Cyber Security Engineer SME with FSP

Cyber Security Engineer SME – TS/SCI with Full Scope Polygraph

Xcelerate Solutions is seeking a highly skilled Cyber Security Engineer to provide mission-critical system support to our Intelligence Community (IC) customer. This role is responsible for protecting the customer’s information systems and networks from potential cyber-attacks. The Cyber Security Engineer– Technical Lead SME will serve in a hands-on “player-coach" capacity, dedicating approximately 75% of time to direct technical engineering, troubleshooting, and implementation work, while providing technical leadership and coordination across the security team. The candidate must display an excellent understanding of technology and utilization of Firewalls (Security Groups), VPNs, Data Loss Prevention (DPS), IDS/IPS, Web-Proxy, Security tools, and Security Audits. Candidate will work directly with Team leads, developers,  operations personnel, and other Technical Leads throughout a DevSecOps life cycle both on policy and technical implementation of technologies. This is not a supervisory management role. Success in this position is measured by individual technical contribution and resolution of complex security issues, in addition to technical leadership impact.



Security Clearance:
Top Secret / SCI with Full Scope Polygraph



Location:
Bethesda, MD 



Responsibilities:

• Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunities to automate repeatable operations tasks.
• Design, configure, implement, troubleshoot, and maintain security technologies such as firewalls (security groups), endpoint protection tools (HBSS/Trellix), SIEM platforms (Splunk),
• Formulate systems and methodologies as well as respond to security related events and assist in remediation efforts of cyber security incidents (system and/or network breaches, malware attacks)
• Participate in change management processes to ensure system changes maintain security compliance and do not introduce new vulnerabilities.
• Conduct routine vulnerability scanning and assessment activities, provide formal and informal reports to technical teams, and track remediation efforts to closure.
• Provide technical leadership and subject matter expertise to the security engineering team while coordinating with peer Technical Leads across infrastructure and application domains to ensure alignment of architecture and security controls.
• Serve as the primary technical escalation point for complex or cross-domain security issues while mentoring junior engineers through collaborative troubleshooting and hands-on technical guidance.

Minimum Requirements:

• Experience implementing and managing Security Information and Event Management (SIEM) tools such as Splunk or similar platforms.
• Experience working with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix, and related defensive security tools.
• Expert with automation (e.g., Ansible, CloudFormation)
• Demonstrated history of personally implementing, troubleshooting, and maintaining security technologies in production environments.
• Proven ability to balance technical leadership responsibilities with significant hands-on engineering work. Strong attention to detail with analytical mind outstanding problem-solving skills
• Monitor security advisories, bulletins, and industry threat intelligence to stay informed of current vulnerabilities, threats, and trends.
• Requires BS degree and 16 or more years of prior relevant experience, or MS degree and 14 or more years of prior relevant experience. To be considered must have an active TS/SCI with polygraph security clearance 

Preferred Qualifications: 

• Experience with additional security tools and processes such as IDS/IPS, VPN, GitHub, GitLab, SonarQube
• Experience with implementing and managing network and application firewalls, virtual private networks, firewalls, web protocols, incident detection, incident response, and forensics activities,
• Experience with Agile software development processes/environments, scripting /programming languages such as Python or PowerShell. (e.g., React), DevOpsSec pipelines and tools
• Familiar with Cloud Computing Technologies and Services (AWS, Oracle, Google)
• Knowledge of potential attack vectors such as XSS, injection, hijacking and social engineering
• Experience with health monitoring tools (SolarWinds) and using STIG viewers/tools to assess compliance with standards
• Experience with database systems, search engines, web applications, Linux Red Hat environments, Windows environment

About Xcelerate Solutions:

Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers! 
 
Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability. 
 
Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.