AttivaSoft is an IT Service Management Consultancy and Systems integrator that focuses on value, speed of delivery, and high performance technology solutions. Our High Performance IT approach combines people, business process and advanced technology solutions. We are experts that enjoy what we do!  We are looking for a Information Systems Security Engineer for one of our clients in Greenbelt, MD.  This is a new position for an existing contract.   

The Information Systems Security Engineer will work seamlessly with the Chief Security Engineer to conduct security engineering activities, to include:

• Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture for the communications aspects of applications in both a private on premises data centers and public cloud offerings. 
• Works closely with project teams to assist in the migration of systems from their current environment into the hybrid TI infrastructure while ensuring the security and integrity of the system.
• Follows documented technical approaches to assess threats and residual risks, along with specifying the implementations required for the project.
• Utilizes the organization tasking tracking database, framework and application to manage security operations and make the necessary reports based on due dates, assignments, coordination requirements, percent of completion, completion and archival. Devises solutions to operational problems within the capacity and operational limitations of installed equipment. 
• Analyzes Decennial change requests for security impacts and provide recommendations to the 2020 Census TI GPMO.
• Monitors and tracks security-related defects and resolutions; assigns tasks to the appropriate working group or individual. Coordinates and facilitates working groups and integrated process teams to achieve solution.
• Assists in establishing and implementing a Continuous Diagnostics and Mitigation (CDM) capability with integrated security controls.
• Focuses on communications and networking needs between Cloud and on premises Data Centers, and Cloud and Internet (VPN) users
• Works within a Sprint to ensure engineering features and enhancements include security requirements and meet Federal directives. Acts as a bridge between project teams or developers and security personnel, by being able to understand and interface in all areas. Identifies specific areas of concern related to securing sensitive data in a both a cloud and data center environment.
• Provides expertise with Federal Requirements related to special classifications of data especially Title 13 and 26, FISMA, FedRAMP. NIST, etc.

Minimum of 5 years’ experience with the Risk Management Framework (NIST 800-37), Security Controls as described in NIST 800-35, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines.

Minimum of 5 years expertise with one of the following bullets:

• Solid security engineering with one or more of the following security areas and products including Tanium, DLP, SIEM, APT, IDS/IPS, Vormetric, Splunk or other encryption tools, Cloud Security Tools, and Advanced Cybersecurity Tools, and Citrix XenApp, XenDesktop Management and Security, VMware, and NSX Security
• Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines
  
• Experience planning and implementing secure networking practices such as: application segmentation, network segmentation, NAC and other access control testing/validation, updating access control SOPs. Expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Minimum of 3 years’ experience with performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation
• Three (3) years' deep technical understanding of operating systems, network architecture and design, Active Directory (AD) application log consumables, systems design as well as superior knowledge of technical operations process and procedures

Preferred Skills: 

Ability to configure and develop an enterprise SIEM solution including signature tuning, development of correlation rules, reports, and alarms

• Knowledge of encryption, key management and cryptology
• Familiarity with a variety of web application protocols, web services (components including JavaScript, XML, JSON), scripting capabilities (Powershell, Python) software development frameworks, operating systems, and networking technologies. Understanding of various web application frameworks such as ASP.NET, J2EE

Education: Must possess either a Master’s Degree + 12 years’ experience / a Bachelor’s Degree + 14 years’ experience / or an Associates Degree + 16 years’ experience / or a High School Diploma/GED + 18 years' experience

AttivaSoft, LLC is a is an Equal Opportunity Employer and does not discriminate on the basis of race, national origin, religion, color, gender, sexual orientation, age, non-disqualifying physical or mental disability or any other basis covered by law.

For more information, please contact Cindi Mitchell, Director of Human Resources at (410) 715-4446 x100

**Please no third party phone calls, emails or submissions will be considered.