Work You'll Do

As a PROJECT - Lead Security Engineer II on the Enterprise Security team, you will support cybersecurity operations for the Client's program by administering and sustaining tools used for continuous monitoring, vulnerability management, log analysis, and security operations support.

• Administer Tripwire to support file integrity monitoring, configuration assessment, and cybersecurity control execution.
• Support administration of Splunk, SecurityBridge, and ESS, including configuration, monitoring, reporting, and operational support.
• Perform and coordinate ACAS scans, analyze findings, prioritize vulnerabilities, and track remediation with system owners and technical teams.
• Support system hardening, patch coordination, access reviews, and incident analysis across Windows and Linux environments.
• Maintain documentation, standard operating procedures, Plan of Action and Milestones (POA&M) inputs, and audit evidence in alignment with Department of Defense (DoD), Risk Management Framework (RMF), and program requirements.

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others

The Team

Deloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.

Qualifications

Required:

• Bachelor's degree
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• Active Secret security clearance required with the ability to obtain a Top Secret clearance.
• Ability to travel 25%, on average, based on the work you do and the clients and industries/sectors you serve
• 4+ years of cybersecurity experience, including 2+ years in cloud security.
• 4+ years of experience with IAM, encryption, boundary security, logging, and cloud monitoring.
• 3+ years of experience with AWS
• 2+ years of the following experience:
  • Experience with RMF, NIST 800-53, STIGs, and federal authorization practices.
  • Experience with ACAS/Nessus
  • Experience with Splunk
  • Experience with securing AWS environments, preferably in regulated or government settings.
• CompTIA Security+ CE DoD 8570/8140-compliant baseline cybersecurity certification

Preferred:

• OS / Computing Environment Certifications or Training Certificate of Completion (40+ hours):
  • Tripwire: Windows Server Administration certification/training covering Windows Server 2022, or similar
  • Splunk: CompTIA Linux+ or Red Hat Certified System Administrator (RHCSA), or similar
• CISSP, CASP/SecurityX, CySA, or similar
• Splunk Core Certified User / Power User / Admin
• Experience with AWS GovCloud in a DoW or IC environment.
• Experience with SAP cybersecurity tooling, including SecurityBridge
• Experience with RMF, STIGs, POA&M management, and DoD vulnerability management processes