Security Engineer

Responsibilities

• Actively monitor, detect, and respond to cybersecurity threats and incidents within an organization.
• Utilize advanced security tools and technologies, such as Host-Based Security System (HBSS) and Security Information Event Management (SIEM) platforms, to continuously monitor network traffic, identify vulnerabilities, and detect suspicious activities.
• Conduct thorough investigations of security incidents, implement incident response protocols, and coordinate remediation efforts to mitigate potential risks.
• Collaborate with IT teams to enforce security policies, deploy updates, and ensure the overall integrity and confidentiality of information systems.
• Provide expert analysis on emerging threats, recommend proactive security measures, and contribute to the development of robust cybersecurity strategies.
• Play a critical role in maintaining a secure operational environment by ensuring rapid identification and response to cybersecurity threats.
• Scan all equipment on the PSNS and IMF network for vulnerabilities using DoD standard software tools.
• Assist local Systems Administrators in maintaining positive Vulnerability Management (VM) control of systems under their control.
• Assist with the identification, protection, detection, response, and recovery of cybersecurity incidents, and coordinate incident response and reporting processes.
• Aid in the configuration, operation, troubleshooting, and maintenance of endpoint security protection technologies, including Host-Based Security System (HBSS).
• Support the application of Navy Risk Management Framework (RMF) principles and processes to ensure systems comply with DoD and Navy cybersecurity policies and guidelines.
• Support efforts related to obtaining and maintaining Authorization to Operate (ATO) for Navy systems.
• Maintain VM and endpoint compliance, providing on-site support including basic network administration, basic network server administration, and customer support for ship cable maintenance and repair activities at the PNSY, which includes Communication Security (COMSEC) and a majority of End Device Support items.

Qualifications

• Education: Bachelor’s degree at four (4) years of experience, or additional years of experience considered in lieu of degree.
• Required Expertise: Demonstrated experience with the Navy Risk Management Framework (RMF) process and the ability to support the RMF lifecycle to ensure adherence to cybersecurity standards and best practices; Experience in obtaining and maintaining Authorization to Operate (ATO) for Navy systems; Proficiency in utilizing DoD standard software tools to conduct thorough vulnerability scans on network equipment; Experience assisting in the maintenance of positive Vulnerability Management (VM) control and configuring, operating, troubleshooting, and maintaining endpoint security technologies, including Host-Based Security System (HBSS); Skills in supporting the identification, protection, detection, response, and recovery of cybersecurity incidents, and coordinating incident response and reporting processes; Familiarity with configuring and maintaining Security Information Event Management (SIEM) sensor platforms; Capable of working under the direction and supervision of senior personnel, contributing to maintaining VM and endpoint compliance.
• Required Certification: CompTIA Security+
• Required Clearance: Active Secret Clearance
• Desired Certifications: Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)
• Target Salary Range: $120,001 - $160,000