Senior Network Analyst Ninja

 

Greenbelt, MD location

 

W-2 employee with full benefits, long-term Agency mission critical program that will be active until 2021, Challenging opportunity that manages a task pipeline in an Agile Contracting environment, working with seasoned management and working with National Level Visibility

 

This solid stable disruptive technology firm with Federal and Commercial business is seeking qualified engineers with hands-on expertise across COTS, GOTS, and open source technologies, who possess the requisite security clearances to join our growing organization.

 

As the recent awardee of a five-year program delivering premier system engineering support to a Federal Government customer, this small, technology practitioner is looking for multiple candidates across all experience levels that fit with our customer first culture and a passion for solving hard problems with technologies.   

 

This technology practitioner seeks candidates eager to join an organization that values outcomes over process and tenaciously seeks out the best idea or solution for their customer in a collaborative environment.

 

Do you want to be part of something substantive and growing?

Do you want to be with a firm where the best idea wins, not the most senior idea?

Do you wanted to be empowered to support customers and be treated like an adult?

 

If you answered yes, then this is the opportunity for you!

 

This visionary award-winning Federal and commercial consulting firm founded in 2009, provides subject matter expertise and tailored engineering solutions to over 200 Federal and Commercial clients and has successfully completed over 900 engagements is looking for multiple candidates within four distinct experience levels of Senior Network Analyst to help continue to build a great reputation

Years of Experience: 12 yrs. with a Masters or 14 yrs. with a BS/BA or 16 yrs. with an AA degree

Preferred Certifications: OSCP, CSSLP, GIAC (GPEN), GIAC (GWAPT), GIAC (GXPN), GIAC (GMOB), GIAC (GAWN), GIAC (GPYC), etc., CFSR, CCNP, MCSE, RHCE

The Senior Security Engineer (Software) will work seamlessly with the Chief Security Engineer to conduct security engineering activities, work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture for the communications aspects of applications in both a private on premises data centers and public cloud offerings; Works closely with project teams to assist in the migration of systems from their current environment into the hybrid TI infrastructure while ensuring the security and integrity of the system. Follows documented technical approaches to assess threats and residual risks, along with specifying the implementations required.  Utilizes the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devises solutions to operational problems within the capacity and operational limitations of installed equipment.

A full job description will be provided prior to an interview

You must have acquisition, installation, maintenance, and usage of the Government Enterprise networks. Engineering solutions within multiple Cloud Service Providers, in particular AWS. Operations for Cisco ASA firewalls, routers and switches and the ability to formulate access control lists (ACLs) via the Command Line Interface (CLI). Enterprise level security hardening for Windows, Linux, iOS operating systems and SQL, Oracle, and RDS database solutions in accordance with Center for Internet Security (CIS) and Security Technical Implementation Technical Guides (STIGs) Continuity of operations (COOP) concepts and implementation for network related hardware failures including isolated and major outages. Monitors and controls the performance and status of the network resources. Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines. Implementation PKI within an enterprise. Experience working in AWS via the CLI and management console.  Knowledge and experience configuring Virtual Private Clouds (VPCs) and understanding the service offerings and how to configure them. Ability to automate the development of security controls including firewall rules and policy and IPS policy. Experience with automating server configuration for security including logging, key changes, and system hardening.

 

Required Skills with expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS).  Deep technical understanding of operating systems, network architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures. Expertise in encryption, key management and cryptology. Expertise in Enterprise Architecture Standards such as the Department of Defense Architecture Framework (DODAF), Service-Oriented Architecture (SOA), the Open Group Architecture Framework (TOGAF), and/or the Amazon Web Services (AWS) Well Architected Framework. Expertise in the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines (risk profiling, control selection, control assessment, control monitoring) Expertise in performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation. Expertise in Application Penetration Testing (secure code reviews, fuzzing, reverse engineering, Fortify or similar, IDA Pro). Expertise in Proof of Concept (Exploit) development. Expertise in Secure SDLC (threat modelling, security requirements, secure design, secure implementation, secure testing, secure maintenance). Expertise in Windows and Linux Development Tools. Expertise in Secure Development (Java, C++, C#, Javascript, PHP, HTML, SQL). Expertise in Web Security (all aspects of OWASP Top 10). Expertise in Cloud Security (Infrastructure and Application Layers). Expertise in Mobile Application Security. Expertise in Embedded Device Security. Expertise in Malware Analysis. Expertise in a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (Powershell, Python, BASH) software development frameworks, operating systems, and networking technologies. Understanding of various web application frameworks such as ASP.NET, J2EE

Primary work location will be in Greenbelt, MD at a customer facility.

8:30 – 5 with some flexibility M-F, however, as work requirements dictate, such as for overtime, major business events, prime season for business pursuits and ad hoc mission requirements, the work schedule may deviate.

Competitive salaries from $95,000K to $130k with incredible benefits that include Medical, dental, vision, life insurance, STD/LTD, 401K, tuition aid, bonuses and over 5 weeks of PTO.