Information Security Engineer – Senior

Information Security Engineer – Senior, Casual 

Overview

Tech(x) is an energized company with experienced, specialized and progressive thought leaders advancing talented professionals in areas of technology, security, logistics, project management, talent management and procurement. We are building our DoD and technology footprint by allowing hybrid and remote work locations, as well as flexible schedules. As a solution-based company, we foster a creative environment that welcomes new perspectives from all of our team members.

Responsibilities

• Provide Subject Matter Expertise (SME) in Software Engineering, software design and implementation, security techniques, Cybersecurity, cryptographic algorithms and NSA security requirements.
• Engineer and execute recommended improvements to raise the security posture and capability of the enterprise.
• Develop and maintain standard operating process documentation to enable knowledge transfer, cross-training, and disaster recovery needs.
• Responsible for maintaining standard DoD compliance requirements.
• Assist with System Administration duties such as user permissions, account creation, group policy, active directory, VMware administration, and support of management and tactical systems.
• Perform scanning and audits to ensure compliance with DoD baselines and configuration using tool such as Assured Compliance Assessment Solution (ACAS) & Nessus Vulnerability Scanning, Security Content Automation Protocol (SCAP) Compliance Checker (SCC), and DISA Security Technical Implementation Guides (STIGs).
• Coordinates with external organizations for activities such as requirements gathering, connection requests, and Information Assurance (IA) guidance when required.
• Provides technical support to team members and the testing community as required.
• All other duties assigned. 

 Qualifications

• Experienced in mitigating vulnerabilities and maintaining IAVA compliance including patch management and distribution (Manual, WSUS, & SCCM), antivirus installation.
• Experienced in: Cybersecurity Risk Management, Vulnerability Management Expert, DHS Information System Vulnerability Management (ISVM), DOD Information Assurance Vulnerability Management (IAVM), Data Analytics, Compliance Management, Project Management, Agile, Six Sigma, Virtualization, Asset Management, Managing Cloud Services (Azure, AWS), Risk Management Framework (NIST-800-53) High and Moderate Systems, FedRAMP Cloud AWS Systems, Systems Engineering (Windows and Linux), Software packaging, Identity Credential Access Management (ICAM) and Scripting.
• Demonstrated experience in maintaining systems in compliance with RMF(DoDI 8510.01), performing ACAS & Nessus vulnerability scans, the review and completion of DISA STIG checklists, the generation of vulnerability POA&Ms, hardware & software lists, network documentations, and eMASS artifacts in support of ATOs and continuous monitoring.
• IAT level II approved security certifications for 8570.01-M and 8140 compliances
• Must demonstrate a respectful demeanor.  
• Experienced with: 

• Assured Compliance Assessment Solution (ACAS), Tenable.sc, 
• Tenable Professional/Manager, 
• Rapid7 Nexpose, 
• Enterprise Mission Assurance Support Service (eMASS), 
• IACS XACTA, 
• Cyber Security Assessment and Management (CSAM), 
• Multiple Penetration Testing Suites (i.e. Wireshark, Metasploit, Netsparker, NMAP, etc…), 
• Webservers (IIS, Apache, and Tomcat), 
• Splunk, CrowdStrike Falcon, Tanium, AppDynamics, CyberArk, SteelCloud ConfigOS (Hardening Tool), 
• BMC Remedy, ServiceNow, Stonefield Query for HEAT, JIRA (Agile Scrum and Kanban), PowerShell, Bash (Linux), Visual Basic for Applications (VBA), SQL, Python, Nessus Scripting attach Language (Nessus: Custom Plugins), Windows Batch Scripting, PHP, Regular Expressions (RegEx) 

Preferred Qualifications

• TS/SCI clearance. 
• Subject matter cert for Linux.
• Military experience and training. 
• COMSEC background.

Clearance:

Education & Experience:

• 10+ years of experience in information technology. 
• Current CISSP certification. 
• Current CNNA certification. 
• Bachelor’s Degree in a STEM program. 
• 4 years of additional direct experience can be substituted for a degree. 

Location:

• Aberdeen Proving Grounds, Maryland.  
• This is a hybrid remote position based on the government customer’s approval. 
• Monday-Friday 8:00 am to 5:00 pm.  Schedule flexing is available with the PM’s approval. 

Travel:

Physical Requirements:

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 25 pounds at times.
• This position requires the ability to communicate information and ideas so others will understand. 
• Must be able to exchange accurate information in work situations.
• Must be able to travel by public transportation.  

Join the Team:

Tech(x) is a customer centric team, both external and internal customers.  This team supports each other to be successful on the job and in meeting the mission. Tech(x) is an Equal Opportunity Employer that embraces diversity in its employee population. It is the policy of Tech(X) to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or genetic information.

We value Veterans and encourage all to apply!