Cyber Security Project Engineer - TS/SCI w/Polygraph

Description

You will identify, analyze and respond to security incidents across enterprise and cloud environments, covering intrusion analysis, forensic collection, malware investigation and work with cyber defense teams to contain threats and strengthen the organization's security posture.

The team is a provider of cyber security risk management delivered as a service across several fabrics and centers, helping keep the customer's operational IT capabilities timely, accurate and secure.

The company is a global technology and professional services firm with 26,000 staff. It serves US federal agencies, defense and the intelligence community, operates in more than 50 countries and works in AI, cloud, cyber and software development.

Responsibilities

• Lead and support incident response across the enterprise.
• Coordinate incident response within cloud environments.
• Write after-action reviews and incident reports for both technical and non-technical readers.
• Collect and analyze intrusion artifacts to help mitigate threats.
• Receive, triage and investigate network alerts from multiple sources.
• Track external threat intelligence to judge possible impact on the enterprise.
• Carry out cyber defense trend analysis and reporting.
• Perform initial forensically sound image collection and analysis.
• Preserve evidence integrity under applicable standards and procedures.
• Write and publish cyber defense techniques, guidance and incident findings.
• Add to enterprise knowledge bases and security best practices.

Requirements

• US citizenship is required.
• Bachelor's degree in computer engineering, computer science, electrical engineering, information systems, information technology, cybersecurity or a closely related discipline.
• 8+ years of related experience.
• Knowledge of incident response methods, categories and timelines, and of cyber defense policies and procedures.
• Ability to assess damage and decide on remediation paths.
• Knowledge of host and network intrusion detection methods.
• Experience using security event correlation tools.
• Understanding of attack classes, attack stages and adversary behavior.
• Knowledge of malware analysis and containment techniques.
• Ability to identify, capture, contain and report malware.
• Skill in recognizing and categorizing vulnerabilities and the attacks tied to them.
• Knowledge of network security architecture, topology and communication principles.
• Understanding of network protocols, including TCP/IP, DHCP, DNS and directory services.
• Familiarity with network services, how they interact, and secure communications.
• Knowledge of system administration, OS hardening and application security threats.
• Understanding of cloud service models and how they affect incident response.
• Skills in cybersecurity risk management, documentation and information assurance.
• Required certification: one of CEH(P), ECIH, GRID, RCCE Level 1, CBROPS, CCSP, CEH, Cloud+, FITSP-O, GCED, GCIH, GSEC, PenTest+ or Security+.
• Preferred: board certification in a relevant security program (e.g., CISSP, CISM, CISA, CEH, NCSF, CAP).
• Preferred: professional cloud certifications in Amazon and Microsoft Azure.
• Preferred: understanding of FISMA.

Conditions

Onsite only, at a customer site in McLean, Virginia, USA.

Scheduled at 40 hours per week.

Travel of less than 10%.

You must currently hold a Top Secret clearance with SCI access and an active polygraph. No further clearance needs to be obtained.

The likely salary range is $152,113 to $205,799. Actual pay depends on experience, geographic location and possibly contract requirements, and may fall outside this range.

Identity verification uses biometrics and AI. You must be on camera in virtual interviews, your photo may be taken to verify identity, and by proceeding you authorize use of your biometric data for verification and security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• 401(k) with company match, with pre- and post-tax contributions up to IRS annual limits.
• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• Comprehensive health and wellness packages.
• Full flex work weeks where possible.
• Paid vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• Paid education and certifications.
• An internal mobility team to help you manage your career.
• Access to current technology to learn from.
• Total rewards reviewed regularly to stay competitive.