System Engineer - Cyber Security

System Engineer – Cyber Security

Gromelski and Associates, Inc. (GAI) partners with prime contractors to provide professional services. Key service areas include Engineering Design and Documentation; Software Development and Testing; System Integration, Testing and Evaluation; Lab Management and Field Installation; Integrated Logistics Support, Training Development and Delivery, Multimedia Support, and Technical System Support.

System Engineer - Cyber Security Job Description:

The cybersecurity systems engineer will leverage mid to senior level knowledge of technology including hands-on experience with networks, operating systems and troubleshooting to identify and develop solution for enhancing the security of all components in the system. Experience working with network and software engineers and the cybersecurity team in understanding known and unknown vulnerabilities and developing initiatives to remediate and mitigate risk through improvements over the technology lifecycle.

Expertise in industry standards for cloud, infrastructure, and network security controls to preserve the confidentiality, integrity and availability of information systems is required. Supports a Linux- based development team and private cloud implementation by assessing the systems for security vulnerabilities and provides direction based findings and planned technology enhancements. Provides security engineering expertise to develop cybersecurity white papers on relevant topics including zero trust, cyber best practices, DoD STIG and industry trends. Hands on penetration testing, vulnerability assessment and testing of proposed solutions and concepts will be conducted by the systems engineer.

SECURITY CLEARANCE: Must have and be able to maintain and keep a DoD Secret Security clearance.

System Engineer – Cyber Security Duties May Include:

· Evaluating requirements, selecting security controls, reviewing installation procedures.

· Identify technological and functional risks inherent in system functionality, system exposure, and data sensitivity to determine the required security controls.

· Tailoring and configuring security controls for specific product use, security assessment plan preparation, test procedure preparation, test execution and reporting.

· Performing security vulnerability assessments and developing solutions based on external assessments and findings for new system and architecture feature and functions.

· Provides support as the technical interface with customers, vendors, suppliers, and internal organization for related issues. Identify issues and recommend solutions.

· Identifying and conducting trade studies on technology and applications, providing recommendations for improving security implementation and enhancements.

System Engineer – Cyber Security Required Skills:

· Experience with Linux (Red Hat) file systems, kernel design, and device-level driver integration.

· Experience with TCP/IP and Network domain knowledge.

· Familiarity with using Bash/Shell to produce hardening scripts and workable knowledge of using utilities such as SCAP and ACAS to identify system vulnerabilities.

· Penetration testing and vulnerability assessments using tools such as burpsuite, Metasploit, tenable, STIG, ACAs, etc.

· Make recommendations for fixes and improvements and test and implement changes in conjunction with network, software and engineering teams.

· Provide guidance on architectural improvements for maturing security posture across systems.

· Familiarity with DISA STIGS and the ability to harden applications (e.g., OS, web server, database, etc.).

· Ability to effectively communicate with the Assessment and Authorization (A&A) authorities regarding security requirements and their implementation method.

System Engineer – Cyber Security Highly Desirable Skills:

· Hands on experience with systems and security engineering. Experience implementing network switches, SIEM monitoring and management (ELK, Splunk)

· Knowledge of security tools (Metasploit, Burpsuite, Metasploit, CobaltStrike)

· Experience with cloud systems, especially Platform as a Service (PaaS) (Kubernetes, Docker, orchestration authorization and authentication, etc.)

· Experience working in an Agile/Sprint release planning environment including depth of understanding of providing impact analysis on testing as Sprint and releases are introduced to the integration environment.

· Existing certifications (e.g., Security+, CEH, Network+, CISSP, etc.).

System Engineer – Cyber Security Additional Requirements:

· Bachelor’s degree in Computer Science/Cyber Security and three or more years of cybersecurity experience (or equivalent combination of education and experience).

· Candidate must have an active DoD Secret level security clearance to begin work.

· Proactive/self-starter. Task driven with ability to work independently.

· Team player that takes ownership and develops relationships that fosters team success.

Job: Full-Time Employee, 40 hours/week

Benefits: We offer a competitive benefit package.
Click here Careers | GAI (e-gai.com) for more information.

Rate: Negotiable

Start Date: Negotiable

Job Location: Manassas, VA

Gromelski & Associates is a proud Equal Opportunity / Affirmative Action employer. Equal Opportunity Employer/Minority/ Female/Disability/Veteran. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender identity or expression, genetic information, age, or any other basis protected by law, ordinance, or regulation.