Cybersecurity Engineer (ENG04)

About the Role

Castalia Systems is seeking a Cybersecurity Engineer to operate within the Security Engineering domain as part of a larger enterprise engineering effort. You will work daily on a custom, air-gapped Department of Defense IT network, performing advanced support and deploying new capabilities at a sustained rate.

Responsibilities

• Create and present materials to convey concepts and ideas to a wide range of audiences.
• Work primarily onsite in a closed area environment with occasional offsite opportunities.
• Create, follow, and update system documentation, schematics, operational guides, and procedures.
• Interface with other teams to define, determine, and implement cyber risk posture, mitigation, and information assurance across the enterprise IT service portfolio.

Requirements

• U.S. citizenship with an active TS/SCI clearance.
• Typically requires a degree in Science, Technology, Engineering, or Mathematics (STEM) and a minimum of 8 years of prior relevant experience, or an advanced degree in a related field with 5 years of experience, or 12 years of relevant experience in absence of a degree.
• Solid background in Systems Administration using Linux and Windows desktop and server operating systems (Windows 11/Server 2022/RHEL).
• Active DoD 8570 IAT Level II certification (e.g., CISSP and/or Security+) with the ability to maintain it.
• Proficient knowledge of Enterprise Identity Management applications and design, including LDAP (e.g., Active Directory) and PKI.
• Experience with common VMware products (vSphere, vCenter, ESXi) and overall virtualization implementations.

Desired Qualifications

• Broad understanding of traditional and current on-prem enterprise IT systems and their security impacts, including:
  • Identification, Credential, and Access Management (ICAM).
  • Secure enterprise messaging.
  • Enterprise logging ingest.
  • Cyber situational awareness and protection.
  • Endpoint Detection and Response (EDR).
• Experience with various computing hardware and software platforms, including servers, workstations, and COTS software applications.
• Experience maintaining Windows servers and troubleshooting software applications.
• Experience with custom software applications.
• Experience with enterprise firewalls, including knowledge of firewall policies/rulesets.
• Understanding of basic network engineering fundamentals (OSI layers, IP addressing, sub-netting, TCP/IP stack, VLANs, well-known ports, and protocols).
• Knowledge and experience leading or contributing to integration efforts involving Cybersecurity, Risk Management Framework, or Information Assurance.
• Knowledge of scanning hardware and software for compliance and vulnerabilities using tools like Assured Compliance Assessment System (ACAS).
• Understanding of configuring and troubleshooting anti-virus applications (e.g., Trellix).
• Sound foundation in Data Management and Configuration Management principles, processes, and concepts.
• Knowledge of Zero Trust principles.
• Experience configuring and troubleshooting SIEM tools (e.g., Splunk).
• Experience with command-line interfaces and scripting (PowerShell, Bash, etc.).
• Experience with Agile project methodologies and Jira workflows.

Work Environment

• Normal office environment.
• Up to 10% travel may be required.

Benefits

• Medical, dental, and vision coverage.
• 401k matching.
• Generous PTO and paid holidays.
• Professional training opportunities.
• Pet insurance.

About the Company

Castalia Systems is a proven business partner providing mission-critical solutions to the Federal Government. We specialize in securing and managing data, systems engineering, development, and pioneering Artificial Intelligence design and application. Our team leverages vast knowledge of customer needs and relevant technology to deliver successful solutions for every mission.