Systems Security Engineer

Science Applications International Corporation
Beltsville, United States of America
1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Intermediate
Compensation
$ 200K

Job location

Beltsville, United States of America

Tech stack

Microsoft Active Directory
Artificial Intelligence
Business Analytics Applications
Data analysis
Software as a Service
Computer Security
Databases
Computer Engineering
Multi-Factor Authentication
Monitoring of Systems
Network Topologies
Identity and Access Management
McAfee VirusScan
Microsoft Operating Systems
Microsoft Software
System Center Configuration Manager
Network Segmentation
Network Service
Public Key Infrastructure
Security Assertion Markup Language (SAML)
Security Information and Event Management
Wireshark
Software Vulnerability Management
Data Logging
Network Routers
Mitre Att&ck
Firewalls (Computer Science)
Information Technology
Performance Monitor
Tenable Nessus
Operational Systems
Cyber Warfare
Splunk
Network Server
Qualys
Vulnerability Analysis

Job description

SAIC is seeking a highly motivated Systems Security Engineer. The successful candidate will provide support to the Cybersecurity Integrity Center in the Department of State Bureau of Diplomatic Technology (DT). Duties are in the Washington, D.C. metropolitan area (30% in downtown D.C; 70% in Beltsville, MD). Supports cybersecurity monitoring, threat analysis, incident response, and infrastructure remediation within and across all the State Department's information technology (IT) infrastructure. Coordinates and collaborates with other State Department bureaus as well as other organizations within the Federal Government, and commercial partners., The Systems Security Engineer collaborates with Department and external cyber stakeholders on cybersecurity technologies with experience in Microsoft products and security systems, network topology and protocols, enterprise server & desktop operating systems, and applications, in support of over 80,000 customers globally. The Systems Security Engineer will:

  • Apply sound technical and management principles to identify and remediate cybersecurity --vulnerabilities across the State Department global IT enterprise infrastructure
  • Provides highly technical expertise and guidance in the design, implementation, operation, and maintenance of database management systems within a cybersecurity environment.
  • Perform operation and maintenance activities in support of existing cyber tools and technologies (MSV, Qualys, Tenable Nessus and others).
  • Apply preventive measures, system monitoring, and data analysis.
  • Provide technical leadership and guidance to security and operational personnel.
  • Evaluate system performance results, in response to incidents/problems, perform risk assessments, and evaluate performance metrics.

Responsibilities include:

  • Experience using system, network, and OS hardening techniques. (e.g., remove unnecessary services, Password policies, network segmentation, enable logging, least privilege, etc.).
  • Develop, Identify, and resolve security vulnerabilities related to deployment and testing processes.
  • Assist with streamlining and optimizing processes and procedures to rapidly remediate vulnerabilities from cybersecurity threats.
  • Collaborate across State Department bureaus and other Government Agencies to plan and implement system changes as they relate to cybersecurity and CISA guidelines.
  • Provide detailed assessments of potential risks to Microsoft-based systems, including both operating systems and applications, in accordance with NIST guidelines.
  • Identify infrastructure requirements for new and existing cyber capabilities. Work with responsible offices to ensure proper system provisioning, monitoring and mitigations.
  • Perform technical evaluations of recommended vulnerability mitigation actions and make recommendations based on impact and/or other countermeasures.
  • Develop strategies for cyber defense technologies, ensuring integration and alignment for continued operation.
  • Perform operation and maintenance activities in support of existing cyber tools and technologies (MSV, Qualys, Tenable Nessus and others).Identify, diagnose and prioritize anomalies in cyber defense infrastructure and resources.
  • Develop reports and dashboards and make tuning requests to SIEM system owner(s) in support of enhancing cyber monitoring.
  • Perform security reviews and identify security gaps in architecture and make recommendations based on trend analysis to enhance monitoring and hygiene activities.
  • Properly document all systems security implementation, operations, and maintenance activities and update as necessary.

Requirements

  • Bachelor's and 5 years or more experience; master's and 3 years or more experience; may accept additional experience in lieu of degree.
  • Familiarity with OMB, NIST, CISA, and related security guidelines and directives.
  • Interpersonal skills including the ability to collaborate effectively, and excellent written and oral communications.
  • Information protection technologies (e.g., firewalls, antivirus, threat protection, servers, routers, and others as appropriate).
  • Familiarity with countermeasures and mitigations to identify cybersecurity risks.

Required Clearance:

  • US Citizenship.
  • Active Top Secret Clearance.

Desired Education, Skills & Experience:

  • Bachelor's degree in computer science/computer engineering related discipline or equivalent years of experience and expertise.
  • 3 to 5 years Microsoft Operating Systems (OS) engineering and support experience focusing on Active Directory (AD), and System Center Configuration Manager (SCCM).
  • Knowledge of State Department OCONUS and CONUS unclassified and classified network service providers.
  • In-depth experience in planning, implementing, and managing large/global enterprise infrastructures.
  • Familiarity of various analytical tools (Splunk, Fluke, USBDeview, Netwitness, MimiKatz).
  • Understanding of Security Information and Event Management (SIEM) tools (Splunk, McAfee) and National
  • Vulnerability Database (NVD)
  • Familiarity with Forensic and Incident Handling.
  • Familiarity with MITRE ATT&CK Framework, Wireshark and Qualys.
  • Cyber defense technologies, including but not limited to: Vulnerability Scanning & Management, Endpoint detection and response, threat protection, and network defenses.
  • Familiarity with Cloud application security, Vulnerability Management and Security Information, and Event
  • Management capabilities.
  • Knowledge of identity and access management solutions (MFA, PKI, SAML, etc.).
  • Knowledge of Artificial Intelligence (AI).
  • Network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.

Benefits & conditions

Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

About the company

SAIC is a premier technology integrator, solving our nation's most complex modernization and systems engineering challenges across the defense, space, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration; enterprise IT, including cloud services; cyber; software; advanced analytics and simulation; and training. We are a team of 23,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $6.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see Working at SAIC. EOE AA M/F/Vet/Disability

Apply for this position