Information Systems Security Engineer

Edgewater Federal Solutions; Washington (District of Columbia); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Edgewater Federal Solutions is seeking an Information Systems Security Engineer to support federal customers in Washington, DC. This hybrid role involves leading security projects, performing risk assessments, and ensuring IT operations meet strict cyber security standards. The ideal candidate will have a Bachelor's in Cyber Security and relevant industry certifications.

Qualifications

• Experience with Microsoft Defender and Azure.
• Strong understanding of security certifications required.
• Experience in Linux environment is a bonus.

Responsibilities

• Lead security projects including requirements definition and task planning.
• Perform security assessments and risk analysis.
• Utilize CIS benchmarks for secure configurations.

Skills

Cyber Security Awareness

Risk Analysis

Project Management

Analytical Problem-Solving

Knowledge of Cyber Security Trends

Education

Bachelor’s degree in Cyber Security or related field

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

Tenable

Palo Alto Firewalls

Job description

Overview

Edgewater is currently seeking an Information Systems Security Engineer (ISSE) to support our federal customer in the Washington DC area. This is a hybrid role with two days a week on site for collaboration or as customer requires.

Responsibilities

• Lead security projects, including requirements definition, task planning, research, testing, implementation, and management.
• Prepare and document standard operating procedures and protocols for the FERC Security Operations Center.
• Work with IT Operations team to ensure all systems are properly hardened during the implementation process, specifically with CIS Benchmarks.
• Utilize CIS Benchmarks and STIGS to secure configurations in applications and other technologies in the FERC environment.
• Build and review GPOs in coordination with IT System Administrators Operations group for implementation.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Perform Security Product Reviews and assist with Change Management security reviews.
• Provide subject matter expertise on cyber security asks.
• Manage projects and daily workload utilizing Azure DevOps.
• Perform security assessments, risk analysis, and SIEM integration.

Qualifications

• Experience using and maintaining tools like Microsoft Defender for Endpoint (MDE), Microsoft Defender for Cloud, Microsoft Defender for IoT, Defender for O365 and Microsoft Sentinel.
• Strong understanding of Federal Government Cyber Security directives and security initiatives within Microsoft based on-prem and cloud environments.
• Strong knowledge of Entra ID, Azure Active Directory and/or LDAP management, configuration, or design.
• Demonstrated responsibility for securing systems within the Microsoft Ecosystem such as Azure, Intune, PowerBI, Defender security stack (such as Defender for Endpoint and Defender for Cloud).
• Candidate should have experience administering Windows Servers 2012-2022, Microsoft SQL Database 2016 – 2019, Entra ID, with strong understandings of AAA – Authentication, Authorization and Accounting principles. · Knowledge of Microsoft Sentinel, Tenable, Palo Alto firewalls
• Knowledge of Logic Apps is a plus.
• Understanding CI/CD integration is a plus.
• Knowledge of Azure DevOps for management of daily work is a plus.
• Familiarity with Agile methodologies such as Kanban.
• Experience creating and providing user guidance, documentation, and consultation.

Requirements:

• Bachelor’s degree in cyber security, information technology or related field or equivalent experience working in field.
• Experience supporting IT operations with hands-on security configuration roles and applying security baselines on IT systems using CIS Benchmarks and/or DISA STIGS.
• Experience in Linux environment is a bonus.
• Must obtain and maintain one (1) industry standard security certification. The government approves CompTIA Security+, CISSP, CEH, or DoD equivalent.
• Microsoft Certified Azure Administrator Associate highly desirable.
• Experience performing risk assessments and security product reviews and statice code analysis.
• Strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Great awareness of cybersecurity trends and hacking techniques.

About us:

Edgewater Federal Solutions is a privately held government contracting firm located in Frederick Maryland. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named a Top Workplace in the Greater Washington Area for six consecutive years 2018 through 2024.

It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other status protected by applicable law.#LI-HH1