About this opportunity
Eastern Mountain Sports lists this Senior Cybersecurity Engineer opportunity in corridor north, Maryland. Review the employer’s description below for duties, qualifications and application requirements.
Job description
As a Vision, Mission, and Driven company, VMD has been delivering information technology solutions to the Federal government in Agile Engineering, Cybersecurity, and Critical Infrastructure Protection since 2002. Our mission has now expanded, and we have merged with Xcelerate Solutions to revolutionize end-to-end enterprise security. Together we are committed to protecting our nation’s citizens, critical infrastructure, and resources.
Why Join VMD Corp?
At VMD, now a part of Xcelerate Solutions, you have the opportunity to thrive in your career and become a Game Changer. The quality and talent of our people is what drives our success. We embrace an employee-first culture and make it a priority to provide professional development opportunities that foster career growth.
We help protect American Citizens and the nation’s most critical infrastructure by working alongside our customers and delivering game changing solutions to strengthen their missions. We believe our passion and commitment to achieve our customers' goals and solve their most critical challenges defines who we are. We don't just dream big, we act on it - through teamwork, dedication, and resilience.
Your Impact to the Mission:
The Senior Cybersecurity Engineer will support the Transportation Security Administration (TSA) Office of Information Technology, Technology Solutions Division (TSD), specifically their mission critical systems.
As aSeniorCybersecurity Engineer you will leverage technical knowledge and experience to support and lead the security initiative for multiple IT projects, programs, and initiatives. You will be responsible for working with a team of security engineers and actively interacting and communicating with various departments, teams, and workgroups to provide hands-on technical cybersecurity support on potential security risks and recommendations. You will be interacting with technical staff to executive staff, adjusting the communication and feedback accordingly.
TheSr.Cybersecurity Engineer will be responsible for:
Supporting the response for planned and unplanned security assessments including documentation collection and review, documentation creation and maintenance, and artifact/evidence review and validation.
Analyzing and investigating potential security threats against technologies in use as well as those planned for future use.
Performing an ongoing review of industry/government best practices for system security to provide expert technical guidance for translating NIST, DHS, and TSA cybersecurity standards, policies and procedures into actionable tasks.
Determining the security impact of new technologies or policies on the TSA information security program.
Developing and presenting recommendations for changes to improve security posture.
Implementing security improvements as needed for protecting mission critical systems.
Leveraging existing government-provided security scan tools such as Tenable Security Center, Nessus,DbProtect, Venafi, Burp Suite Pro and others.
Providing security engineering subject matter expertise in coordination with enterprise architecture and technical review boards.
Developing and maintaining information security program strategic and tactical goals and objectives and program outreach/communication plans.
Identifying, developing, and maintaining a performance management program, that includes performance measures, tracking metrics, and trend analysis.
Experience Needed to Be Successful:
15+ years of work experience in IT and cybersecurity, with a technical background in networking, operating system, and/or software development
Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification
Experience with security development lifecycle management,DevSecOps, and CI/CD integration
Ability to leverage programming languages where feasible such as Java, PHP, C, .NET, Go, or Python
Experience with various operating systems including Windows, Linux and Unix
Strong leadership and interpersonal skills to facilitate effective collaboration across a variety of stakeholders
Demonstrated ability to function independently and define the proper methods & procedures
Understanding of guiding cybersecurity principles and control guidance
Effective writing skills to capture issues and recommendations
Strong customer relationship building ability
Basic Qualifiers:
Education Requirement: Bachelor's degree
Can Additional Years of Experience Substitute for Degree?Yes
Required Certification(s):Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
Minimum Years of Overall Experience:15+
Minimum Years of Specific Experience in Field:5
Minimum Clearance to Start:Secret
Work Status Allowable:US Citizenship
The Type of Person That Will Excel:
You are curious, inquisitive, and have demonstrated a constant eagerness to learn through actions.
You have high attention to detail.
You demonstrate personal accountability and integrity in all actions.
Travel and Telecommuting:
Travel:Little (less than 10%)
Telecommute Options:Yes. Hybrid: 2 days onsite one week, 3 days onsite the next. On-call: Required periodically, with annual coverage varying up to 3-4 months
Xcelerate Solutions and its subsidiaries are Equal Employment Opportunity/Affirmative Action Employers. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability. Xcelerate Solutions maintains a drug-free workplace.
#J-18808-Ljbffr
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.