Cyber Security Engineer

$96,600 - $128,750/Yr

Scientific Research Corporation - San Diego, CA

Full-time - Mid Level

San Diego, CA

Professional, Scientific, and Technical Services

About the position

The Cyber Security Engineer position at Scientific Research Corporation involves applying advanced security principles to protect IT systems and networks, particularly in compliance with DoD standards. The role requires a strong understanding of security controls, vulnerability scanning, and cloud environments, with a focus on ensuring the integrity and availability of systems. The engineer will work collaboratively with cross-domain teams to implement security measures and provide recommendations for risk mitigation.

Responsibilities

• Applying DoD Security Technical Implementation Guide (STIG) to secure clients and servers.
• Applying SELinux, F5, and MDE on software pipeline applications and providing recommendations for mitigations or risk reports.
• Providing cyber engineering recommendations to comply with ACAS and CeDAR findings and executing mitigations when required.
• Managing security assessments of systems and system components using industry-standard automated vulnerability scanning tools.
• Performing daily system monitoring, verifying the integrity and availability of all hardware, Linux and Windows server resources, systems, and key processes.
• Applying standard industry best practices to evaluate, design, and upgrade enterprise and desktop technologies and configurations.
• Utilizing knowledge of DoD 8500 Series Policies and NIST Special Publication (SP) 800-53.
• Installing, modifying, and maintaining systems, network elements, and utility software on virtualized servers.
• Performing scheduled network tasks, updating anti-virus definition files, and providing user support.
• Maintaining current knowledge of relevant technologies and performing technology research/evaluation.

Requirements

• In-depth knowledge of NIST and FIPS security controls, DoD STIGs, IAVM tracking, and CNSS standards.
• 2+ years of experience in applying Cyber Security principles in Cloud environments, such as AWS and Azure.
• Experience working with two or more development components: GIT, Fortify, SonarQube, Chef, Docker, Podman, OpenShift, Kubernetes, OKTA, and F5 APM.
• 2+ years of experience with DoD security implementation (e.g. STIG).
• 2+ years of experience implementing security tools including HBSS & ACAS.
• 1+ year of experience utilizing scanning tools such as Tenable Nessus and SCAP.
• 2+ years experience with Linux infrastructure (Linux+ or LPI certs desired).
• 1+ years experience with SELinux, troubleshooting and monitoring logs.
• Experience installing and troubleshooting Microsoft Defender for Endpoint (MDE).
• Security+, IAT2 level (CASP+ or CISSP preferred).
• Experience administering servers, backup operations, and systems monitoring in complex network server environments.

Nice-to-haves

• Associates or Bachelors degree in cyber security or info systems desired.
• Ability to work and advise multiple cross-domain teams, manage conflict, and communicate both technically and to a layman.
• 1 year of experience with DEVSECOPS Principles.
• Familiarity with managing, monitoring, and troubleshooting Linux infrastructure and networks.
• System administration experience in Red Hat Enterprise Linux (RHEL) or VMware products.
• Experience managing/administering web server architecture including Apache Tomcat on a RHEL O/S.
• Experience with Data Center migrations, server upgrades, O/S and firmware patching.
• Experience with web technologies such as HTML4/5, XML, SOAP and SOAPUI.
• Experience with middleware technologies Java runtime, and/or .NET runtime.
• Experience using configuration management systems such as GIT, Apache SVN, or AWS CodeCommit.
• Experience with network analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor.
• Experience with EMASS and RMF lifecycle.
• Self-starter that requires minimal direction and supervision; open to new ideas, and comfortable working in a large, dynamic organization.
• Strong verbal and written communication skills, ability to thrive in a diverse, fast-changing environment.
• Experience being part of an Agile or Extreme Programming development team.
• ACAS training certificate strongly desired.

Benefits

• Medical, dental, and vision plans.
• 401(k) with a company match.
• Life insurance.
• Vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually.
• 11 paid holidays.
• Tuition reimbursement.
• Work environment that encourages excellence.