Security Engineering Lead

Responsibilities & Qualifications

ACTIVITIES & RESPONSIBILITIES

Make recommendations on the implementation of new tools and technologies that will enhance or generally improve SOC functions and capabilities. Advising and assisting with maintenance and engineering of the SOC infrastructure to include hardware and software for managing the lifecycle of all changes with minimum disruption to SOC services as well as ensure adaptability. Provide Security Modernization support (to include but not limited to Zero Trust Architecture (ZTA) concepts and principles) to assist Government’s engagement and collaboration with educating the broader community on Security Modernization concepts such as the implementation of ZTA, continuing to refine and improve the ZTA implementation plan covering Information Technology (IT) and Operational Technology (Ops Tech), and development of a security modernization strategy in alignment with Government’s Cybersecurity Strategy. Collaborate and assist in maintaining the SIEM infrastructure and operating system (OS) to support the collection and aggregation of all appropriate data sources including, but not limited to IDS data from network sensors, raw data from collection agents, firewalls, proxy servers, DLP, antivirus, and vulnerability scanner elements.

 

SKILLS

• Proven experience in installing, configuring, monitoring, and troubleshooting network security solutions and related monitoring tools including L2 / L3 network devices, Network Admission Control (NAC), 802.1x, Firewalls, IDS / IPS, VPN Solutions, Web Application Firewalls, Content Filtering, NetFlow Analysis
• Advanced working knowledge of encryption algorithms, secure communications, SIEM technologies, and embedded systems security
• Advanced working knowledge of network and data communication protocols
• Familiar with standard concepts, practices, and procedures within a particular field such as NIST, FISMA and Common Criteria regulations and standards
• Experience with Network based IDS / IPS technologies and affiliated modes of operation
• Experienced in evaluating new technologies and processes that enhance security capabilities
• Experience with Test security solutions using industry standard analysis criteria; experience with the delivery technical reports and formal papers on test findings
• Experience responding to information security issues during each stage of a project’s lifecycle to include:
  • Supervise changes in software, hardware, facilities, telecommunications and user needs
  • Interpersonal skills to interact with customers and team members
  • Strong written and oral communication
  • Strong diagnosis and troubleshooting skills
• Ability to solve complex technical problems
• Ability to learn and support new systems and applications
• Self-starter with excellent analytical and problem-solving skills, flexibility, good judgment and the ability to coordinate multiple, concurrent tasks in an effective manner
• Experience with cloud- based security technologies, architecture, and computing and searching, monitoring, and analyzing machine-generated big data is preferred.

 

REQUIRED QUALIFICATIONS

• Clearance requirement: Secret
• Experience: Minimum of 3 years’ experience security administration systems and support; strong working knowledge of Security Services, Networking, Security Policy, and Consulting
• Education: Bachelor’s of Science in computer engineering, computer science, IT or cyber security preferred (or 5 years of relevant work experience in lieu of a degree)
• Certifications: Minimum required A+, Security+ or Network+.

 

PREFERRED QUALIFICATIONS & COMPETENCIES

• CISSP certification preferred

 

Overview

We are seeking an experienced Security Engineering Lead in support of a government customer to join our team to provide Security Operations Support (SOC) Services to a government agency whose mission is to protect our Nation’s borders from terrorist attacks, to provide law enforcement for over forty (40) Federal agencies, and to protect the revenue of the United States while facilitating trade. The SOC is a single point of management and reporting for information security incidents. The SOC exists to prevent, identify, contain, and eradicate cyber threats to networks through monitoring, intrusion detection, and protective security services to information systems, including local area networks / wide area networks (LAN / WAN), commercial Internet connection, public facing websites, wireless, mobile / cellular, cl