Vacancy expired!
ECS is a federal contractor. As such, we are subject an Executive Order requiring all employees of federal contractors to be fully vaccinated for COVID-19 by December 8, 2021. Therefore, by applying for this position, you understand that you will be required to verify that you have been, or will be, fully vaccinated by December 8, or to verify that you cannot be vaccinated due to a legally recognized exception to the vaccine mandate set forth in the Executive Order. Note: An individual is not considered to be fully vaccinated until two weeks after receiving the second vaccine dosage in a vaccine regimen involving two vaccines.
ECS is seeking a Security Engineer to work in our Springfield, VA office. Job Description: A Security Engineer to join an exciting program in Springfield, Virginia. Individual will be responsible for providing systems security support for the protection of information system assets. Responsibilities include:- Support secure cross-domain data transfers
- Support malicious code detection capabilities
- Provide ongoing security oversight of assigned systems
- Manage documentation of security plans and procedures for all assigned systems in adherence to USG information technology security policies and instructions
- Support system monitoring, and maintenance activities as required
- Support the investigation of security needs and recommend, plan, test and monitor information security improvements
- Provide system sanitization and destruction oversight
- Support Assessment and Authorization (A&A) / Risk Management Framework (RMF) for new and existing systems
- Coordinate requirements and deployment of capabilities working with system operations
- Interact professionally with senior-level executives and work on a team or independently, prioritizing and accomplishing assigned tasks in a fast-paced environment with deadlines
- Execute and complete rapid turn-around and short-suspense tasks
- TS/SCI Poly clearance
- Bachelor's degree with 5+ years' experience in IT Security field
- Minimum Year of Experience: 11
- Experience with the Risk Management Framework (RMF) to include the following skills:
- Policy interpretation and development,
- Interpretation of Controls and Requirements with the ability to communicate this to system developers, sustainment teams and customer staff
- Experience executing and editing System Security Test Plans (STPs) to accurately and thoroughly assess and document control satisfaction
- Ability to work well with and communicate effectively with others in a team environment
- Ability to work independently to achieve successful project completion with little oversight
- Experience with:
- ACAS (Nessus)
- HBSS (Data Loss Prevention - DLP)
- STIGS/SRGs/Vendor Best Practices
- Operating Systems: Windows, Linux
- System Auditing Experience
- General Networking Knowledge
- Knowledge and understanding of Identity and Access Management
- Cloud Experience
- DevOps/DevSecOps
- Containerization Technologies and related security aspects
- Application Security
- Databases
- ELK (ElasticSearch, LogStash, Kibana)
- Cross-Domain experience (technical and procedural experience)
- Experience/Exposure to new system security management technologies (Zero Trust, End Point Security, etc.)
- Incident Handling Experience
- Process/CONOPs development and refinement
- Identification and development of system security metrics
Vacancy expired!