Security Engineer

Dunhill Government Solutions is hiring a Security Engineer to evaluate application security across the software development life cycle and to provide security engineering and sustainment support for a federal agency's cyber forensic enterprise network, across existing data center locations, transitional locations and cloud environments.

Responsibilities:

• Evaluate application security in all phases of the software development life cycle
• Work with the team to define application security best practices, perform software architecture and design reviews, and support the identification, interpretation and remediation of vulnerabilities across applications, programming languages and platforms
• Advise on and help maintain and engineer the forensic network infrastructure, hardware and software, throughout its lifecycle
• Use the agency's change-request process and ticketing system to identify priorities and service requests, act on them, and track, update and close tickets
• Document all operating procedures and processes
• Support activities that affect security or availability: change management, configuration of critical equipment, and vulnerability management including patching
• Ensure every change is approved by senior engineering and IT security staff before execution

Required qualifications:

• Bachelor's degree in Computer Science, Engineering or another technical discipline, or equivalent relevant experience
• 5+ years of experience in security engineering
• Ability to work on site in Ashburn, VA (no telework), day shift, core hours 8:30 AM - 5:00 PM, with on-call support

Preferred: Experience maintaining SIEM infrastructure and operating systems that collect and aggregate data sources such as IDS data from network sensors, collection agents, firewalls, proxy servers, DLP, antivirus and vulnerability scanners; technology evaluation; security tool engineering and maintenance; analysis of alternatives; logging capabilities and requirements; data retention and storage requirements; hardware lifecycle management; software maintenance and assurance; configuration management; and LAN/WAN and cloud security solutions.

Compensation: $147,000 - $173,000 per year

US Citizenship (no dual citizenship) and the ability to pass a federal background investigation in order to be granted access to sensitive information.

#cjpost