Cybersecurity Engineer SME

Socket.dev; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Electrosoft Services, LLC is seeking a Cybersecurity Subject Matter Expert to provide expert support, research, and analysis for complex problems in our Cybersecurity Assessment Program. You will offer technical direction, interpretation, and alternatives, applying advanced principles to develop secure solutions.

Ideal candidates have seven years of IT experience and five years in cybersecurity, with CCRI/penetration testing expertise and DOD RMF/SCAP knowledge.

Qualifications

• Proven CCRI/vulnerability assessment and penetration testing experience.
• Seven years IT experience and five years cybersecurity experience.
• Strong analytical and problem-solving skills for security issues.
• Knowledge of DOD security regulations and RMF/SCAP practices.
• Certified in CCRI team lead roles or penetrations (LPT/ CEH/ GPEN/etc).
• DOD SECRET clearance eligibility required.

Responsibilities

• Provide expert support and technical direction for cybersecurity programs.
• Recommend tools and develop criteria for security product selection.
• Develop advanced technical ideas and guide them toward final products.

Skills

CCR I/ vulnerability assessment

Penetration testing

Analytical problem-solving

Network security configurations

CERT/ security certifications

RFQ/ STIGs knowledge

RMF/ SCAP knowledge

Cybersecurity expertise

Education

Relevant security certifications

Tools

Nessus

SCCM

SQL Server

Oracle

Exchange

IIS/ Apache

Firewalls/ IDS

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Cybersecurity Subject Matter Expert

Provides expert support, research and analysis of exceptionally complex problems, and processes relating to them. Serves as technical expert to the Cybersecurity Assessment Program providing technical direction, interpretation, and alternatives to complex problems. Thinks independently and demonstrates exceptional written and oral communications skills. Applies advanced technical principles, theories, and concepts.

Contributes to the development of new principles, concepts, and methodologies. Works on unusually complex technical problems and provides highly innovative and ingenious solutions. Recommends cybersecurity software tools and assists in the development of software tool requirements and selection criteria to include the development of product specific STIGs from applicable DISA SRGs. Works under consultative direction toward predetermined long-range goals and objectives. Assignments are often self-initiated. Determines and pursues courses of action necessary to obtain desired results. Develops advanced technological ideas and guides their development into a final product.

Minimum Requirements:

• Proven proficiency performing CCRI/ vulnerability assessment/ penetration testing on networks, databases, computer applications and IT frameworks.
• Seven (7) years IT experience
• Five (5) years Cybersecurity experience
• Strong analytical and problem-solving skills for resolving security issues.
• Strong skills implementing and configuring networks and networks components.
• Command Cyber Readiness Inspection certification in at least one of the following areas: Retina scan analysis, Operating Systems (Windows, Unix), Boundary defense (network policy, router, firewall), Internal defense (L2 switch, L3 switch), DNS (policy, BIND/Windows), HBSS (remote console, AV, ABM, PA, HIPS, ePO), Traditional security (Common, Basic, NCV, SCV), Wireless communications (BES, handhelds)
• Relevant certification from a nationally recognized authority.
• Knowledge and understanding of DOD security regulations, DISA STIGs
• Strong knowledge of SCAP
• Strong knowledge of RMF
• Expert experience in cybersecurity and evaluations
• Excellent knowledge of and proficiency with:
• VULNERATOR, USCYBERCOM CTO, Compliance Program, Wireless vulnerability assessment, Web Services (IIS, Apache, Proxy), Database (SQL Server, Oracle), Email Services (Exchange), Vulnerability Scans (NESSUS, SCCM), Knowledge of Phishing exercises, USB Detect, Physical Security
• DISA FSO certified CCRI Team Lead and certification in penetration testing, such as: Licensed Penetration Tester (LPT), Certified Expert Penetration Tester (CEPT), Certified Ethical Hacker (CEH), Global Information Assurance Certification Penetration Tester (GPEN), Tenable Certified NESSUS Auditor
• Required to possess a DOD SECRET Clearance and be eligible for an IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) upon assignment

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled