Security Engineer

Yulista Holding LLC; Falls Church (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

StraitSys Inc in Falls Church, VA, seeks a Security Engineer to provide cybersecurity engineering and technical security support for enterprise modernization efforts supporting EOIR. You will design, implement, test, and sustain security controls across applications, systems, and supporting environments.

Collaborate with solution architects, developers, and government stakeholders to embed secure development and DevSecOps practices throughout the SDLC; conduct risk reviews, vulnerability

Qualifications

• US citizen required
• Eligible for DOJ Public Trust Investigation (PTI)
• Pre-employment drug test and background check
• Bachelor's degree and cybersecurity experience

Responsibilities

• Design, implement, maintain security controls for apps/systems
• Collaborate with architects, developers, admins, and government stakeholders to embed security in SDLC
• Review designs/configs to identify security risks
• Support security assessments, vulnerability scanning, remediation
• Identify, document, track, and remediate findings
• Support IAM, authentication, authorization, least privilege, RBAC
• Assist with hardening of apps, cloud resources, databases, and infra
• Support security testing across development through operations
• Promote secure DevSecOps practices in deployment processes
• Monitor security incidents and assist with response/remediation
• Develop and maintain security documentation and artifacts
• Prepare documentation for security authorization and compliance
• Communicate risks to leadership
• Ensure compliance with DOJ and federal policies
• Participate in security reviews and project meetings

Skills

DOJ/EOIR experience

Cybersecurity engineering

Cloud security

RMF familiarity

Vulnerability assessment

IAM/Access control

Application security

Azure/M365

Agile/DevSecOps

Analytical skills

Communication of risk

Education

Bachelor's degree in related field

Job description

Primary Function

The Security Engineer provides cybersecurity engineering and technical security support for enterprise application modernization efforts supporting the Executive Office for Immigration Review (EOIR). This individual is responsible for supporting the design, implementation, configuration, testing, and ongoing security of applications, systems, and supporting environments.

StraitSys Inc
Regular

Primary Function

The Security Engineer provides cybersecurity engineering and technical security support for enterprise application modernization efforts supporting the Executive Office for Immigration Review (EOIR). This individual is responsible for supporting the design, implementation, configuration, testing, and ongoing security of applications, systems, and supporting environments.

This position is contingent upon contract award

Essential Functions

• Support the design, implementation, configuration, and maintenance of security controls for applications, systems, and supporting environments.
• Collaborate with solution architects, developers, system administrators, and Government stakeholders to incorporate security requirements throughout the system development lifecycle.
• Review system designs, configurations, interfaces, and technical implementations to identify potential security risks and vulnerabilities.
• Support security assessments, vulnerability scanning, remediation activities, and validation of corrective actions.
• Identify, document, track, and assist with the remediation of security findings and vulnerabilities.
• Support implementation and maintenance of identity and access management, authentication, authorization, least privilege, and role-based access controls.
• Assist with security configuration and hardening of applications, cloud resources, databases, integrations, and supporting infrastructure.
• Support security testing throughout development, integration, testing, deployment, and ongoing operations.
• Collaborate with development and operations personnel to incorporate secure development and DevSecOps practices into application development and deployment processes.
• Support security monitoring and assist with the identification, analysis, response, and remediation of security incidents as required.
• Develop and maintain security-related technical documentation, procedures, configuration information, and supporting artifacts.
• Support the preparation and maintenance of documentation required for system security, authorization, assessment, and ongoing compliance activities.
• Monitor security risks and vulnerabilities and communicate potential impacts and recommended mitigation actions to technical and project leadership.
• Support compliance with applicable DOJ and Federal cybersecurity policies, standards, and requirements.
• Participate in technical reviews, security reviews, project meetings, and other activities necessary to support secure system implementation and operations.

SUPERVISORY RESPONSIBILITIES

No

DESIRED KNOWLEDGE, SKILLS, & ABILITIES

• Experience supporting the Department of Justice (DOJ), EOIR, or other Federal civilian agencies.
• Experience providing cybersecurity engineering support for enterprise application modernization or digital transformation initiatives.
• Experience securing cloud-based, hybrid, and Microsoft technology environments.
• Knowledge of Federal cybersecurity requirements, security controls, risk management, and system authorization processes.
• Familiarity with the NIST Risk Management Framework (RMF) and NIST security controls.
• Experience with vulnerability assessment, security scanning, remediation, and security configuration management.
• Knowledge of identity and access management, authentication, authorization, least privilege, and role-based access controls.
• Familiarity with application security, database security, API and integration security, and secure software development practices.
• Familiarity with Microsoft Azure, Microsoft 365, and related enterprise technologies.
• Experience working within Agile software development and DevSecOps environments.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to effectively communicate cybersecurity risks and technical information to technical and non-technical stakeholders.

QUALIFICATIONS

• Must be a US Citizen.
• Must be able to successfully obtain and maintain the appropriate Department of Justice (DOJ) Public Trust Investigation (PTI) as required for the position.
• Bachelor's degree from an accredited college or university and relevant professional experience in cybersecurity, information security, systems security engineering, information technology, computer science, or a related discipline.
• Ability to successfully pass a pre-employment drug test and background check.

PLACE OF PERFORMANCE

The principal place of performance will be EOIR Headquarters located in Falls Church, VA.

PREFERENCE STATEMENT

Preference will be given to Calista shareholders and their descendants and to spouses of Calista shareholders, and to shareholders of other corporations created pursuant to the Alaska Native Claims Settlement Act, in accordance with Title 43 U.S. Code 1626(g).

EEO STATEMENT

Additionally, it is our policy to select, place, train and promote the most qualified individuals based upon relevant factors such as work quality, attitude and experience, so as to provide equal employment opportunity for all employees in compliance with applicable local, state and federal laws and without regard to non-work related factors such as race, color, religion/creed, sex, national origin, age, disability, marital status, veteran status, pregnancy, sexual orientation, gender identity, citizenship, genetic information, or other protected status. When applicable, our policy of non-discrimination applies to all terms and conditions of employment, including but not limited to, recruiting, hiring, training, transfer, promotion, placement, layoff, compensation, termination, reduction in force and benefits.

REASONABLE ACCOMMODATION

It is Calista and Subsidiaries' business philosophy and practice to provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities.

The statements contained in this job description are intended to describe the general content and requirements for performance of this job. It is not intended to be an exhaustive list of all job duties, responsibilities, and requirements.

This job description is not an employment agreement or contract. Management has the exclusive right to alter the scope of work within the framework of this job description at any time without prior notice.