estimated salary range for this position is $149,000.00 - $160,00.00 commensurate on experience and technical skillset.