Information Security Engineer, Principal

Location: Warrenton, VA

Clearance Required: Must be a U.S. Citizen and possess a current and active TS/SCI clearance granted by the Department of Defense or an Intelligence Community agency. Must be able to pass a Counterintelligence (CI) Polygraph.

Background:

Assured Consulting Solutions provides strategic and innovative solutions for customer needs across the business, technology, and organizational spectrum. As a member of our team, you will have the chance to work with customers that are both Government and industry leaders and technology innovators.

We are looking for an experienced and highly motivated Information Assurance Systems Architecture Engineer (IASAE) to join our team in the Warrenton, VA area to provide outstanding support to our customer and to begin an exciting career within Assured Consulting Solutions. As an IASAE, you will implement and conduct Cybersecurity engineering activities in accordance with the organization's approved processes, technical operations, and strategic vision. The position is responsible for the technical management, monitoring, maintenance, and troubleshooting, of enterprise-wide monitoring systems, applications and related infrastructure; ensuring that any issues that may adversely impact the confidentiality, integrity or availability of computing resources are identified, properly alerted and promptly resolved. The IASAE will spend their time working on both system development and testing activities, based on the current priorities and needs of the customer while supporting the analysis of test results and the resolution of open issues.
The candidate must have experience managing Splunk, ACAS, and HBSS and will be responsible for the day-to-day maintenance and operations of these tool sets.

Responsibilities include, but are not limited to:

• Primary responsibility for maintaining the test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers.
• Create and implement methods and procedures for inspecting, testing, and evaluating the security and effectiveness of products and production equipment.
• Effectively choose the appropriate standards, processes, procedures, and tools throughout the system development life cycle to support the generation of the security engineering products.
• Design technical, operational, and organizational controls to maintain acceptable security posture for the organization.
• Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment, including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server.
• Administration and operation of information security compliance tools and platforms with a special concentration in managing the Assured Compliance Assessment Solution (ACAS) and ePolicy Orchestrator (EPO) suite.
• Installation, monitoring, testing, troubleshooting, and administration of the ACAS/Nessus Vulnerability Scanner applications.
• Ensure scheduled scans are covering 100% of intended assets and are being run successfully.
• Ensure SC is being updated regularly; address unsuccessful updates of the SC and identify the root cause of the unsuccessful update.
• Configure, optimize, and test vulnerability scans against new and existing Operating Systems and platforms.
• Configure, operate, and maintain HBSS and its components (ePolicy Orchestrator, McAfee Agent, Data Loss Prevention, Host Intrusion Prevention System, Policy Auditor, Asset Baseline Monitor, and Virus Scan Enterprise) on Windows and Linux creating exceptions to allow essential processes to continue uninterrupted.
• Provide guidance on vulnerability and malware remediation.
• Configure, operate, and maintain ForeScout, Trip Wire and Lumension tool suites.
• Identify potential conflicts with implementation of any cyber security tools within the enterprise and develop recommendations to remediate these conflicts.
• Provide Tier 3 maintenance support for deployed cyber security technologies.
• Assist with periodic and regular security assessments.
• Assist with the development and maintenance of information security policies, standards, and control procedures to enable compliance with RMF.
• Assist with POA&M management, mitigation statement formulation, interfacing with system administrators to resolve open findings of high and at-risk systems.
• Perform typical day-to-day tasks autonomously, requiring assistance in only the most complex tasks.

Required Qualifications:

• Must meet DoD 8570.01-M IAM-II or IASAE-I baseline certification requirements such as CASP CE or equivalent.
• 2+ years of Splunk experience in designing, implementing, and maintaining a fully operating Splunk solution.
• 2+ years of knowledge and experience with ACAS and HBSS administration.
• Practical experience in infrastructure administration (Linux, networking, Windows, firewalls).
• Experience with developing and presenting vulnerability information for technical and non-technical audiences.
• Well-developed verbal and written communication skills.

Desired Qualifications:

• Possess understanding and experience with common cybersecurity toolsets and processes to include STIGS, IAVA Management and Implementation, and OPORD/FRAGO support.
• Demonstrated experience in analysis simulation environment, configuring/troubleshooting software/hardware enhancements, application deployments, and infrastructure upgrades in a dynamic information system hosting environment.

Education Qualifications:

Requires a bachelor's degree in a related field and 7-9 years of directly related experience. Four (4) years of related experience may be substituted for a degree.

Years of Experience:

• 11+ years w/ High School Diploma
• 7+ years w/ Bachelor's Degree

Position Type: Full-Time

Shift: Day

COVID-19 VACCINATION REQUIREMENT. All ACS employees must be fully vaccinated against COVID-19 by their first day of employment or January 18, 2022, whichever is later. Exceptions to the vaccine mandate will be considered only where legally required. To discuss an exemption for medical reasons or due to a sincerely held religious belief, please contact ACS Human Resources at

Assured Consulting Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact ACS Human Resources at

Recommended Skills

• 3 Tier
• Administration
• Assessments
• Auditing
• Cluster Analysis
• Communication