Goldbelt, Inc.
Cyber Security Engineer
Goldbelt, Inc., Arlington, Virginia, United States, 22201
OverviewGoldbelt Nighthawk offers sound solutions in software development and both defensive and proactive cybersecurity. Nighthawk offers an integrated, holistic cybersecurity workforce that is enthusiastic, continuously learning, and progressive. The team is fully committed to implementing dynamic cybersecurity solutions that effectively address the needs of customers. Nighthawk’s flexibility and expertise across the cybersecurity field provides customized solutions to our customer's unique needs.Summary:The Cyber Security Engineer will support the Overseas Buildings Operations (OBO) Information System Security Officer (ISSO). The Cyber Security Engineer is responsible for designing, implementing, and maintaining security measures to protect an organization's information systems and networks. This role plays a critical part in preventing and responding to security incidents by deploying and managing advanced security technologies and ensuring compliance with industry standards.Responsibilities
Essential Job Functions:Enforce department and industry standards, guidelines, and policies for securing windows servers ensuring they have been appropriately applied and configured across all OBO/IRM IT infrastructure (on-Prem and in-Cloud).Enforce department and industry standards, guidelines, and policies for securing Active Directory (AD) objects across all OBO/IRM IT infrastructure (on-Prem and in-Cloud).Provide support for administering and managing the structure of the bureau’s OU security groups and distribution lists.Utilize Department Security Incident and Event Management tools (NetIQ Sentinel, Tenable Nessus, Splunk, and Change Auditor, McAfee Policy Auditor) or the contractor will be required to deploy SIEM tools to conduct daily monitoring, detection, and event log analysis and alerting looking for unauthorized activities across the IT infrastructure.Coordinate and conduct application, windows server, and database vulnerability and compliance scans across all infrastructures.Conduct audit exercises across all environments.Ensure the Information Security section of OBO’s contract language (specifically Section H) sufficiently addresses Federal and Department Cyber Security regulations, guidelines, and procedures for protecting SBU and/or CUI (Controlled Unclassified Information) information at OBO’s Design and Construction contractor sites.Ensure updates to the Information Security section of the contract is updated semi-annually or whenever there is a major change or advancement in Cyber Security policy.Establish a program for the analysis/evaluation of new technologies proposed by these contract firms to ensure their compliance with existing Cyber Security/Information Security policy.Create features and user stories using the SAFe Agile framework within Azure DevOPS.Coach and guide the team through execution of Agile (SAFe) practices and remove impediments that hinder project progress.Lead the Division level DevSecOPS Policies and procedures.Perform other duties as assigned.Qualifications
Necessary Skills and Knowledge:Comprehensive knowledge of secure implementation principles for firewalls, routers, switches, hubs, proxy servers, and security servers.Excellent communication and interpersonal skills.Ability to work collaboratively in a team environment and lead initiatives.Strong analytical and problem-solving skills.Minimum Qualifications:Must possess a Bachelor Degree cybersecurity, computer science, informational technology, or related fields; Additional (4) four years of experience may be substituted for a degree.Minimum Five (5) years of progressive experience in technical experience conducting network, system and application vulnerability and risk assessments, and developing risk mitigation strategies.Strong problem solving and resolution skills.US citizen.Must have a Top Secret clearance.Preferred Qualifications:Relevant cybersecurity certifications such as CISSP, CEH, CompTIA Security+, CISM, or GIAC are highly desired.The salary range for this position is $150,000 to $175,000 annually.Pay and Benefits:At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.
#J-18808-Ljbffr
Essential Job Functions:Enforce department and industry standards, guidelines, and policies for securing windows servers ensuring they have been appropriately applied and configured across all OBO/IRM IT infrastructure (on-Prem and in-Cloud).Enforce department and industry standards, guidelines, and policies for securing Active Directory (AD) objects across all OBO/IRM IT infrastructure (on-Prem and in-Cloud).Provide support for administering and managing the structure of the bureau’s OU security groups and distribution lists.Utilize Department Security Incident and Event Management tools (NetIQ Sentinel, Tenable Nessus, Splunk, and Change Auditor, McAfee Policy Auditor) or the contractor will be required to deploy SIEM tools to conduct daily monitoring, detection, and event log analysis and alerting looking for unauthorized activities across the IT infrastructure.Coordinate and conduct application, windows server, and database vulnerability and compliance scans across all infrastructures.Conduct audit exercises across all environments.Ensure the Information Security section of OBO’s contract language (specifically Section H) sufficiently addresses Federal and Department Cyber Security regulations, guidelines, and procedures for protecting SBU and/or CUI (Controlled Unclassified Information) information at OBO’s Design and Construction contractor sites.Ensure updates to the Information Security section of the contract is updated semi-annually or whenever there is a major change or advancement in Cyber Security policy.Establish a program for the analysis/evaluation of new technologies proposed by these contract firms to ensure their compliance with existing Cyber Security/Information Security policy.Create features and user stories using the SAFe Agile framework within Azure DevOPS.Coach and guide the team through execution of Agile (SAFe) practices and remove impediments that hinder project progress.Lead the Division level DevSecOPS Policies and procedures.Perform other duties as assigned.Qualifications
Necessary Skills and Knowledge:Comprehensive knowledge of secure implementation principles for firewalls, routers, switches, hubs, proxy servers, and security servers.Excellent communication and interpersonal skills.Ability to work collaboratively in a team environment and lead initiatives.Strong analytical and problem-solving skills.Minimum Qualifications:Must possess a Bachelor Degree cybersecurity, computer science, informational technology, or related fields; Additional (4) four years of experience may be substituted for a degree.Minimum Five (5) years of progressive experience in technical experience conducting network, system and application vulnerability and risk assessments, and developing risk mitigation strategies.Strong problem solving and resolution skills.US citizen.Must have a Top Secret clearance.Preferred Qualifications:Relevant cybersecurity certifications such as CISSP, CEH, CompTIA Security+, CISM, or GIAC are highly desired.The salary range for this position is $150,000 to $175,000 annually.Pay and Benefits:At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.
#J-18808-Ljbffr