Cybersecurity Engineer - Network Security Tools

Description

The company is hiring a cybersecurity engineer for its Network Security Services Network Defense team.

You will build, deploy, and maintain the cybersecurity tools that defend National Geospatial-Intelligence Agency (NGA) networks.

The work covers the full life of IT security solutions, from design and purchase through rollout, operation, upkeep, and retirement, across several networks at sites worldwide in support of the NGA GEOINT mission.

Responsibilities

• Design, roll out, and deliver defensive cybersecurity tasks or projects for on-premise and cloud systems.
• Install, configure, and keep network security tools running to design specifications, including software installs, updates, core services, and settings.
• Build and keep current network architecture diagrams, asset inventories, and license status for the team's tools.
• Write reports and give verbal briefings to company and government leaders.
• Work with stakeholders to finish tasks and keep customers satisfied.
• Assess emerging network security technologies and report on those that could improve network capacity, speed, and reliability.
• Review configurations and upgrades, and recommend changes that improve performance and standardization in line with industry best practice.
• Apply strong networking knowledge and tools such as tcpdump, traceroute, netstat, and nslookup to diagnose and fix problems.

Requirements

• Active TS/SCI security clearance.
• Ability to obtain and keep a CI polygraph.
• DOD 8570 IAT II certification, such as Security+ or CySA+.
• Ability to obtain and maintain DOD 8570 CSSP Infrastructure Support certification, such as CEH or CySA+.
• Ability to work independently with little direction.
• Bachelor's degree in computer science, information technology, computer engineering, electrical engineering, or a related field.
• 7+ years of technical experience with network security technologies, tools, and techniques.
• 5+ years of experience with large-scale enterprise or global networks.
• Understanding of DoW, DISA, and IC standards and processes.
• Understanding of DoW network architecture.
• Desired: Demonstrated experience implementing and managing NDR and IDS/IPS platforms such as VectraAI, Extrahop, Darktrace, Corelight, Cisco Firepower, and Trellix NX.
• Desired: Demonstrated experience implementing and managing packet broker or network visibility platforms such as Gigamon, Ixia, and Garland.
• Desired: Demonstrated experience implementing and managing packet capture platforms such as NetWitness, Axellio, and Endace.
• Desired: Demonstrated experience implementing and managing email security platforms such as Trellix EX, Cisco Secure Email Gateway, Ironport, Proofpoint, and Abnormal.
• Desired: Expertise in Linux system administration, including scripting and automation.
• Desired: Expertise in configuring system logging, analyzing logs to troubleshoot, and implementing secure networking services.
• Desired: Familiarity with DoW PKI, Kerberos, LDAP, Active Directory, and authentication methods such as SAML and OAuth.

Conditions

Full-time, regular position.

Up to 10% local travel.

Ability to work weekends and evening hours as needed.

Salary depends on factors including location, Federal Government contract labor categories and wage rates, prior experience, specific skills, education, and certifications.

The proposed salary range is $75,200-$158,100.

Benefits

• Healthcare, wellness, and financial benefits.
• Retirement and family support benefits.
• Continuing education and learning resources.
• Flexible time off that you can take as you need it.