INFORMATION SECURITY ENGINEER

Cybersecurity Jobs; Annapolis (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

IntellectFaces in Annapolis, MD is seeking an Information Security Engineer for onsite work. You will apply security practices, perform hands-on vulnerability testing with customer tools, and support risk management across desktop and server environments.

You will implement and assess IT security policies, work across multiple systems, and promote best practices in day-to-day security activities. Strong communication is essential in this fast-moving role.

Qualifications

• 5+ years of relevant cybersecurity experience.
• Bachelor’s degree in Computer Science, Information Assurance, or related field.
• Experience with security testing and vulnerability assessment.
• Knowledge of DoD 8570 IASAE Level 2 or 3 compliance.
• Strong written and verbal communication skills.

Responsibilities

• Apply security practices and policies while performing hands-on vulnerability testing.
• Use risk management framework to support system risk processes.
• Formulate and assess IT security policy.
• Work across multiple systems and components, managing configurations.
• Adopt best practices in day-to-day security activities.
• Plan and prioritize tasks and communicate trade-offs.
• Deliver high-quality work independently and in a fast-moving environment.

Skills

Verbal and written communication

Security policy knowledge

Risk assessment methodology

Task planning

Team collaboration

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Assurance

Tools

Nessus

NMAP

Wireshark

Penetration testing tools

Scripting languages

Job description

IntellectFaces is seeking an Information Security Engineer for onsite work in Annapolis, MD. This role is built for engineers who want to apply hands-on vulnerability testing, security policy and risk management, and practical secure configuration work across both desktop and server environments.

Responsibilities

• Apply security practices and policies while performing hands-on vulnerability testing using Customer tools.
• Use the Risk Management Framework in support of system risk processes.
• Formulate and assess IT security policy.
• Work across multiple systems and components simultaneously, managing different configurations.
• Adopt and adhere to best practices in day-to-day security activities.
• Plan and prioritize tasking effectively, and communicate clearly about technical options and trade-offs.
• Deliver high-quality work both independently and as part of a team in a fast-moving environment.

Requirements

• Must hold TS/SCI Full Scope Polygraph through MD Customer. The last poly must be within the past 6 years, with no CCAs.
• Demonstrated knowledge and experience with common security tools including Nessus, NMAP, and Wireshark.
• Experience implementing hardware/software security including communication protocols, encryption techniques/tools, and web services.
• Experience with secure configurations for commonly used desktop and server operating systems.
• Strong verbal and written communication skills.
• A solid understanding of security practices and policies, along with hands-on vulnerability testing experience using Customer tools.
• Ability to plan and prioritize tasking and communicate clearly regarding technical options and trade-offs.

Preferred Qualifications

• Five (5) years of experience with Defense in Depth principles/technology (including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture) and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• ISSEP certification.
• CISSP certification.
• Experience developing or implementing integrated security services management processes, including assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.

Minimum Qualifications

• 5+ years of relevant experience.
• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field.

Technologies

• Nessus, NMAP, Wireshark
• Encryption techniques/tools, web services
• Penetration testing tools, scripting languages
• Public key infrastructure
• Network and enterprise security architecture