Cyber Security Engineer

Company: Guidehouse
Location: Centreville
Posted on: June 25, 2022

Job Description:

Overview

Guidehouse is a leading global provider of consulting services to the public and commercial markets with broad capabilities in management, technology, and risk consulting. We help clients address their toughest challenges and navigate significant regulatory pressures with a focus on transformational change, business resiliency, and technology-driven innovation. Across a range of advisory, consulting, outsourcing, and digital services, we create scalable, innovative solutions that prepare our clients for future growth and success. The company has more than 10,000 professionals in over 50 locations globally. Guidehouse is a Veritas Capital portfolio company, led by seasoned professionals with proven and diverse expertise in traditional and emerging technologies, markets, and agenda-setting issues driving national and global economies. For more information, please visit: .
Responsibilities

The Cyber Security Engineer will be a part of the client's Blue Team consisting of specialized cybersecurity professionals that perform intelligence/threat-based security assessments on critical systems, major applications, and networks to identify security risks to brief systems owners of the potential impacts of those risks to their mission. The Blue Team performs unbiased comprehensive assessments that produces actionable security recommendations that are tailored to the assessed environment. The following services are provided by the Blue Team: Identification and Validation of Security Flaws, Network Mapping / Network Analysis, Vulnerability Analysis, Pen-testing network filters and security countermeasures, Threat Hunting, Incident Response, and Forensic Analysis. Candidates for the Cyber Security Engineer should be able to apply and understand a wide range of technical principles, theories and concepts, work under only general direction, provide technical solutions to a wide range of difficult problems, and independently determine and develop an approach to solve problems.
Qualifications

The following skills/experience/knowledge are REQUIRED to be considered for this role:.

• Active Top Secret Clearance with SCI Eligibility required at the time of application
• Bachelor's in computer-related or cyber field with 5-7 years of experience; OR Master's with 3-5 years of experience
• Shall possess one or more of the following certifications:
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Systems Auditor (CISA)
  • SANs GIAC certification (e.g., GPEN or GW APT)
  • Offensive-Security Certified Professional (OSCP)
  • EC-Council Certified Ethical Hacker (CEH) -The following skills/experience/knowledge are PREFERRED to be considered for this role:
    • Law Enforcement Systems and Network experience
    • GCIH Incident Response experience
    • Expert level skills in Data Architecture
    • Deep understanding of Cyber data sets (threat intel vulnerabilities/weaknesses, business context, etc)
    • Strong knowledge of cyber vulnerability assessment practices and risk management and mitigation
    • Ability to identify cyber risks and translate their impact to business leadership
    • Experience performing enterprise level Vulnerability Assessments and identifying mitigation and/or remediation actions
    • Experiencing in identifying and discerning protection needs, and developing and applying security controls and countermeasures for security vulnerabilities and risks
    • Knowledge and experience applying current industry methods/practices for collecting, evaluating, implementing, and disseminating security assessment, monitoring, detection, and remediation data using tools, procedures, and outputs based on standards-based concepts and capabilities
    • Experience recognizing and categorizing vulnerabilities and associated attacks
    • Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)
    • Experience in rapid technology identification, insertion, and evaluation (including market analysis)
    • Ability to serve as the primary liaison between the enterprise architect and the systems security engineers
    • Knowledge of the application firewall concepts and functions (e.g., Single point of authentication/audit/policy enforcement, message scanning for malicious content, data anonymization for PCI and PII compliance, data loss protection scanning, accelerated cryptographic operations, SSL security, REST/JSON processing).
    • Strong understanding of common enterprise technologies (incident tracking tools, SOC Tools, Event management, packet capture analysis, pen test tools)
    • Ability to convey extremely technical concepts to audiences with varying technical understanding
    • Knowledge of cyber defense and information security policies, procedures, and regulations to include cybersecurity (confidentiality, integrity, availability) and privacy principles
    • Proven experience in assessing and evaluating the adequacy of systems and security designs
    • Experience in business continuity, continuity of operations and disaster recovery as applied to designing and building systems and solutions
    • Experience developing functional and technical requirements and leading teams in meeting these requirements on-time, within budget, and successfully meeting customer acceptance
      Additional Requirements
      
      The successful candidate must not be subject to employment restrictions from a former employer (such as a non-compete) that would prevent the candidate from performing the job responsibilities as described.
      Disclaimer
      
      About GuidehouseGuidehouse -is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation. -Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. -If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact -Guidehouse -Recruiting at 1-571-633-1711 or via email at -. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. -Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee. -Rewards and BenefitsGuidehouse -offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. -Benefits include:
      Medical, Rx, Dental & Vision InsurancePersonal and Family Sick Time & Company Paid HolidaysPosition may be eligible for a discretionary variable incentive bonusParental Leave and Adoption Assistance401(k) Retirement PlanBasic Life & Supplemental LifeHealth Savings Account, Dental/Vision & Dependent Care Flexible Spending AccountsShort-Term & Long-Term DisabilityTuition Reimbursement, Personal Development & Learning OpportunitiesSkills Development & CertificationsEmployee Referral ProgramCorporate Sponsored Events & Community OutreachEmergency Back-Up Childcare Program

Keywords: Guidehouse, Arlington , Cyber Security Engineer, Accounting, Auditing , Centreville, Virginia