Senior Cyber Security Engineer - Active Secret Clearance Required

Business Integra is currently seeking a Senior Cyber Security Engineer to provide advisory and technical services leading a team of multiple infrastructures and cybersecurity engineers to research, test, train and implement programs designed to safeguard sensitive information from breaches. The ideal candidate will support activities that span a wide range of topics, including requirements formation, feasibility analysis, technology subject matter expertise, cyber technology awareness, information assurance, technical documentation authoring and analysis of 3rd party technical documentation, and technology roadmaps. The ideal candidate will provide computer network defence and information assurance for unclassified and classified secret IT networks to ensure confidentiality, integrity, and availability of information systems.

• Research, evaluate design, test and implements new security software or devices.
• Implement, enforce, and develop information security policies or security plans for data, internet, software applications, hardware, telecommunications, and computer installations.
• Conduct risk analyses from vulnerability, compliance scans, pen-testing results, or other activity
• monitor and maintain policies on Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS), including Wireless IDS.
• Provide response and support for customer requests for temporary firewall rules and firewall, IDS, and IPS-related issues.
• Support, maintain and patch all cybersecurity systems to include but not limited to Linux and Windows-based operating systems.
• Review and configure system security posture IAW DISA STIG requirements and industry security best practices for system hardening.
• Look for ways to continuously improve information security and assurance with a keen understanding of POAMs, IAVMs and the associated processes to ensure proper threat vulnerability management.
• Create, update and manage POAMs and IAVMs as needed or required.
• Have practical knowledge of network security, systems security (Windows/Linux), firewalls, IDS and IPS, and SIEMs.
• Install, configure, and maintain the DoD Host Based Security System (HBSS) system.
• Install, configure, and maintain the Assured Compliance Assessment Solution (ACAS) system.
• Install, configure, and maintain the DoD Nessus Manager and Nessus Agents on all local computer systems.
• Install, configure, and maintain the DoD PKI infrastructure including CRL downloads and OSCP configuration, including generating and configuration of required system certificates.
• SCAP compliance scans on all DoD computer systems.
• SCAP check listing of all DoD computer systems.
• Track and report on compliance with Communication Tasking Orders (CTOs), Task Order (TASKORD), Operational Orders (OPORD), Information Assurance Vulnerability Alerts (IAVAs) and other security requirements using the Continuous Monitoring and Risk Scoring (CMRS) System.
• Configure and maintain air-gapped and networked secure hosts that facilitate the transfer of information between information systems.
• Maintain existing and create new SOPs in compliance with DoD 8530.01M.

• Bachelor’s degree in Cyber Security or technical discipline
• Secret Clearance is required, TS clearance is preferred.
• Ten (10) or more years of experience performing on Cybersecurity support projects.
• IAM Level II (CAP, CASP+ CE, CISM, CISSP, GSLC, or CCISO) certification required per DoD 8570.01-M guidance for Baseline certifications.
• IAT Level II (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP) certification required per DoD 8570.01-M guidance for baseline certifications.
• Ability to obtain Linux, RedHat, or similar certification based on DoD 8570.01-M guidance
• MCP, MCSA, MCSE, or Microsoft 365 Certified: Enterprise Administrator Expert certification required within three months; Microsoft Certified: Azure Solutions Architect Expert preferred
• Proficient in Windows and Linux operating systems.