Senior Security Engineer

Employer
Next Step Systems
Location
Greenbelt, MD
Posted
Sep 15, 2017
Closes
Sep 18, 2017
Industry
Engineering, Security
Hours
Full Time
The Senior Security Engineer (Enterprise) will work with the Chief Security Engineer to conduct security engineering activities. Responsibilities: Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture for the communications aspects of applications in both a private on premises data centers and public cloud offerings. Utilize the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devise solutions to operational problems within the capacity and operational limitations of installed equipment. Monitor and track security-related defects and resolutions; assign tasks to the appropriate working group or individual. Coordinate and facilitate working groups and integrated process teams to achieve solution. Focus on communications and networking needs between Cloud and on premises Data Centers, and Cloud and Internet (VPN) users. Work within a Sprint to ensure engineering features and enhancements include security requirements and meet Federal directives. Act as a bridge between project teams or developers and security personnel, by being able to understand and interface in all areas. Identify specific areas of concern related to securing sensitive data in a both a cloud and data center environment. Provide expertise with Federal Requirements related to special classifications of data especially Title 13 and 26, FISMA, FedRAMP. NIST, etc. Required Experience: Acquisition, installation, maintenance, and usage of the Government Enterprise networks. Engineering solutions within multiple Cloud Service Providers, in particular AWS. Operations for Cisco ASA firewalls, routers and switches and the ability to formulate access control lists (ACLs) via the Command Line Interface (CLI). Enterprise level security hardening for Windows, Linux, Android and/or iOS operating systems and SQL, Oracle, and RDS database solutions in accordance with Center for Internet Security (CIS) and Security Technical Implementation Technical Guides (STIGs). Continuity of operations (COOP) concepts and implementation for network related hardware failures including isolated and major outages. Monitor and control the performance and status of the network resources. Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines. Implementation PKI within an enterprise. Experience working in AWS via the CLI and management console. Knowledge and experience configuring Virtual Private Clouds (VPCs) and understanding the service offerings and how to configure them. Ability to automate the development of security controls including firewall rules and policy and IPS policy. Experience with automating server configuration for security including logging, key changes, and system hardening. Required Skills: Expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS). Deep technical understanding of operating systems, network architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures. Expertise in encryption, key management and cryptology. Expertise in Enterprise Architecture Standards such as the Department of Defense Architecture Framework (DODAF), Service-Oriented Architecture (SOA), the Open Group Architecture Framework (TOGAF), and/or the Amazon Web Services (AWS) Well Architected Framework. Expertise in the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines. Expertise in performing threat modeling, risk analysis, root cause analysis, risk identification, and risk mitigation. Expertise in planning and implementing secure networking practices such as: application segmentation, network segmentation, NAC and other access control testing/validation, updating access control SOPs. Expertise in configuring and developing an enterprise SIEM solution including signature tuning, development of correlation rules, reports, and alarms. Expertise in hardening Windows and Linux operating systems. Expertise in FEDRAMP and securing cloud services. Expertise in securing mobile systems. Expertise in Penetration Testing (all aspects). Expertise in SDLC, including performing secure code reviews. Expertise in PKI implementations and operation. Expertise in Incident Response and Forensics. Expertise in Managing Security Devices. Expertise in Disaster Recovery/CCOP and BCP Planning and Execution. Expertise in Security Policy and Security Design. Expertise in a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (PowerShell, Python) software development frameworks, operating systems, and networking technologies. Understanding of various web application frameworks such as ASP.NET, J2EE. Keywords: Greenbelt MD Jobs, Senior Security Engineer, Linux, Windows, Android, SQL, Oracle, RDS, Penetration Testing, PKI, Incident Response, Forensics, Maryland Recruiters, Information Technology Jobs, IT Jobs, Maryland Recruiting If you are an employer and recruiting for similar IT professionals / positions, please contact our Technical Recruiters at Next Step Systems. We are a national IT Recruiting Firm / Agency specializing in full-time direct hire Information Technology employment opportunities. No Corp-To-Corp Or Third Party Recruiters; W-2 Direct Hire Only.