Key Role Work under limited supervision and participates in the design, engineering, integration, implementation, testing, deployment, maintenance, review, and administration of the infrastructure, hardware, and software that are required to effectively manage the security and risk posture of the network and resources. Assist with developing system concepts and apply the systems engineering life cycle to translate strategic Cyber objectives, technology, and environmental conditions into engineering outcomes and solutions. Assist with selecting and applying processes and methodologies to meet Cyber performance objectives. Assist with analyzing trends and emerging technologies for potential program modernization. Configure cyber systems to meet user requirements. Support the acquisition of hardware and software, as needed. Basic Qualifications -3+ years of experience with information security and Cybersecurity engineering or security operations -2+ years of experience with the design and implementation of enterprise-wide security controls to secure systems, applications, networks, or infrastructure services -Experience with security tools and devices, including network firewalls, Weby proxy, intrusion prevention systems, vulnerability scanners, or penetration tools -Knowledge of federal compliance standards, including NIST 800-53, FIPS, or FedRAMP -Knowledge of TCPIP networking concepts and DNS, including using packet analysis tools, such as Wireshark or tcpdump -Ability to obtain a security clearance -BA or BS degree -Active SANS GIAC Security Certification Additional Qualifications -2+ years of experience in one of the following areas building and administering security devices, including network firewall, Web proxy, data loss prevention systems, and intrusion prevention systems, building and administering Windows Server and Active Directory, building and administering Linux- and UNIX-based systems, building and administering Network devices, including Cisco or Juniper, conducting dynamic Web application security testing, including manual testing and using application security tools to discover exploitable vulnerabilities, conducting database security assessment and monitoring, managing Cloud security operations, including identity and access control, secure configuration management, network security, enforcement policy scripting, workload security, or data security, and logging and Public Key Infrastructure (PKI) management and data encryption for data-at-rest and data-in transit -Experience with securing enterprise Web applications and OWASP Top 10 -Experience with public Cloud services providers, including Amazon AWS or Microsoft Azure -BA or BS degree in Information Security, Computer Engineering, Information Systems, Telecommunications, or Technology