Key skills
CISSPFedRAMPATO processesNIST 800-53 controlsAdaptive Capabilities Testing (ACT)Kali LinuxLinuxWindows Operating SystemsStatic code testingDynamic code testingDatabase securityOperating system securityFirewallsIntrusion detection systemsAnti-virus softwareAuthentication systemsLog managementContent filteringNetwork securitySystem monitoring toolsWeb applicationsWeb ServicesService Oriented ArchitecturesNetwork protocolsWeb protocolsCloud Computing Platforms - AWSCloud Computing Platforms - AzureCloud Computing Platforms - Google CloudNessusBurp SuiteZAPOWASPPythonBashPowerShellSplunkAppOmniAWSNetworking technologiesAnalyticsAzureMentoringCommunicationProblem SolvingNetwork Security
About this role
Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. They are seeking a Senior Security Engineer to support the transition and maintenance of required federal program security documentation and security processes, focusing on security operations and vulnerability monitoring.
Responsibilities:
- Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information
- Identify and define system security requirements
- Design computer security architecture and develop detailed cyber security designs
- Prepare and document standard operating procedures and protocols
- Configure and troubleshoot security infrastructure devices
- Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
- Ensure that the company knows as much as possible, as quickly as possible about security incidents
- Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement
- Video documentation of Proof of Concept or Vulnerability Exploitation
- Maintain ATOs and all security documentation, including, but not limited to: SSP, CP, ISRA, TableTop Exercises, and PIA
- Manage Splunk, AppOmni, and AWS integrations to completion
Requirements:
- Ability to obtain a U.S. Federal Position of Trust clearance designation
- Must reside in and be able to perform work in the United States
- Must have lived in the United States for 3 of the last 5 years
- Bachelor's degree in cybersecurity, computer science, engineering, technology, data science, statistics, analytics, or related quantitative and software development field
- Candidate in the DMV area will be required to travel to our Baltimore office (Woodlawn MD) once a week (Tuesday)
- Proven work experience as a system security engineer or information security engineer
- Thorough knowledge of NIST 800-53 controls, ATO processes, and FedRAMP systems
- Required to maintain ATO for systems and perform during annual Adaptive Capabilities Testing (ACT)
- Thorough understanding of the latest security principles, techniques, and protocols
- Experience with Kali, Linux, and Windows Operating Systems
- Knowledge of static and dynamic code testing
- Experience in building and maintaining security systems
- Detailed technical knowledge of database and operating system security
- Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc
- Experience with network security and networking technologies and with system, security, and network monitoring tools
- Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols
- Problem solving skills and ability to work under pressure in a fast-paced environment
- Familiarity with Cloud Computing Platforms (AWS, Azure, Google)
- Proficiency with Nessus, Burp Suite, ZAP, and OWASP
- Writing scripts with Python, Bash, and PowerShell
- Experience with Splunk, AppOmni, and AWS
- Strong analytical, troubleshooting, and problem-solving skills
- Excellent written and verbal communication skills
- Must show appetite for active learning, embracing change and mentoring others in organization
- CISSP
- AWS Security Certification
- Certified Authorization Professional (CAP)
- Certified Ethical Hacker (CEH)
- Certified Network Defense Architect (CNDA)