Senior Cybersecurity Engineer

The Security Information and Event Mgmt (SIEM) Team Lead supports the Missile Defense Agency (MDA) on the

Integrated Research and Development for Enterprise Solutions (IRES) contract. This position plays a key role in the

engineering, operation, sustainment, and management of cyber defense tools, supporting the Missile Defense Agency

(MDA) in a fast-paced and evolving environment. This team lead will:        

• Ensure the identification and mitigation of cyber threats, ensuring the protection of critical infrastructure and key resources.
• Facilitate the design, implementation, and maintenance of applications using Kubernetes, monitoring of systems for stability and security, and mentor personnel to ensure the smooth operation of the cyber defense infrastructure.
• Responsible for the personnel assigned to this team along with the daily/weekly/yearly prioritization of their time and effort alignment
• Hold employees accountable to meeting mission needs and deadlines
• Approve employee timecards and expense reports
• Provide input for employees on their performance throughout the year
• Support employee growth/knowledge expansion in mission domain
• Design, implement, and maintain applications using the Kubernetes platform
• Ensure that applications run smoothly in a distributed environment, handling tasks such as deployment, scaling, and maintenance
• Monitor systems to detect and prevent problems, and ensuring systems are stable, operable, and secure
• Mentor and train personnel in an evolving, high-paced environment.
• dentify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization)
• Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources
• Build, install, configure, and test dedicated cyber defense hardware
• Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure
• Participate in system design consulting, platform management, and capacity planning
• Strong background in containerization technologies, network security, and cybersecurity principles, the successful candidate
• Knowledge in containerization technologies like Docker, Kubernetes architecture, and cloud platforms.
• Skilled in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.
• Knowledge of computer networking concepts and protocols and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of network traffic analysis (tools, methodologies, processes).
• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol (TCP), Internet Protocol (IP), Open System Interconnection Model (OSI)).
• Knowledge of cyber defense policies, procedures, and regulations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

• Travel Required: Up to 10% of the time
• Other duties as assigned

Requirements

Education/Training: 

• Bachelor’s Degree in relevant engineering or science discipline required

Experience:

• 5+ years of professional experience in the required task area 
• 2 years of experience managing and leading personnel in an IT environment
• Must have a current DoD 8570.01-M IAT Level II certification with Continuing Education (CE) - (CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)
• Must have a minimum of IAM Level I Certification and be able to achieve an IAM Level II Certification within 6 months of hire date

Preferred Experience:

• Experience with DevOps Tools Helm, Gitlab, Artifactory, Terraform, and Ansible.

• Experience with Cloud Platforms
• Experience with Elastic
• Experience with Linux and Kubernetes
• Ability to properly document all systems security implementation, operations and maintenance activities and update as necessary
• Ability to create auditable evidence of security measures
• Familiar with DCO/Cybersecurity Service Provider (CSSP)-guiding security policies and procedures

Security:

• Must be a US ci