Senior Security Engineer-US Citizen

Req ID: 318793 

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Senior Security Engineer-US Citizen to join our team in Merrifield, Virginia (US-VA), United States (US).

The Senior Security Engineer supports one or more of the following cybersecurity related functions, information security, incident response, cybersecurity, user activity monitoring, computer forensics, Security Planning Assessment &Authorization (SPAA), vulnerability assessment and management, network data capture, intrusion detection, log management, auditing, security incident and event management (SIEM), and penetration testing.  Personnel assigned to this role will serve primarily on the Security Engineering Team. This role is responsible for coordinating with other internal teams, sections or divisions within the organization.

 

Duties for the Senior Security Engineer include the following:

• Engineers, architects, implements, deploys, maintains, and administers security products and tools.
• Conducts research, evaluates, and makes recommendations on emerging technology.
• Conduct cyber assessment activities including threat modeling, analysis and analysis of mitigation solutions.
• Coordinate and address supply chain management concerns.
• Coordinate with system architects and developers to provide oversight in the development of solutions and integration of security tools.
• Conduct security testing and evaluation during the development and release
• process for security tools and hardware (virtual or physical)
• Reviews, and interprets Federal guidelines and policies, and industry standard best practices.
• Provides subject matter expertise, support, leadership, and training.
• Provides support on all information security activities at the program level including policy development, compliance inspections, audits, reviews and communications security.
• Provides support and works on the development phases of information security systems development lifecycle.
• Evaluates, and supports the documentation, validation, and SPAA processes, necessary to meet the organization’s IA requirements; and ensures compliance from internal and external perspectives.
• Conducts assessments of threats and vulnerabilities pertaining to security tools and architecture, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations.
• Documents incident correlation requirements, selects incident correlation engines and recommends configuration guidelines. Performs analysis to determine the optimum configuration of network and host sensors.
• Conducts the integration/testing, operations, and maintenance of systems security.
• This analysis includes traffic load analysis, performance impacts of monitoring, determination of potential attack characteristics based on mission and infrastructure, and determination of site-specific data collection requirements.
• Provides system operation support, administers hardware and software inventory, and oversees administration of a laboratory environment.
• Analyzes and recommends resolution of information security problems based on knowledge o