Security Engineer (Linux Systems Engineer)

We need to output HTML fragment with sections only if content present. Use

for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to extract content. From posting: Overview: includes sponsorship statement, mission, looking for talented experienced systems engineer professional to join Advanced Cyber Initiatives team as a cybersecurity engineer with a job role in Linux systems engineering. Also mentions working with Platform Engineering manager, lead collaboration with InfoSec teams for deployment & maintenance of cybersecurity enterprise applications. That's about the role. So we can put that in

About the role

with

containing that prose. Responsibilities: list of duties. We need to extract bullet points from "Responsibilities" section. Let's parse: Responsibilities Support NFCU in the maintenance of IT and enterprise class security applications and systems Troubleshooting Linux and/or Windows servers operating systems and predominately the enterprise applications running on those servers Deploying, optimizing, and maintaining enterprise security applications, on prem, SaaS, and IaaS Remediate vulnerabilities on Windows and/or Linux systems, ensure the stability and sustainability of supported platforms by monitoring, maintaining, patching, and administering all aspects of those systems Deploying and configuring SaaS enterprise applications Deploying AI, Agentic solutions, and ML/LLM’s solutions to handle modern security threats Contribute to and maintain internal engineering documentation (e.g., tool documentation, lessons learned, procedures, status updates, etc.) Renewing and updating TLS certificates on appliances and enterprise applications Responding to audit and enterprise hardening requests Updating stories and subtasks work in flight Update/speak in Daily Operations briefings Daily ticket queue monitoring, for incidents and work ingestion and assigning as required Responsible for quarterly access reviews On call and after-hours rotation Perform other duties as assigned We need to put these in

• . Qualifications: The posting has "Qualifications" heading then bullet list. Qualifications Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline, or equivalent combination of education and experience. Extensive hands on experience of automating/scripting of server configurations/deployments/etc Extensive hands on experience patching and upgrading Linux and Windows based operating systems, packages, and applications Extensive hands on experience with enterprise high security systems engineering related or similar role required (Understanding of enterprise best practices for security and hardening with a focus on PCI-DSS/NCUA ideal) Experience with AI, Agentic solutions, and ML/LLM’s in practice and/or deployment of technology. Experience scripting in one of the following: Ansible, Python, Bash, PowerShell, Ruby, etc to automate routine tasks Experience & thorough understanding of SSO/SAML/OAUTH integration of enterprise applications Strong understanding and ability to troubleshoot various common Linux operating systems (Centos, Red hat, Ubuntu, and/or Cisco derivative OS’s) OR Strong understanding and ability to troubleshoot various Windows server operating systems Experience working in environments with infrastructure management processes such as change management, problem management, configuration management and project management Hands on Experience in Agile specifically Kanban workflow. Experience using/integrating tools with SIEM’s Experience with large enterprise processes and working a siloed environment where tickets/coordination/detailed change management and control processes are required Knowledge of core network, firewall, routing, switching, load balancing, and proxy principles and troubleshooting related issues from a server deployment/maintenance perspective Desired Qualifications: separate list. Desired Qualifications Experience with Cybersecurity applications Linux based Java/Tomcat COTS web applications in a clustered environment Windows .net based IIS COTS applications in a clustered environment Physical or Virtual appliances with limited linux based OS CLI interfaces Ability to read/understand a packet capture Experience using Jira/Confluence Hours Additional Information: Monday - Friday, Hours are flexible within core office hours of 7:00AM-6:00PM ET Location: 820 Follin Lane, Vienna, VA 221805510 Heritage Oaks Drive, Pensacola, FL 32526141 Security Drive, Winchester, VA 22602 We need to decide if we include Schedule section. The posting gives hours: Monday - Friday, flexible within core office hours 7:00AM-6:00PM ET. That's schedule info. So we can include

  Schedule

  with

  containing that. Pay: Not mentioned. No salary. So we should NOT include Pay section. Benefits: Not explicit benefits listed; there is a generic "About Us" talking about benefits but not specific. The instruction: never create Benefits section unless posting actually states them. The posting does not list specific benefits; only generic statement about benefits. So we should not include Benefits. Skills: Could be derived from qualifications but we already have Qualifications and Desired Qualifications. The instruction: Use headings for sections like Skills only if posting has real specific content. The posting does not have a separate Skills section; we could treat Qualifications as skills but we already have Qualifications heading. So we may not need Skills. About the role: we have. Responsibilities: we have. Qualifications: we have. Desired Qualifications: maybe we could include under Qualifications or separate? The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Desired Qualifications is not in list; but we could incorporate into Qualifications as part of same section, or we could create a separate "Qualifications" and include both required and desired within. Probably better to keep Qualifications heading and include both required and desired as list items, maybe differentiate? But we must preserve all substantive information; we can just list all qualifications (both required and desired) under Qualifications. However the posting separates them; we could keep as separate subheadings? Not allowed because only those headings allowed. Could we add a

  Desired Qualifications

  ? Not in allowed list; but maybe we can still use it? The instruction says use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It implies those are the allowed headings; we should not invent others. So we should fold Desired Qualifications into Qualifications section. Thus Qualifications section will contain both required and desired items. We also have "Overview" which includes sponsorship statement etc. That could be part of About the role. We need to remove boilerplate: sponsorship statement, mission, etc? The sponsorship statement is substantive? It says "Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship." That's substantive info about work authorization. Should we keep? It's not a heading but we can include in About the role paragraph. Also "At Navy Federal, we are passionate about our members--they are our mission." That's fluff but still part of overview. Keep. We need to remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. At the end there is a lot of EEO etc. We must remove all that. Also "About Us" section with many accolades; that is boilerplate? It's about company but not specific to role. Probably should be removed as it's not substantive to the role. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The "About Us" with accolades may be considered boilerplate; but it's not explicitly listed. However it's not specific to the role; we should likely remove it to keep focus. The instruction says preserve ALL substantive information; does "About Us" count as substantive? It's generic marketing; likely not needed. Safer to remove. Also "Hours Additional Information" we already captured schedule. Location: we have multiple locations; we could include in Schedule or maybe a separate paragraph? Not a heading. Could include in Schedule paragraph. Thus final HTML:

  About the role

  Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship. At Navy Federal, we are passionate about our members--they are our mission. We're looking for a talented, experienced systems engineer professional to join our growing Advanced Cyber Initiatives team as a cybersecurity engineer with a job role in Linux systems engineering. The Advanced Cyber Initiatives is looking for a driven professional to help advance the program's strategic vision. You will also have the opportunity to work closely with the Platform Engineering manager and lead the collaboration with Information Security teams for deployment & maintenance of cybersecurity enterprise applications.

  Responsibilities

  • Support NFCU in the maintenance of IT and enterprise class security applications and systems
  • Troubleshooting Linux and/or Windows servers operating systems and predominately the enterprise applications running on those servers
  • Deploying, optimizing, and maintaining enterprise security applications, on prem, SaaS, and IaaS
  • Remediate vulnerabilities on Windows and/or Linux systems, ensure the stability and sustainability of supported platforms by monitoring, maintaining, patching, and administering all aspects of those systems
  • Deploying and configuring SaaS enterprise applications
  • Deploying AI, Agentic solutions, and ML/LLM’s solutions to handle modern security threats
  • Contribute to and maintain internal engineering documentation (e.g., tool documentation, lessons learned, procedures, status updates, etc.)
  • Renewing and updating TLS certificates on appliances and enterprise applications
  • Responding to audit and enterprise hardening requests
  • Updating stories and subtasks work in flight
  • Update/speak in Daily Operations briefings
  • Daily ticket queue monitoring, for incidents and work ingestion and assigning as required
  • Responsible for quarterly access reviews
  • On call and after-hours rotation
  • Perform other duties as assigned

  Qualifications

  • Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline, or equivalent combination of education and experience.
  • Extensive hands on experience of automating/scripting of server configurations/deployments/etc
  • Extensive hands on experience patching and upgrading Linux and Windows based operating systems, packages, and applications
  • Extensive hands on experience with enterprise high security systems engineering related or similar role required (Understanding of enterprise best practices for security and hardening with a focus on PCI-DSS/NCUA ideal)
  • Experience with AI, Agentic solutions, and ML/LLM’s in practice and/or deployment of technology.
  • Experience scripting in one of the following: Ansible, Python, Bash, PowerShell, Ruby, etc to automate routine tasks
  • Experience & thorough understanding of SSO/SAML/OAUTH integration of enterprise applications
  • Strong understanding and ability to troubleshoot various common Linux operating systems (Centos, Red hat, Ubuntu, and/or Cisco derivative OS’s) OR Strong understanding and ability to troubleshoot various Windows server operating systems
  • Experience working in environments with infrastructure management processes such as change management, problem management, configuration management and project management
  • Hands on Experience in Agile specifically Kanban workflow.
  • Experience using/integrating tools with SIEM’s
  • Experience with large enterprise processes and working a siloed environment where tickets/coordination/detailed change management and control processes are required
  • Knowledge of core network, firewall, routing, switching, load balancing, and proxy principles and troubleshooting related issues from a server deployment/maintenance perspective
  • Experience with Cybersecurity