Systems Security Engineer
: Job Details :

OverviewSYSTEMS SECURITY ENGINEER (HITS-R):Bowhead seeks a Systems Security Engineer to support the High Performance Computing Modernization Program (HPCMP) Integrated Technical Services -Restricted (HITS-R) contract located in Dayton, OH. Bowhead will provide the High Performance Computing Modernization Program (HPCMP) with technical and professional support elements required for the operation of the HPCMP Office (HPCMPO) in all phases of planning and execution of its mission, including: technical and administrative support in all areas of program activity, program management support, meeting facilities and office environment, to include a complete telecommunications and computer systems capability and full logistical services.The Systems Security Engineer will provide systems engineering expertise in the design, integration, operation, and maintenance of cybersecurity infrastructure and capabilities. They will define and employ documented procedures for sustainable, continued operations of enterprise Computer Network Defense capabilities, including centralized vulnerability/patch management processes for all systems. These highly skilled individuals will work in various capacities alongside Computer Network Defense (CND) Incident Responders and Warning Intelligence Analysts. The System Security Engineer will maintain the establishment of infrastructure services supporting cybersecurity environments such as directory services in support of authentication, networking monitoring services, domain name services, virtual hosting infrastructure, etc. They will support the functionality of an environment designed to foster cybersecurity research, development, and operations.Responsibilities• Develop interface specifications for use within the enclave environments.• Ensure that enclave systems and network designs support the incorporation of DoD-directed vulnerability solutions, e.g. IAVA requirements.• Apply and maintain cybersecurity for systems;• Utilize defense-in-depth strategies and methods to harden systems and networks (e.g. blocking/filtering, IDS/IPS, A/V, logical separation of management traffic, content detonation and automated analysis, and DISA SRG/STIG compliance)• Responsible for interfacing with both cybersecurity operations and project personnel in order to formulate engineering requirements, and seek concurrence in satisfying stated objectives• Maintain a schedule for upcoming software and hardware upgrades and follow procedures for regularly scheduled maintenance and, in the instances necessary, ad hoc or emergency maintenance• Ensure secure backup of systems and data through formally documented backup plan, accurate and up-to-date listing of systems to be backed up, proper storing and labeling of completed backups• Possess the necessary technical skills to lead the overall design, engineering, integration, operation and maintenance of a defense-in-depth strategy for cybersecurity infrastructureQualifications• Must possess BS/A degree in Computer Science or related field.• Must have a CompTIA Security+ CE certificate (IAT Level II) and a Certified Ethical Hacker (CND-IS) certificate prior to starting.• A minimum of five (5) years of Linux and three (3) years' experience with IDS, IPS and Host Based Security Solutions is required.• Experience with tools such as kali, burpsuite professional, writing exploits in python or bash.• Possess the necessary technical skills to lead the overall design, engineering, integration, operation and maintenance of a defense-in-depth strategy for cybersecurity infrastructure.• Intermediate to advanced level skills in Microsoft Office software suite - Word, Excel, Outlook, PowerPoint.• Ability to communicate effectively, interpret regulatory guidance and identified vulnerabilities to a wide audience.• Presentation and strong public speaking skills are required.• Strong interpersonal skills and good judgment with the ability to work alone or as part of a team.Physical Demands:• Must be able to lift up to 25 pounds• Must be able to stand and walk for prolonged amounts of time• Must be able to twist, bend, and squat periodicallySECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret level, may be required to obtain a Top Secret/SCI clearance upon hire. US Citizenship is a requirement for Top Secret clearance at this location.#LI-KC1