Systems Security Engineer

Bowhead is hiring a Systems Security Engineer (Cybersecurity/Quarantine Release) onsite in Dahlgren, VA.

Responsibilities

• Run vulnerability scans and identify weaknesses across security systems
• Use DoD network analysis tools (e.g., ACAS, HBSS) to detect vulnerabilities
• Perform application vulnerability assessments
• Analyze vulnerability and configuration data to identify systemic security issues
• Provide insights on the organization’s threat environment to improve risk management posture
• Apply cybersecurity and privacy principles to organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation
• Troubleshoot and diagnose cyber defense infrastructure anomalies and work through resolution
• Conduct impact/risk assessments
• Apply host/network access controls (e.g., access control list)
• Protect networks from malware using controls such as NIPS, anti-malware, and measures to restrict or prevent external devices and reduce unwanted traffic (e.g., spam filters)
• Perform other duties as assigned

Requirements

• High School Diploma required; bachelor’s degree highly desired
• 3-5 years of relevant experience
• Knowledge of computer networking concepts and protocols and network security methodologies
• Knowledge of network security architecture, including topology, protocols, components, and defense-in-depth and zero trust concepts
• Knowledge of basic system, network, and OS hardening techniques
• Knowledge of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) tools and applications
• Knowledge of network protocols including TCP/IP, DHCP (Dynamic Host Configuration), DNS, and directory services
• Knowledge of application vulnerabilities
• Knowledge of system administration and hardening for network and operating systems
• Experience with operating system administration concepts for Unix/Linux, IOS, Android, and Windows
• Must meet DoD 8570 Information Assurance Technical Level II certification requirements at time of hire
• Must currently hold a Top Secret security clearance
• US Citizenship required for Top Secret clearance at this location

Technologies

• ACAS, HBSS
• NIPS, anti-malware
• Intrusion Detection System (IDS), Intrusion Prevention System (IPS)
• TCP/IP, Dynamic Host Configuration, DNS
• Unix/Linux, IOS, Android, Windows
• Virtual Private Network (VPN), encryption
• access control list
• DoD network analysis tools
• DoD 8570 Information Assurance Technical Level II certification requirements

Preferred Skills

• Knowledge of cyber threats and vulnerabilities
• Knowledge of operational impacts of cybersecurity lapses
• Knowledge of host/network access control mechanisms such as access control list and capabilities list
• Knowledge of cybersecurity and privacy principles and organizational requirements (confidentiality, integrity, availability, authentication, non-repudiation)
• Knowledge of network traffic analysis methods
• Knowledge of VPN security
• Knowledge of transmission records (e.g., Bluetooth, RFID, IR, Wi-Fi, paging, cellular, satellite dishes, VoIP) and jamming techniques that enable undesirable transmission or prevent systems from operating correctly
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, OAuth, OpenID, SAML, SPML)
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)
• Knowledge of classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)
• Knowledge of application security risks

Physical Demands

• Ability to lift 10-20 pounds or more
• Ability to stand and walk for prolonged amounts of time
• Ability to twist, bend, and squat periodically

Salary: USD 110,000 - 135,000 per year

Location: Dahlgren, VA (onsite)