Cybersecurity Engineer (Remote)

Salary: $100,000 - 110,000/year

This position is fully remote / work from home, but candidates must be local to the Suitland, MD area for occasional meetings.

We are looking to hire a Mid Level Security Engineer to support a full range of cyber security services on a long-term contract in Washington DC. The position is full time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.

Position Responsibilities:

• Conduct Privacy Impact Assessments (PIAs) of the application’s security design for the appropriate security controls, which protect the confidentiality and integrity of Personally Identifiable Information (PII).
• Design and develop cybersecurity or cybersecurity-enabled products.
• Develop and direct system testing and validation procedures and documentation.
• Develop detailed security design documentation for component and interface specifications to support system design and development.
• Develop Disaster Recovery and Continuity of Operations plans for systems under development and ensure testing prior to systems entering a production environment.
• Develop specific cybersecurity countermeasures and risk mitigation strategies for systems and/or applications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find work-arounds for communication protocols that are not interoperable).
• Identify and prioritize essential system functions or sub-systems required to support essential capabilities or business functions for restoration or recovery after a system failure or during a system recovery event based on overall system requirements for continuity and availability.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with organization's evaluation and validation requirements.
• Implement security designs for new or existing system(s).
• Incorporate cybersecurity vulnerability solutions into system designs (e.g., Cybersecurity Vulnerability Alerts).
• Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Design, develop, integrate, and update system security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop mitigation strategies to address cost, schedule, performance, and security risks.
• Perform security reviews and identify security gaps in architecture.
• Trace system requirements to design components and perform gap analysis.
• Verify stability, interoperability, portability, and/or scalability of system architecture.

Requirements:

• Bachelor’s degree or higher
• 8+ years’ experience in security engineering in mid to large environments.
• Certifications addressing security and risk management, asset security, security engineering, communications and network security, identity and access management, security assessment and testing, security operations, software development security, system security, network infrastructure, access control, cryptography, assessments and audits, and organizational security
• Strong written and verbal communication skills.
• Knowledge of secure configuration management techniques. (e.g., Security Technical Implementation Guides (STIGs), cybersecurity best practices on cisecurity.org).
• Knowledge of software development models (e.g., Waterfall Model, Spiral Model).
• Active Public Trust clearance or eligible to obtain a Public Trust clearance

Powered by JazzHR

YgRTmTg2CD

Recommended Skills

• Access Controls
• Architecture
• Assessments
• Auditing
• Communication
• Computer Security