Senior Security Engineer- TS/SCI

Jobvite, Inc.; Bethesda (MD); On-site; USD 140,000 - 180,000; Full time

Job summary

Xcelerate Solutions is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities supporting enterprise and isolated environments. This 100% on-site position will work at the customer site in Bethesda, MD and require active TS/SCI clearance.

Responsibilities include leading security operations, vulnerability management, RMF/ATO support, and continuous monitoring. The role demands technical leadership, hands-on security engineering, and the ability to

Qualifications

• Bachelor’s degree or equivalent work experience in CS/IT.
• Active TS/SCI clearance with Polygraph or willingness to obtain one.
• Experience with security controls, vulnerability management, and continuous monitoring.

Responsibilities

• Lead day-to-day security operations and coordinate activities across teams.
• Provide technical leadership to security personnel and engineers.
• Oversee vulnerability management from discovery to remediation and validation.
• Coordinate remediation across Windows, Linux, network, and desktop teams; provide hands-on support as needed.
• Oversee vulnerability scanning and analysis with ACAS/Tenable or equivalent.
• Ensure DISA STIGs and security baselines are implemented and validated.

Skills

Security operations leadership

Vulnerability management

RMF/ATO support

Incident response

Education

Bachelor’s degree in Computer Science or related field

Tools

ACAS

Nessus/Tenable

Splunk

HBSS

Job description

Xcelerate Solutions is seeking a Senior Security Engineer to serve as the technical lead for day-to-day security activities supporting enterprise and isolated environments. This position will provide technical leadership and oversight for security operations, vulnerability management, RMF/ATO support and continuous monitoring activities. The individual will lead and mentor security personnel, establish priorities and coordinate security activities across infrastructure and engineering teams. This is a hands-on technical lead position, and the individual will be expected to directly support security engineering and operational security activities as needed. The individual will work closely with the ISSM, customer, program leadership and technical teams to translate security requirements into actionable work and maintain the overall security posture of the environment. This is a 100% on-site position. All work must be performed at the customer site. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry.

Location:

Bethesda, MD

Security Clearance:

Active TS/SCI

Responsibilities:

• Lead and coordinate day-to-day security operations, establish priorities and assign and track activities across the security team.
• Provide technical leadership and guidance to security personnel, system administrators, engineers and other technical teams.
• Lead vulnerability management from identification through closure, including analysis, prioritization, remediation, validation and documentation.
• Coordinate vulnerability remediation across Windows, Linux, network, desktop support and other engineering teams and provide hands-on support for complex or high-priority issues as needed.
• Oversee and perform vulnerability scanning and analysis using ACAS, Tenable/Nessus or equivalent technologies.
• Oversee implementation and validation of DISA STIGs and approved security configuration baselines across infrastructure systems.
• Ensure recurring security activities are performed, including audit log and account reviews, vulnerability reviews, security control validation and continuous monitoring.
• Support and oversee RMF/ATO activities, including security documentation, control evidence, Body of Evidence (BoE), POA&Ms and compliance with NIST SP 800-53, ICD 503 and applicable security directives.
• Work with the ISSM to translate security and compliance requirements into technical and operational activities and evaluate system or configuration changes for potential security impact.
• Provide security oversight and technical support for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening and security monitoring.
• Review security logs and events using Splunk or equivalent SIEM/log-management technologies and ensure identified issues are appropriately addressed.
• Develop and maintain repeatable security processes and procedures for vulnerability management, compliance monitoring, evidence collection and security operations.
• Track security risks, deficiencies, remediation activities and compliance status and communicate status, risks and recommendations to customer and program leadership.
• Participate in Technical Exchange Meetings (TEMs), security reviews, engineering meetings and customer discussions related to system security and accreditation.
• Manage, supervise and mentor security and technical staff as assigned.
• Active TS/SCI clearance with Polygraph required OR active TS/SCI and willingness to get a Poly.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• Experience with application performance and latency problems related to security requirements from front, middle, and back end
• Working experience with Windows Server 2016/2019, Active Directory, IIS, DNS, DHCP, Exchange, DFS
• Experience implementing security controls on common network services such as file, email, and active directory across multiple geographically dispersed sites.
• Experience with networking technologies and security assessment to include, but not limited to, STIGs.
• Experience implementing and supporting enterprise system security and malware monitoring and prevention tools such as Splunk, McAfee HBSS, and ACAS
• Solid network and systems troubleshooting experience with TCP/IP, Internet security, and encryption (data at rest, data in transit)
• Ability to produce clear and concise documents and diagrams capturing networking and operational procedures and LAN/WAN topology using MS Visio, MS Project, MS Excel and MS Word.
• Candidate must, at a minimum, meet DoD 8570.11- IAT Level II certification requirements (currently Security+ CE, CCNA-Security, GSEC, or SSCP along with an appropriate computing environment (CE) certification)

Preferred Qualifications:

• Experience managing and/or supervising a team of technical professionals
• CISSP or CASP Certification

About Xcelerate Solutions:
Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s cultureis definedby our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees hasbeen recognizedby our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well asbeing a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers!

Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.
Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.