Cybersecurity Engineer – Senior

Role: Cybersecurity Engineer – Senior

Location: Quantico, VA

Foundational Qualifications: Candidate must possess at least one of the following:

• Education: Masters or PHD (IT, Cybersecurity, Computer Science, Info. Sys, Data Science, or SW Engineering); OR
• Training: One of the following approved DoD training courses – F074141 Marine Analysis & Reporting; M0923X1 Network Chief Course; M09BNU1 Cyber System Chief; M09D3H1 Cybersecurity Managers; N23YLE5 Joint Network Attack Course (JNAC); OR
• Certifications: At least one of the following active certifications – CISSP; GCIA; GICSP; ISSAP; ISSEP

Years of Experience: 7+ years; experience may be considered as an alternative to foundational qualifications.

Clearance Level & Investigation: Secret

Job Description:

The Cybersecurity Engineer – Senior tests, implements, deploys, maintains, & administers infrastructure HW / SW. This includes, but is not limited to:

• Core Tasks:
  • Build, install, configure, & test dedicated cyber defense HW.
  • Assist in assessing impact of implementing & sustaining a dedicated cyber defense infrastructure.
  • Identify potential conflicts with implementation of any cyber defense tools(e.g., tool & signature testing & optimization).
  • Assist in identifying, prioritizing, & coordinating protection of critical cyber defense infrastructure & key resources.
• Additional Tasks:
  • Coordinate with system administrators to create cyber defense tools, test bed(s), & test & evaluate applications, HW infrastructure, rules/signatures, access controls, & configurations of platforms managed by service provider(s).
  • Coordinate with Cyber Defense Analysts to manage & administer updating of rules & signatures (e.g., intrusion detection/protection systems, anti-virus, & content blacklists) for specialized cyber defense applications.
  • Create, edit, & manage network access control lists on specialized cyber defense systems (e.g., firewalls & intrusion prevention systems).
  • Implement risk assessment & authorization requirements per Risk Management Framework (RMF) process for dedicated cyber defense systems within enterprise, & document & maintain records for them.
  • Perform system administration on specialized cyber defense applications & systems (e.g., anti-virus, audit & remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup & restoration.

Specifically, this role will provide Cybersecurity Engineering Support to the Cybersecurity & Information Security Support team, including, but not limited to:

• Advise ISSM on all matters related to cybersecurity & information security.
• Support ISSM with development of cybersecurity & information security policies, procedures, guidance, & best practices for compliance with Federal laws, regulations, guidelines, orders, & directives to ensure secure & compliant systems.
• Assist MCU ISSO.
• Support creation, submission, processing, & tracking of SAAR requests via digital SAAR forms & online AutoSAAR tool for both .edu & MCEN accounts.
• Support implementation of Zero Trust Strategy on all networks & systems.
• Support cybersecurity incident response, forensics, & investigations IAW Government processes & procedures to ensure actors & causes identified, appropriate corrective actions taken, & reports filed in timely manner.
• Support deployment, administration, & configuration of MS Defender IAW Government processes, procedures, standards, directives to ensure comprehensive endpoint & server threat prevention, detection, & response.
• Support change management & CM for proposed changes & modifications to Windows Defender, ACAS, & other cybersecurity systems, configurations, signatures, & settings to include submitting change control requests & attending scheduled CCB meetings.
• Assist in development of Cyber documentation for all systems, networks, & related tasks, to include reviewing, editing, & changing documents, including but not limited to A&A packages, SOPs, TTPs, MOAs, local policies & guidelines, & briefings for internal & external customers.
• Support token issuance by performing duties as MCEN NIPRNet & SIPRNet TA; support MDM & MAM via configuration of MS Intune.
• Support STIG implementations & checklists (both manual & automated) for devices, systems, services, SW, applications, & programs; manage, respond to, update, & report on all cybersecurity-related trouble tickets.
• Support implementation, auditing, & reporting of IAVAs, IAVBs, IAVMs, MCDs, OPDIRs, & CIO directive; execute patches & report compliance as required.
• Support identification, tracking, corrective action, & reporting of all vulnerabilities using Government-provided tools such as ACAS.
• Support system & application upgrades to Government-provided tools such as ACAS & MS Defender.
• Support deployment, administration, & configuration of MS Defender & MS Sentinel IAW Government processes, procedures, standards, directives to ensure comprehensive endpoint & server threat prevention, detection, & response.
• Support change management & CM for proposed changes & modifications to Windows Defender, ACAS, & other cybersecurity systems, configurations, signatures, & settings to include submitting change control requests & attending scheduled CCB meetings.
• Create & update systems architecture documentation to provide functional overview of solution; directly map technology capabilities & components to requirements.
• Create & maintain SOPs, work instructions, & job aids to document Government processes & procedures.
• Create detailed & accurate AARs to capture & describe outages, service interruptions, failures, or incidents to include lessons learned & recommendations.
• Track & report EoL & EoS dates, warranty & support status, & subscription & license expiration dates for all systems, SW, OS, firmware, tools, & subscriptions.