Senior Security Engineer

Xtalks; Orlando (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Scientific Research Corporation is seeking a Senior Security Engineer for the NCRC RM product lines. You will lead vulnerability management, implement security controls, and shape governance and architecture across teams.

Responsibilities include building security solutions (SIEM/EDR/IDS/IPS/IAM/VPN), supporting DoD network security, and maintaining data flow diagrams while working within Agile/Scrum practices. A U.S. clearance is required.

Qualifications

• U.S. citizen with active security clearance
• BS in Cybersecurity, CS, IT, or related field or equivalent experience
• Strong knowledge of network protocols, security architecture and practices
• Experience with Linux and Windows systems
• Scripting in Python, PowerShell, or Bash
• Experience with automation tools: Ansible, Terraform, Chef, Puppet
• Understanding of CI/CD
• Knowledge of NIST 800-53/800-171, SOC 2 or ISO 27001
• Ability to write clear cybersecurity guidance and documentation
• Security+ Certification

Responsibilities

• Vulnerability management and patching across OS
• Governance, risk, and compliance tracking and POA&Ms
• Security architecture and engineering for SIEM, EDR, firewalls, IDS/IPS, IAM, VPN
• Advising ISSO/ISSM on securing DoD networks
• Creating data flow and system boundary diagrams
• Active participation in Agile/Scrum processes

Skills

Python

PowerShell

Bash

Linux

Windows

CI/CD

Ansible

Terraform

Security best practices

Education

Bachelor's degree in Cybersecurity/CS/IT

Security+ Certification

Tools

ACAS

Tenable Nessus

VMware

SIEM

Job description

Description

This position is for the NCRC Range Modernization (RM) Senior Security Engineer position providing senior-level development, testing, and security support associated with their designated NCRC product scrum teams.

Responsibilities

• Vulnerability Management
  • Implementing patching procedures for multiple Operating Systems (Linux, Windows, VMware, Cisco)
  • Running and reviewing vulnerability scans and STIGs
  • Prioritizing vulnerability remediation efforts across endpoints, networks, and applications
  • Automating patching process for multiple Operating Systems (Linux/Windows)
  • Responsible for securing and hardening hardware and software systems.
• Governance, Risk & Compliance
  • Supporting tracking resolution and milestones for program's Plan of Action and Milestones (POA&M) items
  • Developing and maintaining security policies, procedures, and standards
  • Ensuring compliance with relevant standards, directives and regulations
  • Conducting risk assessments and supporting audit activities
  • Remaining abreast of emerging technologies, cyber threats and security tools
• Security Architecture & Engineering
  • Designing, implementing, and managing security solutions (e.g., SIEM, EDR, firewalls, IDS/IPS, IAM, VPN)
  • Evaluating and integrating new security technologies and tools
• Advising ISSO and ISSM on issues related to securing and monitoring classified DoD networks
• Creating and maintaining of data flow and system boundary diagrams
• Agile/Scrum process

Requirements

• Must be a U.S. citizen and have an active clearance
• Bachelor's (BS) degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
• Strong understanding of network protocols, security architecture, and security practices
• Experience with Linux-based and Windows-based systems
• Proficient in scripting (e.g., Python, PowerShell, Bash)
• Experience with automation tools (e.g., Ansible, Terraform, Chef, Puppet)
• Understanding of CI/CD
• In-depth knowledge of modern threat landscapes, vulnerabilities, mitigation techniques, and security tools and processes
• Familiarity with NIST 800-53, NIST 800-171, SOC 2 and/or ISO 27001
• Ability to write clear and concise cybersecurity guidance, procedures and documentation
• Security+ Certified

Desired Skills

• DoD RMF security practices and regulations
• Virtualization (preferably VMware)
• Familiarity with open-source security tools
• Familiarity with ACAS, Tenable Security Center, and Tenable Nessus

Clearance Information

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY

Travel Requirements

• less than 10%

About Us

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.
SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

EEO

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.
Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact [e-mail] for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.