Cybersecurity Project Engineer

Job Category:  Engineering - Cybersecurity Project Engineer

Industry:  TS/SCI

Clearance: Full scope polygraph (Active)

Employer:  Confidential

Location:  Onsite - Chantilly, VA

Employment Type:  W2 FTE + Full Benefits

Book Interview & Apply!

We're seeking a Cybersecurity Project Engineer for a long term program supporting an IC customer in Dulles, VA. This position requires an active TS/SCI full scope polygraph clearance.

The Cybersecurity Project Engineer will be responsible for conducting technical risk assessments, providing risk mitigation guidance, and analyzing IT systems and networks for vulnerabilities. The role also involves evaluating system and network operations, analyzing hardware and software, and staying current with emerging technologies to identify associated risks.

1. Perform technical risk assessments and provide risk mitigation guidance on enabling technologies.
2. Gather Body of Evidence (BOE) and assess artifacts to inform risk assessor’s judgement.
3. Apply consistent and systematic investigative practices to assess risks, threats, and vulnerabilities.
4. Evaluate system or network operations using network management platforms, scanning tools, auditing functions, PCAP captures, and log reviews.
5. Analyze system, network, or cloud configurations for mis-configured settings and outdated hardware or software.
6. Remain current with existing and future technologies to identify associated risks.
7. Provide guidance on potential cyber threats, attacks, and exploitations.
8. Ensure risk mitigation considerations are incorporated early in the development cycle.
9. Organize and schedule work effectively to manage a case load.
10. Track, document, and communicate progress status updates on technical risk assessment reports.

1. Demonstrated experience analyzing IT systems for cyber security vulnerabilities.
2. Demonstrated experience developing IT system or network architecture design, conducting IP data flow analysis, encryption configuration, and vulnerability analysis using both open-source and commercial tools, such as Nmap, Wireshark, Metasploit, Canvas, Kismet, or BackTrack.
3. Demonstrated experience analyzing IT network configurations of devices such as firewalls, routers, switches, VPNs, or Intrusion Detection/Prevention Systems for cyber security vulnerabilities.
4. Demonstrated experience with communications protocols such as IP, TCP, UDP, HTTP, HTTPS, MPLS, OSPF, IGRP, BGP, SIP, H.232.
5. Demonstrated experience with multiple OS’s, including Windows, Linux, and OSX.
6. Demonstrated experience with Microsoft Windows ver.; 7, 8, 10, 2008R2, 2012, 2012R2, or 2016.
7. Demonstrated experience with cloud computing technology and hypervisors such as HyperV, VMWare ESX, or Virtual Box.
8. Demonstrated experience with transitioning security domains and use of cross domain appliances.
9. Demonstrated experience with network management systems, network storage, backup systems, and disaster recovery (DR) architectures.
10. Demonstrated experience performing technical risk assessments and providing technical risk mitigation guidance.
11. Demonstrated experience ensuring appropriate risk mitigation considerations, risks and vulnerabilities are well understood and appropriately mitigated.
12. Demonstrated experience analyzing procurement processes of hardware, software and services to comply with cyber security and operational needs.
13. Demonstrated experience creating concise and well-structured written assessments.
14. CISSP Certification.

1. Demonstrated experience with the Customer’s IT review boards.
2. Demonstrated experience with providing recommendations to IT architecture and design reviews.
3. Demonstrated experience with the Customer’s security policies and regulations.
4. Demonstrated experience providing recommendations in technical standards, security standards, and operational assurance.
5. Demonstrated experience with USG standards such as Intelligence Community Directive (ICD) 503, Federal Information Processing Standards (FIPS), National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37, SP 800-39, SP 800-53, SP 800-53A, SP 800-60.
6. Certified Information Security Manager (CISM), Certified Ethical Hacker.

 

We're always looking for TS/SCI-cleared talent.
Our standard compensation package consists of a competitive salary
100% company-paid health/dental/vision care benefits.
100% company-paid LTD/STD/Life Insurance benefits.
401(k) with company match and a generous holiday/vacation/sick leave policy.

 

About the Company:

• We offer a full spectrum of IT consulting services to help our customers realize the full value of their IT investments.
• We are an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, color, religion, age, sex, national origin, disability or veteran status, genetics, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
Book Interview & Apply!

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or, in any other manner, discriminate against employees or applicants because they have inquired about, discussed, or disclosed their pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)