Cybersecurity Engineer ~ Software Defined Perimeter

Title: Cybersecurity Engineer ~ Software Defined Perimeter

Location: Alexandria, VA

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Overview: The Cybersecurity Engineer with specialty focus on network packet broker provides technical security engineering delivery leadership in several network areas of expertise, such as SD-WAN, SATCOM, and 5G. The candidate will be responsible for designing and developing and collaborating on new initiatives to increase the stability, reliability, and interoperability of customer networks. The ideal candidate will collaborate with other functional and technology leaders to define and execute business priorities.

Job Details:

• Perform security engineering, develops security architecture artifacts, oversee penetration testing and security exercises, supports hybrid cloud and network security, and automates security compliance for LAN/WAN solutions deployed in a hybrid cloud environment
• Engineer security into LAN and WAN system design, performing internal cyber hunt activities, and tailoring Zeek-based security sensors to feed SIEM and SOAR Splunk components
• Engineer security into WAN/LAN monitoring fabric tools such as Arista, Cisco, and Extreme Networks
• Collaborate in engineering and modeling security using networking tools such as Forward Networks
• Responsible for engineering network TAP solutions such as Netscout, cPacket, Gigamon, etc., in support of WAN/LAN hosted in a Hybrid-cloud environment
• Identify, assess, and present options for meeting the functional and technical requirements, including hardware and software updates or upgrades
• Deploy and operate cybersecurity tools
• Use software-defined tooling such as Terraform and Ansible to implement DevSecOps pipelines to deliver security tooling
• Lead performance of penetration testing and security exercises using tools such as CounterStrike, CoreImpact and Mandiant Security Validation tool
• Secure network systems and participates in vulnerability scans using Tenable Nessus
• Utilize tools such as Zeek and ELSA to perform network security monitoring
• Implement solutions to automate security compliance of systems
• Collect and review security analytic measures and oversees security incident detection activities
• Responsible for developing high-level system design diagrams
• Ensure that the operating environment is security compliant
• Evaluate IT enclave systems and assess risk posture and system security findings and recommend mitigation
• Evaluate analytical and systematic problems of workflows, organization, and planning and develop appropriate corrective action

Requirements:

• Bachelor's degree from an accredited institute in an area applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum of eight (8) years of directly related software experience in addition to education level
• Must possess current DoD 8570 IAT/IAM III certification
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled