Security Engineer (Cross-Functional) | SME

The Security Engineer (Cross-Functional) is responsible for security across multiple applications, platforms, and cloud environments. This role develops incident response and recovery plans, supports cyber resiliency, and designs monitoring and alerting capabilities to detect anomalous activity. The engineer maintains secure cloud infrastructure, manages communication security resources or cryptographic keys, and coordinates with industry partners to advise the government on vulnerabilities and security recommendations., Application and Platform Security

• Secure multiple applications and platforms, including critical data and vulnerability points.
• Perform web application and platform security testing.
• Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.
• Apply Internet firewall and encryption technologies to maintain organizational and customer security.

Security Monitoring and Incident Response

• Develop incident response and recovery plans.
• Design monitoring and alerting capabilities to identify anomalous activity across multiple systems.
• Monitor applications and platforms for anomalous activity.
• Correlate data to support detection, remediation, monitoring, and recommendations for changes.
• Support cyber resiliency and security planning.

Secure Cloud Infrastructure and Operations

• Operate secure cloud infrastructure, platforms, and software.
• Install, maintain, and upgrade cloud computing environments and core infrastructure.
• Develop, build, maintain, upgrade, and continuously improve cloud networks and cloud-based systems.
• Apply defense-in-depth security governance policies and guidelines to cloud environments.

Communication Security and Key Management

• Manage organizational communication security (COMSEC) resources in accordance with CNSSI 4009, or serve as a key custodian for a cryptographic key management system (CKMS).

Security Governance and Partner Coordination

• Coordinate with industry partners to advise the government on security vulnerabilities and recommendations.
• Update and delete user accounts.
• Monitor compliance violations and perform follow-up activities.
• Develop security policies, practices, and guidelines.

• Bachelor’s degree required.

Experience

• Minimum of 10 years of experience.
• Experience with cloud technology.

Skills

• Ability to develop incident response and recovery plans.
• Knowledge of cyber resiliency, security planning, and web application and platform security testing.
• Ability to design monitoring and alerting capabilities and correlate security data across systems.
• Understanding of application-critical data and vulnerability points.
• Technical capabilities supporting secure cloud infrastructure, platforms, software, and networks.
• Knowledge of defense-in-depth security governance policies and guidelines.
• Ability to manage COMSEC resources or perform CKMS key custodian duties.
• Knowledge of Internet firewalls, encryption technologies, website security, and transaction protection.
• Ability to develop security policies and coordinate vulnerability recommendations with industry and government stakeholders.