Security Engineer / IT Help Desk Technician

Cybersecurity Jobs; Bethesda (MD); On-site; USD 58,000 - 105,000; Full time

Job summary

National Digital Exploitation & OSINT Center (NDOC) in Bethesda, MD, is seeking a junior Security Engineer and IT Help Desk Technician to join an onsite team. You will apply system security engineering expertise, support security activities tied to cryptography, authentication, and system integration, and provide incident handling and user support across Windows, AD, and network services.

This role requires a bachelor’s degree, at least 2 years of experience, and strong ITSM tool usage to

Qualifications

• Minimum 2 years of relevant experience.
• Bachelor’s degree in a related field.
• Customer service skills: patient, empathetic, able to communicate technical information clearly.
• Experience creating and managing domain accounts within Active Directory.
• Familiarity supporting virtual desktops running Windows.

Responsibilities

• Apply system security engineering expertise across security design and life cycle.
• Support security engineering activities tied to cryptography and authorization.
• Coordinate with architects and PMs to plan system enhancements aligned with security needs.
• Maintain currency on security documentation and accreditation activities (ATO, NIST 800-53).
• Provide technical support and issue resolution on escalated security-related problems.

Skills

Active Directory

Windows OS

Security engineering

Incident response

ITSM tools

Customer service

Network troubleshooting

Documentation

Education

Bachelor's degree

Tools

ServiceNow

Jira Service Desk

SCCM/MECM

MS Visio

Job description

Support the National Digital Exploitation & OSINT Center (NDOC) as a junior Security Engineer and IT Help Desk Technician on an onsite team in Bethesda, MD.

Responsibilities

• Apply system security engineering expertise across areas including system security design, engineering life cycle, information domain and cross-domain solutions
• Support security engineering activities tied to cryptography, identification, authentication, authorization, system integration, risk management, intrusion detection, contingency planning, incident handling
• Contribute to configuration control, change management, auditing, and certification and accreditation processes
• Coordinate with systems architects and project managers to plan and implement system enhancements and upgrades to meet security requirements based on STIG and NIST 800-53
• Provide technical support, troubleshooting, and complex problem resolution on escalated security enhancement issues within the infrastructure
• Identify security requirements and objectives, ensure they are implemented, and help support automatic monitoring and reporting for compliance with NMEC2 RMF and directives as detailed by the NMEC2 ISSM
• Ensure applicable security requirements are met according to existing and evolving IA reference security documents
• Submit written input to ISSMs when a security-relevant change is required for existing systems or contractors
• Support systems security requirements analysis for security compliance and relay findings through ISSMs to engineering or operations groups where design, operations, or performance may be impacted
• At Government direction, assist ISSMs to enhance and deploy security services architecture
• Participate in customer Technical Exchange Meetings (TEMs) to gather requirements; support Security TEMs related to systems security and system accreditation as required
• Maintain currency on security documentation (body of evidence) for accreditation in support of ATO, aligned to NIST 800-53 controls
• Collaborate on IA activities with NMEC2, the ISSMS, and Cyber Security Program Offices to incorporate NMEC2 RMF goals and objectives
• Support ATO within the NMEC and with NMEC IT customers by verifying security measures are taken, maintained, reported on, and updated as required
• Provide input to IA (via assigned ISSM(s)) assisting ISSMs in editing JAVA and POA&M documentation when expected measures have not been implemented
• Help ensure mission objectives are met in accordance with applicable security policies and directives
• Collaborate with NMEC2 ISSM and Operations & Maintenance to ensure compliance with ICD-503 and other NMEC2 ISSM-designated directives
• Support firewall and controlled interface security architecture design/enhancement using requirements provided by NMEC2 ISSM and appropriate security organizations
• Support identification, implementation, automated management, automated monitoring, and automated reporting for security hardening, patching, and virus-checking
• Implement procedural protective measures by automating repeatable processes and reporting to maintain compliance toward ATO
• Serve as first point of contact for customer queries and incidents via walkup, phone, email, or chat
• Manage and administer accounts including account creation, password resets, troubleshooting, and termination/deletion
• Document and track requests and incidents in the customer-approved ITSM solution
• Document troubleshooting and triage steps, elevate to Tier 2/3 teams when appropriate
• Provide telephone support professionally to maintain excellent customer relationships
• Log and assign all tickets to the correct team
• Proactively monitor incidents for trends and potential Problem Records, and highlight findings to the Service Desk Manager
• Update Service Desk documentation for new processes and procedures; produce customer-facing and internal knowledge base documentation as required
• Participate in Continual Service Improvement activities to share experience and support service enhancements

Requirements

• Minimum 2 years of relevant experience
• Bachelor’s degree
• Customer service skills: patient, empathetic, able to communicate technical information clearly
• Experience creating and managing domain accounts within Active Directory
• Familiarity supporting virtual desktops running Microsoft Windows
• Experience troubleshooting common Active Directory account issues and errors
• Experience troubleshooting software and hardware issues for end-user devices including workstations, printers, and scanners
• Experience troubleshooting application performance and latency problems related to security requirements (front, middle, and back end)
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
• Experience implementing security controls on common network services such as file, email, and Active Directory across multiple geographically dispersed sites
• Experience with networking technologies and security assessment, including STIGs
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS
• Networking and systems troubleshooting experience with TCP/IP, Internet security, and encryption (data at rest, data in transit)
• Time management skills and ability to work independently while prioritizing based on customer and mission impact
• Ability to use an ITSM tool to document, track, and resolve incidents and requests
• Ability to triage, classify incidents, and prioritize workload
• Strong oral and written communication skills
• Experience establishing goals and plans aligned to project objectives
• Track record working effectively in a team and supporting peers
• Thorough knowledge of MS Office, the Internet, and internal applications for routine and moderately complex tasks
• Ability to produce clear documents and diagrams capturing networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel, and MS Word
• Must meet DoD 8570.11-IAT Level II certification requirements: currently Security+ CE, CCNA-Security, GSEC, or SSCP plus an appropriate computing environment (CE) certification

Required Clearance / Citizenship

• Active TS/SCI clearance with Polygraph required OR active TS/SCI and willingness to obtain Poly
• US citizenship required

Compensation

• USD 57,850 - 104,575 per year

Onsite Location

• Bethesda, MD (onsite)

Technologies

• Active Directory, Microsoft Windows, Windows Server 2016/2019, IIS, DNS, DHCP, Exchange, DFS
• Splunk, McAfee HBSS, ACAS
• TCP/IP, STIGs, NIST 800-53, NMEC2 RMF, NIST 800-53 controls, NMEC2 ISSM
• IT Service Management (ITSM) solution
• MS Office, MS Visio, MS Project, MS Excel, MS Word
• JAVA, POA&M

Preferred Qualifications

• CISSP or CASP Certification
• Experience in Help Desk Support (end-user technical support, hardware and software troubleshooting, IT problem resolution)
• Technical proficiency with computer hardware, software applications, operating systems, and network configurations
• ITSM tools proficiency for documenting, tracking, and resolving incidents and service requests
• Experience with tools such as ServiceNow or Jira Service Desk
• Background in hardware setup, deployment, and maintenance (workstations, printers, scanners, servers, phones)
• Experience with operating system/application patch management methodologies
• Experience operating and maintaining Linux-based systems
• Experience with OS and application deployment utilizing SCCM/MECM
• Certification relating to MCSE or MCSA (Microsoft) a plus
• Experience troubleshooting network storage connectivity from an end-user perspective
• Experience working in an Agile environment
• Familiarity with Hyper Converged Infrastructure (HCI) concepts and solutions
• Familiarity with virtual servers and technologies
• Experience troubleshooting within a secure environment
• Experience with backup and restore procedures