Security Engineer II - Agile Defense

Requisition #: SECUR003427

Job Title: Security Engineer II

Location: Fort Belvoir, VA 22060 /Remote

Clearance Level: Active DoD -  Secret 

Required Certification(s): 

• MS with 10+ yrs or BA/BS w/ 12+ years of relevant Security related experience

**Selected applicants may be subject to a government security investigation and must meet eligibility requirements for access to classified information. **

• Executes security testing for all servers, applications and network devices. Testing shall be accomplished utilizing Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) and established timelines to meet specific program needs.
• Researches and develops Security Test and Evaluation (ST&E) Plans for all systems servers, applications and network devices.
• Prepares Plan of Action and Milestones (POA&Ms) to identify security weaknesses for the systems.
• Assists the Government Information System Security Managers (ISSM) with identifying security requirements and implementing security mechanisms against potential security threats to the systems. Provides recommendations about how to avoid, minimize, correct, or recover from possible damage.
• Provides engineering and technical expertise to include research or updates on new or upgraded operating systems, patches, hotfixes, applications, COTS products, issue resolution, vulnerability evaluations, countermeasure implementation, ST&E, auditing/intrusion detection tools, and all other security-relevant areas as required.
• Experience evaluating of network/system/device/application technical and non-technical security features • Experience validating and evaluating network/system/device/application security requirements, vulnerabilities, and residual risks. 
• Experience auditing information system security.
• Experience monitoring suspicious activity on information systems.  DISA Security Technical Implementation Guide (STIG) knowledge and background. 
• Experience researching and developing Security Test and Evaluation (ST&E) Plans.
• Experience in support of Time Compliance Network Orders (TCNOs), Communication Tasking Orders (CTOs), Maintenance Tasking Orders (MTOs), and Network Tasking Orders (NTOs), and Information Assurance Vulnerability Alerts (IAVAs). 
• Experience/background with MS Word, MS Project, PowerPoint, MS Excel, or MS ACCESS.

• MS with 10+ yrs or BA/BS w/ 12+ years of relevant Security related experience IAT Level III Certified in one of the following: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH within 6 months

• MS with 10+ yrs or BA/BS w/ 12+ years of relevant Security related experience

• Experience with Risk Management Framework (RMF) Knowledge of IT security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of new and emerging IT and cybersecurity technologies.
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of authentication, authorization, and access control methods.
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting)
• Knowledge of incident response and handling methodologies.
• Knowledge of key concepts in security management (e.g., Release Management, Patch Management).
• Knowledge of cyber defense and information security policies, procedures, and regulations (e.g., RMF).
• Knowledge of Intrusion Detection System (IDS)/Intrusion
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory service

• Excellent writing, interpersonal and communication skills
• Ability to communicate effectively with the team on assigned tasks, expectations, and schedules.
• Sharp attention to detail 
• Organized; time management skills to forecast and stay ahead of deliverables/reporting requirements
• Must be well-organized and detail-oriented with the ability to coordinate, prioritize multiple tasks, and be adaptable to change to accomplish assignments.
• Excellent Customer Focus/Satisfaction skills 
• Strong/Natural understanding of and ability to demonstrate the Agile Defense Core Values: Happy, Helpful, Honest, Humble, Hungry, Hustle

• Government site with 0%-10% travel possible.
• Possible off-hours work to support releases and outages.
• General office environment.
• Work is generally sedentary in nature, but may require standing and walking for up to 10% of the time.
• The working environment is generally favorable.
• Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc.
• Work is generally performed within an office environment, with standard office equipment available.