Cyber Network Analysis Tech 5 at Softworld Inc

***Due to the nature of the work being performed US Citizenship is required***

Job Title: Cybersecurity Engineer

Location: Langley VA 23665

Onsite Requirement

• Intrusion Detection/Intrusion Prevention is the key to the role.
• ACTIVE TS/SCI is required
  

Job Description

• Security Tool Configuration: Configure, maintain, and optimize security tools such as intrusion detection systems (IDS), intrusion prevention systems (IPS), firewall rules, antivirus, and SIEM solutions to effectively detect and mitigate security threats.
• Capability Deployment: Collaborate with cross-functional teams to design and implement new security capabilities.
• Security Procedure Development: Develop and document security procedures, incident response plans, and playbooks to guide SOC team members in handling security incidents and events effectively.
• Incident Response: Participate in incident response activities, including analyzing and containing security incidents, performing forensics analysis, and assisting with post-incident reviews.
• Vulnerability Management: Identify, prioritize, and remediate security vulnerabilities across the organization's infrastructure and applications.
• Threat Intelligence: Stay up to date with the latest cybersecurity threats and trends and integrate threat intelligence into SOC operations.
• Security Compliance: Ensure compliance with regulations and standards and conduct security assessments as needed.
• Documentation: Maintain detailed records of security configurations, incidents, and procedures to support audits and reporting.

Essential Job Responsibilities

• Performs cyber security assessments of systems and networks within the networking environment or enclave and identifies systems that deviate from acceptable configurations, enclave policy, or local policy. Evaluates incident response procedures and capabilities. Exploits system and network vulnerabilities and misconfigurations for purposes of gathering data from target or adversary automated information systems or networks and to enable operations and intelligence collection capabilities. Leverages computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks themselves.

Minimum Qualifications

• 15 years relevant experience with Bachelors in related field; 13 years relevant experience with Masters in related field; 10 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 19 years relevant experience.
• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• Security+ certification required at minimum.
• Proficiency in configuring and managing security tools and technologies, such as firewalls, IDS/IPS, SIEM, and antivirus solutions.
• Strong understanding of security frameworks, industry standards, and best practices.
• Knowledge of programming/scripting languages (e.g., Python, Bash) for automation and scripting tasks.
• Excellent communication and teamwork skills to collaborate effectively with cross-functional teams.
• Ability to analyze and respond to security incidents swiftly and effectively.
• Knowledge of network and systems administration.
• Familiarity with cloud security principles and practices.
• Attention to detail and strong problem-solving skills.
• Must have current TS/SCI

Preferred Requirements

• Higher-level cybersecurity certifications (such as CISSP or equivalent) strongly desired.