Description of Task to be Performed:
Come join our growing team and make a difference every day! The selected candidate will research, identify, design, and implement solutions to identify, evaluate and mitigate security risks and threats to a mission critical effort in Chantilly, VA.
This position is onsite with the potential for up to two days per week of remote support with customer permission.
This position requires an active Top Secret clearance and ability to obtain an SCI clearance if required by the customer.
Required Qualifications:
- Minimum Qualifications (Education/Certificates, Experience, Physical, etc.):
- Minimum of five (5) years of experience in the following areas:
- Network, server, and application security.
- Securing large-scale, commercial and/or Fortune 500 environments.
- Infrastructure or application-level vulnerability testing and auditing.
- Working knowledge of Windows and Unix/Linux operating systems.
- Update security system capabilities to sustain and enhance network and system security integrity.
- Scripting skills and proficiency with Python.
- Ensure timely proactive identification and reporting of security gaps and vulnerabilities to the network infrastructure and work with other members of the team to resolve security issues.
- Ability to handle multiple competing priorities in a fast-paced environment where priorities change rapidly.
- Network and system auditing and security assessment techniques.
- Provide advanced application-level support for the resolution of security system faults.
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits.
- Experience in the creation, documentation, and implementation of Privacy Threshold Analysis (PTA), Privacy Impact Analysis (PIA), Plan of Action and Milestones (POA&M) to obtain an ATO.
- Experience with the seven (7) steps of the Risk Management Framework (RMF) SP 800- 53.
- Excellent written and verbal communication skills.
Preferred Qualifications:
- Bachelor of Science Degree in Computer Science, Electrical Engineering, Computer Engineer, Information Systems, or relevant experience.
- Experience evaluating and assessing cloud architectures, particularly in AWS.
- Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security.
- Knowledge of cloud Infrastructure as Code (IaC) technologies like CloudFormation and Terraform.
- Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, SSL, SSH, routing protocols).
- Experience in designing secure network architectures, virtualization technologies, database platforms, identity and access management principles, application security, encryption technologies, DNS, SOA, and web applications.
- Experience and expertise with ethical hacking, firewall and intrusion detection/prevention technologies, secure coding practices and threat modeling.
