Network Security Engineer (Public Trust Clearance)

Sonsoft Inc; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

A technology services company is seeking a Network Security Engineer. This role involves hands-on configuration and monitoring of network security devices, developing proactive security measures, and conducting vulnerability assessments. Candidates should have experience with various security tools and methodologies. A Public Trust Clearance is required for this position. Join a growing team dedicated to enhancing IT security across multiple platforms.

Qualifications

• Familiarity with encryption methods and standards.
• Experience with intrusion detection and prevention systems.
• Knowledge of security vulnerabilities and common attack methodologies.
• Practical experience using security assessment tools.
• Experience with IT security plans and continuity of operations.

Responsibilities

• Monitor and configure all IT network security devices.
• Develop proactive IT security measures.
• Conduct risk and vulnerability assessments.
• Prepare reports for audit activities.
• Coordinate security projects and manage tasks.

Skills

Information security

Vulnerability analysis

Incident handling and forensics

Security Incident and Event Management

Malware analysis

Tools

Retina

Wireshark

Nessus

Tripwire

Palo Alto

Job description

Network Security Engineer (Public Trust Clearance)

Sonsoft , Inc. is a USA based corporation duly organized under the laws of the Commonwealth of Georgia. Sonsoft Inc. is growing at a steady pace specializing in the fields of Software Development, Software Consultancy and Information Technology Enabled Services.

Responsibilities

• Provide hands‑on configuration, operation and monitoring of all IT network security devices to include firewalls, remote access appliances, and anti‑virus solutions.
• Develop and implement proactive IT security measures and practices to protect customer systems from exploit – specifically focused on firewalls, external access control points, and vulnerability assessment/mitigation.
• Be prepared to offer security‑related guidance on business processes, emerging technologies and acquisitions, and vulnerability assessment/mitigation approaches.
• Conduct risk and vulnerability assessment at the network, system and application level.
• Conduct reviews of each system's audits and monitor corrective actions until all actions are closed.
• Analyze, troubleshoot, and investigate security‑related, information systems anomalies based on security platform reporting, network traffic, log files, host‑based and automated security alerts.
• Prepare investigative reports to be submitted to US‑CERT.
• Identify and manage projects related to IT security and overall enterprise operations and maintenance, to include the task delegation and status reporting while coordinating activities within the Network and Systems teams and across the IMT department.
• Develop and document detailed processes and procedures related to the analysis of security vulnerabilities, auditing of key security factors, and notification/mitigation of security findings.
• Produce detailed reports of auditing activities that demonstrate proactive management of enterprise security.
• Maintain and update relevant system and process documentation and develop ad‑hoc reports as needed.

Qualifications

• Possesses familiarity with various aspects and components of information security (encryption methods standards, real‑time intruder detection, perimeter security, event correlation, authentication services, vulnerability analysis, and incident handling and forensics, Public Key Infrastructure (PKI) and two‑factor authentication solutions.)
• Analyzes and reviews IT and physical security events, and traffic flows escalated from automated detection systems utilizing commercial Security Incident and Event Management (SIEM [Tripwire software]), Intrusion Detection and Prevention Systems (IDS/IPS [Palo Alto, Cisco ASA, McAfee, Ironport software]) and log management and database activity monitoring.
• Exhibits knowledge and experience with common attack methodologies; common types of security vulnerabilities, and malware analysis, and evaluates, plans and recommends long and short term changes to the security architecture designed to improve security posture.
• Possesses recent (within 1 year) and relevant practical experience using Retina, Gold Disk, Wireshark, Snort, Logger, Nessus, NeXpose, Metasploit, and other security and web assessment tools.
• Possesses experience building and maintaining System Security Plans, Incident Response Plans, Contingency Plans and Exercises, Continuity of Operations Plans and exercises, Risk Management Plans and Vulnerability Management Plans in accordance with FISMA, and NIST guidelines.
• Possesses experience directing remediation efforts, building Residual Risk Reports and tracking and executing an IT security Plan of Action and Milestones (POA&M).
• Possesses experience performing Privacy Impact Assessments (PIA) and enacting best practices protecting Personally Identifiable Information (PII).

Public Trust Clearance required for the job.