Security Engineer - Vulnerability Management

Job Title: Security Engineer - Vulnerability Management
Location: Washington, DC (5 days a week on-site)
Duration: 3 Months

Salary Range: $55.00 - $60.00/Hour on W2 (Without Benefits).
Applicants must be willing to work on W2.

Clearance Required: Required Public Trust

Position Overview:

• We are seeking a Security Engineer - Vulnerability Manager to support the Department of Transportation's Cybersecurity mission by joining a dedicated team of cybersecurity professionals who collaborate, cooperate, and facilitate maintaining and enhancing the security posture of DOT information systems and infrastructure.
• These information systems and infrastructure support the DOT mission of managing and maintaining United States critical infrastructure (i.e., highways, bridges, roads, etc.).

Top Qualifications, Skills, Experience or Certifications:

• Six (6) years in Cybersecurity or related Information Technology fields, bachelor's and three (5) years or more experience; master's and one (4) year or more experience.
• Experience working with Endpoint Vulnerability Scanning solutions, specifically Tenable Nessus.
• Security+, CISSP, CISM, CISA, GCIH, OSCP, CEH, or similar certification.
• Experience with and understanding of Federal Cybersecurity requirements (i.e., FISMA, NIST 800 series, etc.).
• Solid experience in vulnerability management, risk assessment and mitigation, and comprehensive remediation actions.
• Great communications skills with the capacity to describe vulnerability management concepts to unacquainted individuals.
• Ability to collaboration and coordinate with cross-functional teams.

Job Role Specific Requirements:

• Engage with Federal Leadership and counterparts to identify endpoint vulnerabilities and provide feedback / guidance on remediation actions.
• Engage with system and application administrators to coordination remediation efforts to meet required timelines.
• Develop and enhance vulnerability identification and remediation status tracking and reporting to present cyber related risks.
• Engage with system and application administrators and Federal counterparts to troubleshoot issues associated with endpoint vulnerability scanning.
• Work Cyber related security operations ITSM (ServiceNow) assigned tickets to completion.
• Participate in relevant Cybersecurity and Security Operations (SecOps) meetings.
• Collaborate on and provide feedback to cybersecurity solutions that enhance DOT security posture.

Preferred Skills and Qualifications:

• Familiarity with and foundational understanding of the Vulnerability Management lifecycle, application and technology stacks, cloud-based systems, operating systems, databases, networking, firewalls, Data Loss Prevention, Endpoint Security Software, Network Intrusion Detection and Prevention Systems (IDS/IPS) and host-based IDS and IPS, and general cyber security best practices and industry standards, to include the Federal Information Security Modernization Act, the NIST Risk Management Framework and NIST Cybersecurity Framework.