Security Engineer

Yulista Holding, LLC; Falls Church (VA); On-site; USD 100,000 - 150,000; Full time

Job summary

StraitSys Inc seeks a Security Engineer to provide cybersecurity engineering and technical security support for EOIR's enterprise modernization efforts. You will help design, implement, and test security controls across applications and environments while ensuring compliance with DOJ and Federal requirements.

The role requires collaboration with project teams, management, and government stakeholders to embed secure practices throughout the development lifecycle and incident response activities.

Qualifications

• Bachelor's degree in cybersecurity, information security, or related field and relevant professional experience.
• Experience supporting DOJ/EOIR or Federal agencies is preferred.
• Knowledge of RMF and NIST security controls is desirable.

Responsibilities

• Design, implement, configure, and maintain security controls for applications, systems, and environments.
• Collaborate with architects, developers, admins, and stakeholders to embed security in SDLC.
• Identify and remediate security findings and vulnerabilities and document actions taken.
• Support IAM, authentication, authorization, and role-based access controls.
• Contribute to secure development and DevSecOps practices across project teams.

Skills

Security engineering

Vulnerability remediation

IAM / least privilege

DevSecOps

Cloud security

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Azure

Microsoft 365

Job description

StraitSys Inc Regular PRIMARY FUNCTION

The Security Engineer provides cybersecurity engineering and technical security support for enterprise application modernization efforts supporting the Executive Office for Immigration Review (EOIR). This individual is responsible for supporting the design, implementation, configuration, testing, and ongoing security of applications, systems, and supporting environments. The Security Engineer works closely with project management, solution architects, developers, system administrators, testing personnel, and Government stakeholders to ensure security requirements are incorporated throughout the system development lifecycle. This individual supports the identification and remediation of security vulnerabilities, implementation of security controls, and development and maintenance of security documentation necessary to support Department of Justice (DOJ) and Federal cybersecurity requirements.

This position is contingent upon contract award.

ESSENTIAL FUNCTIONS

• Support the design, implementation, configuration, and maintenance of security controls for applications, systems, and supporting environments.
• Collaborate with solution architects, developers, system administrators, and Government stakeholders to incorporate security requirements throughout the system development lifecycle.
• Review system designs, configurations, interfaces, and technical implementations to identify potential security risks and vulnerabilities.
• Support security assessments, vulnerability scanning, remediation activities, and validation of corrective actions.
• Identify, document, track, and assist with the remediation of security findings and vulnerabilities.
• Support implementation and maintenance of identity and access management, authentication, authorization, least privilege, and role-based access controls.
• Assist with security configuration and hardening of applications, cloud resources, databases, integrations, and supporting infrastructure.
• Support security testing throughout development, integration, testing, deployment, and ongoing operations.
• Collaborate with development and operations personnel to incorporate secure development and DevSecOps practices into application development and deployment processes.
• Support security monitoring and assist with the identification, analysis, response, and remediation of security incidents as required.
• Develop and maintain security-related technical documentation, procedures, configuration information, and supporting artifacts.
• Support the preparation and maintenance of documentation required for system security, authorization, assessment, and ongoing compliance activities.
• Monitor security risks and vulnerabilities and communicate potential impacts and recommended mitigation actions to technical and project leadership.
• Support compliance with applicable DOJ and Federal cybersecurity policies, standards, and requirements.
• Participate in technical reviews, security reviews, project meetings, and other activities necessary to support secure system implementation and operations.

DESIRABLE KNOWLEDGE, SKILLS, & ABILITIES

• Experience supporting the Department of Justice (DOJ), EOIR, or other Federal civilian agencies.
• Experience providing cybersecurity engineering support for enterprise application modernization or digital transformation initiatives.
• Experience securing cloud-based, hybrid, and Microsoft technology environments.
• Knowledge of Federal cybersecurity requirements, security controls, risk management, and system authorization processes.
• Familiarity with the NIST Risk Management Framework (RMF) and NIST security controls.
• Experience with vulnerability assessment, security scanning, remediation, and security configuration management.
• Knowledge of identity and access management, authentication, authorization, least privilege, and role-based access controls.
• Familiarity with application security, database security, API and integration security, and secure software development practices.
• Familiarity with Microsoft Azure, Microsoft 365, and related enterprise technologies.
• Experience working within Agile software development and DevSecOps environments.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to effectively communicate cybersecurity risks and technical information to technical and non-technical stakeholders.

QUALIFICATIONS

• Must be a U.S. Citizen.
• Must be able to successfully obtain and maintain the appropriate Department of Justice (DOJ) Public Trust Investigation (PTI) as required for the position.
• Bachelor's degree from an accredited college or university and relevant professional experience in cybersecurity, information security, systems security engineering, information technology, computer science, or a related discipline.
• Ability to successfully pass a pre-employment drug test and background check.

PLACE OF PERFORMANCE

The principal place of performance will be EOIR Headquarters located in Falls Church, VA.

PREFERENCE STATEMENT

Preference will be given to Calista shareholders and their descendants and to spouses of Calista shareholders, and to shareholders of other corporations created pursuant to the Alaska Native Claims Settlement Act, in accordance with Title 43 U.S. Code 1626(g).

EEO STATEMENT

Additionally, it is our policy to select, place, train and promote the most qualified individuals based upon relevant factors such as work quality, attitude and experience, so as to provide equal employment opportunity for all employees in compliance with applicable local, state and federal laws and without regard to non-work related factors such as race, color, religion/creed, sex, national origin, age, disability, marital status, veteran status, pregnancy, sexual orientation, gender identity, citizenship, genetic information, or other protected status. When applicable, our policy of non-discrimination applies to all terms and conditions of employment, including but not limited to recruiting, hiring, training, transfer, promotion, placement, layoff, compensation, termination, reduction in force and benefits.

REASONABLE ACCOMMODATION

It is Calista and Subsidiaries' business philosophy and practice to provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities. The statements contained in this job description are intended to describe the general content and requirements for performance of this job. It is not intended to be an exhaustive list of all job duties, responsibilities, and requirements. This job description is not an employment agreement or contract. Management has the exclusive right to alter the scope of work within the framework of this job description at any time without prior notice.

ABOUT YULISTA

Thank you for your interest in Yulista! As you get to know Yulista, you'll discover that we encompass many subsidiaries, each offering unique and specialized capabilities within their respective fields. All our subsidiaries operate cohesively under the overarching Yulista umbrella. This allows us to leverage combined strengths, foster collaboration across diverse expertise areas, and provide comprehensive solutions to our customers. Since 2002, Yulista has leveraged our technical expertise to maintain aircraft and ground vehicles, advance aerospace technology and missile defense, support national security, and sustain base and maritime operations. In a fiercely competitive market, our agile teams embrace complex challenges, delivering mission-critical solutions. Yulista has been a trusted and preferred partner for mission-ready clients, renowned for consistently providing innovative expertise that drives success. Our greatest strength lies in the passion and commitment of our men and women who strive to make the impossible possible.