Systems Security Engineer (Cybersecurity Analyst)

Bowhead is seeking a Systems Security Engineer (Cybersecurity Analyst) in Dahlgren, VA (onsite) to support vulnerability identification and mitigation activities across security systems. This role focuses on scanning, hardening, risk evaluation, and troubleshooting to address anomalies in cyber defense infrastructure.

Responsibilities

• Perform vulnerability scans and identify vulnerabilities in security systems.
• Use DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.).
• Conduct application vulnerability assessments.
• Identify systemic security issues based on analysis of vulnerability and configuration data.
• Provide meaningful insights into the organization’s threat environment to improve risk management posture.
• Apply cybersecurity and privacy principles to organizational requirements related to confidentiality, integrity, availability, authentication, and non-repudiation.
• Troubleshoot and diagnose cyber defense infrastructure anomalies and work through resolution.
• Perform impact and risk assessments.

Required Qualifications

• Bachelor’s degree required.
• Minimum five (5+) or more years of systems engineering experience.
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of network security architecture concepts, including topology, protocols, components, and principles (including defense-in-depth and concept of zero trust).
• Knowledge of basic system, network, and OS hardening techniques.
• Knowledge of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) tools and applications.
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, DNS, and directory services.
• Knowledge of application vulnerabilities.
• Knowledge of system administration, network, and operating system hardening techniques.
• Knowledge of system administration concepts for operating systems including Unix/Linux, IOS, Android, and Windows operating systems.
• Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
• Skill in using DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.).
• Skill in system, network, and OS hardening techniques (including removing unnecessary services, password policies, network segmentation, enabling logging, and least privilege).
• Skill in conducting application vulnerability assessments.
• Ability to identify systemic security issues based on vulnerability and configuration data.
• Ability to share insights about the threat environment to improve risk management posture.
• Ability to apply cybersecurity and privacy principles to organizational requirements (confidentiality, integrity, availability, authentication, and non-repudiation).

Tools, Platforms, and Security Knowledge

• Tenable Assured Compliance Assessment Solution (ACAS).
• Trellix Endpoint Security System (ESS), previously known as McAfee Host Based Security System (HBSS).
• Knowledge and skill applying host/network access controls (e.g., access control list).
• Knowledge of VPN devices and encryption.
• Skill in securing network communications and protecting networks against malware (including NIPS, anti-malware, restrict/prevent external devices, and spam filters).
• Knowledge of network traffic analysis methods.
• Knowledge of VPN security.
• Knowledge of transmission records (including Bluetooth, RFID, Infrared Networking, Wi-Fi, paging, cellular, satellite dishes, and VoIP) and jamming techniques that enable undesirable transmission or prevent installed systems from operating correctly.
• Knowledge of identity and access management (including public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of system and application security threats and vulnerabilities (including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channels, replay, and return-oriented attacks).
• Knowledge of different classes of attacks (including passive, active, insider, close-in, distribution attacks).
• Knowledge of application security risks.

Clearance Requirements

• Must currently hold a security clearance at the Top Secret level.
• US Citizenship is required for Top Secret clearance at this location.

Physical Demands

• Must be able to lift up to 10-25 pounds or more.
• Must be able to stand and walk for prolonged amounts of time.
• Must be able to twist, bend, and squat periodically.

Location and Salary

• Location: Dahlgren, VA (onsite)
• Salary Range: USD 140,000 - 150,000 per year, based on qualifications and experience

Key Technologies

• ACAS
• HBSS
• Trellix Endpoint Security System (ESS)
• McAfee Host Based Security System (HBSS)
• IDS, IPS
• TCP/IP, Dynamic Host Configuration, DNS
• Unix/Linux, IOS, Android, Windows
• VPN, encryption
• NIPS, anti-malware, spam filters
• Access control list
• Bluetooth, RFID, Infrared Networking (IR), Wi-Fi, paging, cellular, satellite dishes, VoIP
• Jamming techniques
• Public key infrastructure, Oauth, OpenID, SAML, SPML
• Buffer overflow, mobile code, cross-site scripting, PL/SQL (including Procedural Language/Structured Query Language [PL/SQL]), return-oriented attacks