Junior Security Engineer - TS/SCI

Jobvite, Inc.; Bethesda (MD); On-site; USD 85,000 - 120,000; Full time

Job summary

Xcelerate Solutions seeks a Junior Security Engineer to support day-to-day security activities across enterprise environments. This on-site role in Bethesda, MD, requires active TS/SCI clearance and involves vulnerability management, RMF/ATO activities, and continuous monitoring.

You will work with senior security personnel and IT teams to strengthen the security posture and compliance across environments. Join an award-winning GovCon team, develop across security domains, and take on increasing

Qualifications

• Bachelor's degree with at least 2 years of relevant experience (additional years may be considered in lieu of degree).
• Active TS/SCI clearance with Polygraph required OR willingness to obtain polygraph.
• Experience with vulnerability management, vulnerability scanning, and remediation.

Responsibilities

• Perform day-to-day security activities under supervision and escalate risks and blockers as needed.
• Support vulnerability management from identification through closure, including remediation and documentation.
• Perform vulnerability scanning with ACAS/Tenable/Nessus and analyze findings.
• Assist with RMF/ATO activities and ensure compliance with NIST SP 800-53 and related directives.
• Review system and configuration changes for security impact and document findings.

Skills

Security Engineering

Vulnerability Management

RMF/ATO

Continuous Monitoring

ACAS/Nessus

Splunk

TCP/IP

Documentation

Education

Bachelor's degree

Tools

ACAS

Nessus

Splunk

McAfee HBSS

MS Visio

Job description

Xcelerate Solutions seeking a Junior Security Engineer to support day-to-day security activities across enterprise and isolated environments. This position will provide hands-on support for security operations, vulnerability management, RMF/ATO activities and continuous monitoring. The individual will work closely with senior security personnel, system administrators, engineers and other technical teams to implement security requirements, identify and remediate security issues and maintain the overall security posture of the environment.

This position provides an opportunity to develop across multiple areas of cybersecurity, including vulnerability management, security engineering, RMF/ATO, system hardening and continuous monitoring. The individual will be given opportunities to take on increased technical responsibility as their knowledge and experience grow. This is a 100% on-site position. All work must be performed at the customer site. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry.

Location:

Bethesda, MD

Security Clearance:

Active TS/SCI

Responsibilities:

• Perform day-to-day security activities under the direction of senior security personnel and escalat[e]ed risks, technical issues and blockers as appropriate.
• Support vulnerability management activities from identification through closure, including analysis, remediation, validation and documentation.
• Perform vulnerability scanning and analyze findings using ACAS, Tenable/Nessus or equivalent technologies.
• Work with Windows, Linux, network, desktop support and other engineering teams to assist with vulnerability remediation and security-related technical issues.
• Implement and validate DISA STIGs and approved security configuration baselines across infrastructure systems.
• Perform recurring security activities, including audit log reviews, account reviews, vulnerability reviews, security control validation and continuous monitoring.
• Support RMF/ATO activities, including security documentation, control evidence, Body of Evidence (BoE), POA&Ms and compliance with NIST SP 800-53, ICD 503 and applicable security directives.
• Assist with reviewing system and configuration changes for potential security impact and document findings for review by senior security personnel and the ISSM.
• Support security activities for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening and security monitoring.
• Review security logs and events using Splunk or equivalent SIEM/log-management technologies and escalat[e]ed identified issues as appropriate.
• Assist with maintaining security procedures, documentation, compliance evidence and vulnerability remediation records.
• Track assigned security findings, remediation activities and action items through completion and provide status updates as required.
• Participate in security reviews, engineering meetings and Technical Exchange Meetings (TEMs) as required.
• Research security vulnerabilities, technical requirements and remediation approaches and provide findings and recommendations to senior security personnel.
• Develop technical knowledge across the environment and take on increased responsibility for security activities as experience and proficiency grow.
• Active TS/SCI clearance with Polygraph required OR active TS/SCI and willingness to get a Poly.
• Bachelor's degree with at least 2 years of relevant experience. Additional years of experience may be considered in lieu of degree.
• Experience with application performance and latency problems related to security requirements from front, middle, and back end
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
• Experience implementing security controls on common network services such as file, email, and active directory across multiple geographically dispersed sites.
• Experience with networking technologies and security assessment to include, but not limited to, STIGs.
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS
• Solid network and systems troubleshooting experience with TCP/IP, Internet security, and encryption (data at rest, data in transit)
• Ability to produce clear and concise documents and diagrams capturing networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel and MS Word.
• Candidate must, at a minimum, meet DoD 8570.11- IAT Level II certification requirements (currently Security+ CE, CCNA-Security, GSEC, or SSCP along with an appropriate computing environment (CE) certification)

Preferred Qualifications:

• CISSP or CASP Certification

About Xcelerate Solutions:

Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s cultureis definedby our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees hasbeen recognizedby our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well asbeing a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers!

Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.

Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.