Job Description
• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 10 years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls; and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Expert-level skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks
• Strong experience in implementing security controls from government regulatory frameworks and security standards (e.g., NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Demonstrated and repeat experience implementing controls for cloud, container, and DevSecOps services and solutions from IL5 to IL6+ on NIPR, SIPR, and JWICS.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Expert proficiency in incident response, security incident handling, and forensic analysis techniques.
• Expertise with security tools such as Fortify, Acunetix, and Prisma Cloud
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements
• Active TS//SCI clearance with CI poly
• Familiarity with implementing security controls for solutions in Azure and/or GCP
• Experience with low-to-high development models and associated tooling
