812212 Cyber Security Engineer $285,000.00

About the role

• Position requires a Top Secret (TS/SCI) Clearance with a Polygraph.
• Cyber security or related IT field.
• Adversarial tactics, techniques, and procedures (TTPs).
• Computer attack methods and system exploitation techniques.
• Cyber security principles for Linux, Windows, virtual platforms, networking, and cloud.
• Network architecture and fundamentals.
• Developing risk management methodologies.
• Analyzing test results to develop risk and threat mitigation plans.
• Market-leading vulnerability management tools, including the ability to deploy, configure, and run these tools.
• Vulnerability concepts and prevalent vulnerability types, such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), path traversals, denial of service (DoS), buffer overflows, command injection, race conditions, open redirects, privilege escalation, authentication bypasses, XML External Entity attacks, and similar.
• Privilege and high/low trust boundaries and what defines a vulnerability vs weakness.
• Vulnerability and risk scoring frameworks and methodologies, such as CVSSv2 and CVSSv3.
• Vulnerability repositories (NVD, CVE MITRE, and VULdb) and exploitation techniques (MITRE ATTACK and DEFEND).
• Web application (OWASP) and OS-level vulnerability categories and documentation.
• Communicating how an attacker would exploit vulnerabilities and the types of attacks they could be used for.
• General threat landscape of an IT network and how vulnerabilities and exploitation of them impact it.
• Patch management and software development lifecycle.
• Security operations, vulnerabilities and exploitation, network security, cloud security, and information security.

Location: McLean VA

Requirements

• Developmental (0-2 years’ experience)
• Full Performance (3-5 years’ experience)
• Senior (6-10 years’ experience)
• Expert (11-15 years’ experience)
• SME (16+ years’ experience)

Benefits

• Outstanding Sal