Cybersecurity Engineer – Senior

Bravura, Inc.; Quantico (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Bravura, Inc. is seeking a Cybersecurity Engineer – Senior to design, deploy, and manage cyber defense infrastructure at the Quantico, VA site. The role requires hands-on engineering, assessment, and administration of defense tools and security services within a government-aligned environment.

The candidate should possess 7+ years of relevant experience, US Secret clearance, and one of the listed advanced degrees, training, or certifications to meet foundational qualifications.

Qualifications

• Masters or PhD in IT, Cybersecurity, Computer Science, Info. Sys, Data Science, or SW Engineering.
• DoD approved training courses such as F074141, M0923X1, M09BNU1, M09D3H1, N23YLE5.
• At least one active certification: CISSP; GCIA; GICSP; ISSAP; ISSEP.
• 7+ years of experience; equivalent experience may be considered.

Responsibilities

• Build, install, configure, and test dedicated cyber defense hardware.
• Assess impact of implementing and sustaining a dedicated cyber defense infrastructure.
• Identify conflicts with implementation of cyber defense tools and optimize signatures.
• Coordinate with admins to create cyber defense tools, test beds, and evaluate applications and controls.
• Manage updates to rules and signatures for IDS/IPS, AV, and blacklists.
• Perform RMF-based risk assessment and documentation for cyber defense systems.
• Administer Windows Defender, ACAS, MS Defender, and related security tooling.

Skills

7+ years experience

Secret clearance

Education

Masters or PhD in IT/Cybersecurity/CS/Info Sys/Data Science/Sw Eng

Job description

Role: Cybersecurity Engineer - Senior

Location: Quantico, VA

Foundational Qualifications: Candidate must possess at least one of the following:

• Education: Masters or PHD (IT, Cybersecurity, Computer Science, Info. Sys, Data Science, or SW Engineering); OR
• Training: One of the following approved DoD training courses - F074141 Marine Analysis & Reporting; M0923X1 Network Chief Course; M09BNU1 Cyber System Chief; M09D3H1 Cybersecurity Managers; N23YLE5 Joint Network Attack Course (JNAC); OR
• Certifications: At least one of the following active certifications - CISSP; GCIA; GICSP; ISSAP; ISSEP

Years of Experience: 7+ years; experience may be considered as an alternative to foundational qualifications.

Clearance Level & Investigation: Secret

Job Description:

The Cybersecurity Engineer – Senior tests, implements, deploys, maintains, & administers infrastructure HW / SW. This includes, but is not limited to:

• Core Tasks:
  • Build, install, configure, & test dedicated cyber defense HW.
  • Assist in assessing impact of implementing & sustaining a dedicated cyber defense infrastructure.
  • Identify potential conflicts with implementation of any cyber defense tools(e.g., tool & signature testing & optimization).
  • Assist in identifying, prioritizing, & coordinating protection of critical cyber defense infrastructure & key resources.
• Additional Tasks:
  • Coordinate with system administrators to create cyber defense tools, test bed(s), & test & evaluate applications, HW infrastructure, rules/signatures, access controls, & configurations of platforms managed by service provider(s).
  • Coordinate with Cyber Defense Analysts to manage & administer updating of rules & signatures (e.g., intrusion detection/protection systems, anti-virus, & content blacklists) for specialized cyber defense applications.
  • Create, edit, & manage network access control lists on specialized cyber defense systems (e.g., firewalls & intrusion prevention systems).
  • Implement risk assessment & authorization requirements per Risk Management Framework (RMF) process for dedicated cyber defense systems within enterprise, & document & maintain records for them.
  • Perform system administration on specialized cyber defense applications & systems (e.g., anti-virus, audit & remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup & restoration.

Specifically, this role will provide Cybersecurity Engineering Support to the Cybersecurity & Information Security Support team, including, but not limited to:

• Advise ISSM on all matters related to cybersecurity & information security.
• Support ISSM with development of cybersecurity & information security policies, procedures, guidance, & best practices for compliance with Federal laws, regulations, guidelines, orders, & directives to ensure secure & compliant systems.
• Assist MCU ISSO.
• Support creation, submission, processing, & tracking of SAAR requests via digital SAAR forms & online AutoSAAR tool for both .edu & MCEN accounts.
• Support implementation of Zero Trust Strategy on all networks & systems.
• Support cybersecurity incident response, forensics, & investigations IAW Government processes & procedures to ensure actors & causes identified, appropriate corrective actions taken, & reports filed in timely manner.
• Support deployment, administration, & configuration of MS Defender IAW Government processes, procedures, standards, directives to ensure comprehensive endpoint & server threat prevention, detection, & response.
• Support change management & CM for proposed changes & modifications to Windows Defender, ACAS, & other cybersecurity systems, configurations, signatures, & settings to include submitting change control requests & attending scheduled CCB meetings.
• Assist in development of Cyber documentation for all systems, networks, & related tasks, to include reviewing, editing, & changing documents, including but not limited to A&A packages, SOPs, TTPs, MOAs, local policies & guidelines, & briefings for internal & external customers.
• Support token issuance by performing duties as MCEN NIPRNet & SIPRNet TA; support MDM & MAM via configuration of MS Intune.
• Support STIG implementations & checklists (both manual & automated) for devices, systems, services, SW, applications, & programs; manage, respond to, update, & report on all cybersecurity-related trouble tickets.
• Support implementation, auditing, & reporting of IAVAs, IAVBs, IAVMs, MCDs, OPDIRs, & CIO directive; execute patches & report compliance as required.
• Support identification, tracking, corrective action, & reporting of all vulnerabilities using Government-provided tools such as ACAS.
• Support system & application upgrades to Government-provided tools such as ACAS & MS Defender.
• Support deployment, administration, & configuration of MS Defender & MS Sentinel IAW Government processes, procedures, standards, directives to ensure comprehensive endpoint & server threat prevention, detection, & response.
• Support change management & CM for proposed changes & modifications to Windows Defender, ACAS, & other cybersecurity systems, configurations, signatures, & settings to include submitting change control requests & attending scheduled CCB meetings.
• Create & update systems architecture documentation to provide functional overview of solution; directly map technology capabilities & components to requirements.
• Create & maintain SOPs, work instructions, & job aids to document Government processes & procedures.
• Create detailed & accurate AARs to capture & describe outages, service interruptions, failures, or incidents to include lessons learned & recommendations.
• Track & report EoL & EoS dates, warranty & support status, & subscription & license expiration dates for all systems, SW, OS, firmware, tools, & subscriptions.