Systems Security Engineer (Cybersecurity/Quarantine Release)

About the role

Bowhead is seeking an experienced Systems Security Engineer (Cybersecurity/Quarantine Release) to join our team in Dahlgren, VA. The ideal candidate will have a strong background in computer networking concepts and protocols, as well as network security methodologies. The Systems Security Engineer (Cybersecurity/Quarantine Release) will be responsible for identifying and mitigating vulnerabilities in security systems, conducting vulnerability scans, and applying system, network, and operating system hardening techniques.

Responsibilities

• Conduct vulnerability scans and recognize vulnerabilities in security systems
• Use DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS)
• Conduct application vulnerability assessments
• Identify systemic security issues based on analysis of vulnerability and configuration data
• Share meaningful insights about the context of an organization’s threat environment to improve its risk management posture
• Apply cybersecurity and privacy principles to organizational requirements (confidentiality, integrity, availability, authentication, non-repudiation)
• Troubleshoot and diagnose cyber defense infrastructure anomalies and work through resolution
• Perform impact/risk assessments
• Apply host/network access controls (e.g., access control lists)
• Use Virtual Private Network (VPN) devices and encryption
• Protect networks against malware (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters)
• Other duties as assigned

Requirements

• High School Diploma required; bachelor's degree highly desired
• Three to five (3–5) years of relevant experience required
• Knowledge of computer networking concepts and protocols, and network security methodologies
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., defense-in-depth, zero trust)
• Knowledge of basic system, network, and OS hardening techniques
• Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services
• Knowledge of application vulnerabilities
• Knowledge of system administration, network, and operating system hardening techniques
• Knowledge of system administration concepts for operating systems such as Unix/Linux, IOS, Android, and Windows
• Must meet DoD 8570 Information Assurance Technical Level II certification requirements at time of hire

Preferred Skills

• Knowledge of cyber threats and vulnerabilities
• Knowledge of specific operational impacts of cybersecurity lapses
• Knowledge of host/network access control mechanisms (e.g., access control list, capabilities list)
• Knowledge of cybersecurity and privacy principles and organizational requirements (confidentiality, integrity, availability, authentication, non-repudiation)
• Knowledge of network traffic analysis methods
• Knowledge of Virtual Private Network (VPN) security
• Knowledge of transmission records (e.g., Bluetooth, RFID, Infrared Networking, Wi-Fi, paging, cellular, satellite dishes, VoIP) and jamming techniques
• Knowledge of network access, identity, and access management (e.g., PKI, OAuth, OpenID, SAML, SPML)
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL injection, race conditions, covert channel, replay, return-oriented attacks, malicious code)
• Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)
• Knowledge of application security risks

Pay

Targeted salary range is $75,000 to $95,000 annually based on qualifications and experience. Bowhead considers factors such as scope and responsibilities of the position, candidate’s work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer.

Physical Demands

• Must be able to lift up to 10–20 pounds or more
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend, and squat periodically

Security Clearance

• Must currently hold a security clearance at the Top Secret level
• US Citizenship is a requirement for Top Secret clearance at this location