Senior Security Engineer
Kihomac

Job Info

---

Description

Expertise and Functions Provide Subject Matter Expertise in the cybersecurity of information systems and technologies Perform cybersecurity activities in support of software and system requirements, design, development, testing, and sustainment within an Agile process and DevSecOps pipeline Provide guidance on DoD Cyber regulations and requirements to engineering and software development staff Apply an interdisciplinary, collaborative approach to plan, design, develop, validate and verify Cyber solutions across the lifecycle Conduct cyber risk assessment activities including threat modeling, vulnerability analysis and analysis of mitigation solutions Develop, evaluate, and analyze design constrains, trade-offs and detailed system and security design as they pertain to the Cyber domain Coordinate with other analysts, architects, and developers to provide cybersecurity guidance and best practices in the development of solutions Conduct cybersecurity test and evaluation of hardware and/or software designs to verify and validate compliance with defined specifications and requirements Employ cyber security processes, methods, techniques and tools and assure their consistent application Provide cybersecurity engineering support on both next generation technologies and proven platforms that support and protect our deployed warfighter Perform Risk Management Framework (RMF) cybersecurity in support of assessment and accreditation efforts such as IATT and ATO Perform cyber incident detection and response such as analyzing and triaging SIEM cybersecurity events Perform security content automation protocol (SCAP) testing to assess and resolve system compliance with Security Technical Implementation Guides (STIGs) Implement automated security testing (SAST, DAST, SCAP, Fuzz, etc.) in continuous integration and continuous delivery (CI/CD) environments Support occasional travel to other locations in support of cybersecurity activities (less than 10%) Other duties as assigned

Requirements

• Education/Training (both required and desired):
  • Bachelor of Science from an Accredited Institution Required (Cybersecurity or related Science, Technical, or Engineering Discipline Desired)
  • IAT Level II or IASAE Level III Certification/Training Required
    
    
• Experience:
  • 8+ years of combined professional experience in the required task areas
  • Experience with:
    • DoDI 8510.01 Risk Management Framework (RMF) Cybersecurity
    • Implementing and Assessing against Cybersecurity Frameworks (NIST, ISO, CIS, etc.)
    • DevSecOps Technical Stacks (Git, Gitlab, Dockers, SonarQube, Kubernetes, etc.)
    • Vulnerability and Threat Analysis, Assessments, and Control Mitigation
    • Operating Systems Security Configuration (Windows and Linux)
    • Automation (Software Programming and Scripting Languages)
    • Static/Dynamic Application Security Testing (SAST/DAST)
    • Secure Configuration/Hardening of DoD Information Systems
    • DevSecOps and Cloud Native Technologies (IaaS/PaaS/SaaS)
    • Agile and DevSecOps Software Development Methodology
    • Familiar with Kubernetes Security and Container Orchestration
• Security:
  • Must be a US citizen
  • Ability to obtain a security clearance may be required
  • Active security clearance at level Secret or higher preferred

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability
• Training & Development
• Wellness Resources

This job has expired.