Information Security Engineer/Security Tester

About the role

Synergy ECP is a Service-Disabled Veteran-Owned Small Business (SD(VOSB)) established in July 2007. Headquartered in Columbia, MD, Synergy ECP comprises a team of skilled professionals dedicated to serving the defense, intelligence, and healthcare sectors.

Responsibilities

• Three (3) years of direct experience with an intelligence community or signals intelligence activity.
• Eight (8) years experience integrating information assurance disciplines into the system design, development, integration, and implementation.
• Two (2) years experience with Defense in Depth principles and technology including access/control, authorization, identification and authentication, public key infrastructure, network, and enterprise security architecture.
• Four (4) years experience developing security plans for employing enterprise-wide security architecture.
• Four (4) years experience assessing and auditing network penetration testing, antivirus planning assistance, risk analysis, and incident response.
• Four (4) years experience applying security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resulting security risk analysis.
• Four (4) years experience with the NSA Certification and Accreditation process (NISCAP).
• Three (3) years experience enforcing the design and implementation of trusted relationships among external agency systems and architectures.
• Two (2) years experience in the implementation of cross domain solutions e.g. an information assurance solution that provides the ability to manually and/or automatically access and/or transfer between two or more differing security domains.
• Two (2) years experience developing systems that process information with different classifications and categories that simultaneously permits access by users with different security clearances and denies access to users who lack authorization.
• Two (2) years experience in network security certifications.
• Two (2) years experience in system certifications.
• Five (5) years experience applying of Federal, NSA, intelligence community and DoD Information Security regulations, publications, and policy.
• At least one Information Security related certification (Security+, CISSP, CISM).
• Experience with Nessus in a complex network environment as well as Security Center version 5.X.
• Strong Linux skills.
• Strong understanding of vulnerability assessment and penetration testing.
• Experience tailoring Scan Policy Nessus/Security Center.
• Knowledge of cloud computing platforms.
• Scripting and coding experience a plus.

Requirements

• U.S. Citizenship
• Clearance Required: TS/SCI w/ Full Scope Polygraph