Senior Security Engineer (Vulnerability Management)
Job description
Us…
We were founded as a fresh alternative in the Government Consulting Community and are dedicated to the belief that results are a product of analytical thinking, agile design principles and that solutions are built in collaboration with, not for, our customers. This mantra drives us to succeed and act as true partners in advancing our client’s missions.
The Program:
- 7 or more years of professional IT work experience with at least 4 specialized in cyber security
- U.S. citizenship is required per Contract to obtain and maintain U.S. Department of Energy Clearance, with the ability to obtain a Public Trust clearance.
- Passion for learning about current and emerging information security threats and vulnerabilities
- Strong understanding of Enterprise Vulnerability management
- A love for identifying gaps, providing solutions, and improving existing processes
- Ability to collaborate with other teams to improve security across an enterprise
Soft skills:
- Strong customer service focus to meet the needs of internal and external customers.
- Professional, pleasant, and polished demeanor.
- Strong problem-solving capabilities and the ability to effectively communicate solutions.
- Excellent verbal and written communication skills
- Ability to build strong relationships with stakeholders at all levels
Technical skills \ Qualifications:
- One or more certifications in information security (such as Sec+, CEH, CISSP, SSCP, etc.)
- Expertise with several of the following:
- Windows Endpoints and Server
- Unix/Linux
- macOS
- IOS
- Android
- Expert level:
- Troubleshooting skills
- Data analysis skills
- Strong cyber security knowledge and experience with several of the following:
- Host security (Such as Tenable)
- Web Application security (Such as NetSparker)
- Database Security Vulnerability and Compliance (Such as DbProtect)
- SIEM Tools (Such as Splunk)
- Secure OS baselines (CIS, STIG, etc.)
- Vulnerability Impact Analysis
- Proficient in MS Office (Word, PowerPoint, Excel)
Desired experience and knowledge:
- Prior NIH Experience
- Experience with government contracting firms supporting the Federal government.
- Previous System Administration experience
- Scripting experience with Bash, Python, or PowerShell
- Experience with and/or knowledge of:
- Hardening AWS, GCP, and Azure clouds
- GitHub Enterprise
- Administering Symantec Data loss prevention
- Hardening Dev/Sec/Ops Pipelines and Developer workflows
- Static Application Security Testing (SAST)
- Dynamic application security testing (DAST)
- Interactive application security testing (IAST)
- Runtime application self-protection (RASP)
- Microsoft Power Query, Power Charts, etc.
- SPL queries and building Splunk Dashboards
- Database Security Vulnerability and Compliance (Such as DbProtect)
It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other statuses protected by applicable law.
gatheringourvoice.org is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, gatheringourvoice.org provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, gatheringourvoice.org is the ideal place to find your next job.