Vacancy expired!
Description
Job Description:The Government Health and Safety Operation has an opening for a Security Engineer to support a large healthcare contract in Baltimore.Position Objective:- You are responsible for taking the lead on implementing security tools, security tool usage, keeping tools upgraded and configured properly, etc. You will provide oversight and will be the subject matter expert to lower-level Security personnel. The Security Officer is responsible to monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, networks, databases, and Web-based assets.
- Conducting vulnerability assessments and monitoring systems, networks, databases and Web-based assets for potential system breaches.
- Recommending and taking the lead on implementing changes to enhance security systems and prevent unauthorized access.
- Responding to alerts from information security tools. Reports, investigates, and resolves higher level security incidents.
- Responding to security tool outages, degradations in service, tune security rules and alerts, and maintaining security tool dashboards and reporting.
- Researching security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Ensures compliance with regulations and privacy laws.
- Educating and communicating security requirements and procedures to all users and new employees.
- Monitoring processes during the entire lifecycle for its adherence and updating or creating new processes for improvement and minimizing inefficiencies
- Reviewing DevSecOps manual operations and automating processes wherever possible, including permission and configuration changes
- Producing and reviewing security impact analysis (SIA) reports
- Identifying and deploying cybersecurity measures to remediate vulnerabilities and manage risk
- Leading incidence management and root cause analyses
- Coordinating and communicating within the team and with customers
- Striving for continuous improvement and build continuous integration, continuous development, and constant deployment pipeline (CI/CD Pipeline)
- Bachelor's Degree or equivalent in experience in Engineering, Computer Science, or related field. Experience may be substituted in lieu of degree.
- 4+ years working in technical support, DevOps, development, IT consulting or other technology related fields
- 3+ years of experience in AWS cloud data architecture and big data technologies, including EMR, Databricks, Hive, Spark, AWS Glue, Athena, and Redshift
- Intermediate to advanced level of expertise in at least one of the following areas: Windows, RHEL, Solaris, or Networking.
- Experience leading the deployment, installation, and configuration of security tools; to include the role of Project Manager.
- Experience with 4 or more vendor products, to include: Splunk, Tripwire, Nessus (Tenable), FireEye, SourceFire/FirePOWER (Cisco), Websense/Blue Coat/Palo Alto or a similar URL filtering appliance, Trend Micro, and Symantec Endpoint Protection.
- Experience with Security Information and Event Management (SIEM) systems.
- Demonstrated working knowledge of vulnerability assessment and penetration testing tools.
- ANSI 17024 related certification required + a high-level industry certification such as the CISSP, CEH, GIAC, etc.
- Experience with AWS (server & serverless services), Ansible or Terraform, CloudFormation, Python, Jenkins, Git, Security scanning tools (Nessus, BurpSuite, Netsparker, OWASP, etc.), IaC (Infrastructure as Code)
- Must possess strong analytical and problem-solving abilities, and strong critical-thinking skills in complex communication environments.
- Experience with Cloud security preferred