Senior IT Security Engineer (SOC) Job in Washington 20426, District Of Columbia Us
This position is located in our DC, Washington facility
General Dynamics IT has an immediate opening for a Senior IT Security Engineer to join our team in support of a mid-sized federal agency in Washington, DC.
The Security Engineer:
Performs ongoing monitoring and threat analysis
Analyzes logs/traffic
Identifies potential IT security incidents and escalates information to appropriate staff
Assesses threat and vulnerability information from all sources (both internal and external) and promptly applies applicable mitigation techniques initiating indications and warnings
Conducts vulnerability analysis and assessments across the entire enterprise in support of operations and maintenance activities
Develops mitigation and remediation plans as a result of vulnerability assessment findings
Monitors current reports of computer malware to determine when to update protection systems
Bachelor's degree in computer science, engineering or a related discipline, or the equivalent combination of education, technical training or work/military experience; Master's degree is preferred.
10+ years' of information security experience
At least five (5) years of related experience and/or training in the field of IT security monitoring and analysis, cyber threat analysis, and vulnerability analysis
Previous experience in and a proven method for performing 1st level analysis and interpretation of information from SOC systems
Previous experience in and proven methods for incident identification/analysis, escalation procedures, and reduction of false-positives
Demonstrated experience consistent with ISO 20000; ITIL; NIST 800 series, specifically, NIST 800-61 "Computer Incidents Handling Guide" and NIST 800-53 "Recommended
Security Controls for Federal Information Systems;" and any other controls that are applicable to network security monitoring/analysis, event escalation, cyber threat analysis, and vulnerability analysis
Demonstrated experience with and application of open- and closed-source resources within industry
Specific experience in monitoring, evaluating, and interpreting vulnerabilities, CVEs, remedies, mitigation measures, techniques for escalation, social engineering tactics, phishing techniques, and performing vulnerability assessments
Candidate must possess one or more of the following certifcations:
* Certified Information Systems Security Professional (CISSP)
* Systems Security Certified Practitioner (SSCP)
* Certification and Accreditation Professional (CAP)
* Microsoft Certified Systems Engineer: Security (MCSE: Security)
* Cisco Certified Security Professional (CCSP)
* Certified Information Security Manager (CISM)
* Certified Information System Auditor (CISA)
* Certified Information Security Manager (CISM)
* GIAC Security Expert (GSE)
* GIAC Systems and Network Auditor (GSNA)
* GIAC IT Security Audit Essentials (GSAE)
Based on task(s) assigned, state-of-the-art expertise on the hardware, software, and systems in use by the client and in the SOCs, including but not limited to TriGeo SIM, Solarwinds, Tenable vulnerability assessment system, Cisco PIX firewall, MacAfee EPO, and Cisco and Snort IDS/IPS sensors
Customer service skills training