Description Position at VMD Corp
Your Impact to the Mission: The
Senior Cybersecurity Engineer will support the Transportation Security Administration (TSA) Office of Information Technology, Technology Solutions Division (TSD), specifically their mission critical systems.
Your Impact to the Mission: As a
Senior Cybersecurity Engineer you will leverage technical knowledge and experience to support and lead the security initiative for multiple IT projects, programs, and initiatives. You will be responsible for working with a team of security engineers and actively interacting and communicating with various departments, teams, and workgroups to provide hands-on technical cybersecurity support on potential security risks and recommendations. You will be interacting with technical staff to executive staff, adjusting the communication and feedback accordingly.
The
Sr. Cybersecurity Engineer will be responsible for:
- Supporting the response for planned and unplanned security assessments including documentation collection and review, documentation creation and maintenance, and artifact/evidence review and validation.
- Analyzing and investigating potential security threats against technologies in use as well as those planned for future use.
- Performing an ongoing review of industry/government best practices for system security to provide expert technical guidance for translating NIST, DHS, and TSA cybersecurity standards, policies and procedures into actionable tasks.
- Determining the security impact of new technologies or policies on the TSA information security program.
- Developing and presenting recommendations for changes to improve security posture.
- Implementing security improvements as needed for protecting mission critical systems.
- Leveraging existing government-provided security scan tools such as Tenable Security Center, Nessus, DbProtect, Venafi, Burp Suite Pro and others.
- Providing security engineering subject matter expertise in coordination with enterprise architecture and technical review boards.
- Developing and maintaining information security program strategic and tactical goals and objectives and program outreach/communication plans.
- Identifying, developing, and maintaining a performance management program, that includes performance measures, tracking metrics, and trend analysis.
Experience Needed to Be Successful: - 15+ years of work experience in IT and cybersecurity, with a technical background in networking, operating system, and/or software development
- Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification
- Experience with security development lifecycle management, DevSecOps, and CI/CD integration
- Ability to leverage programming languages where feasible such as Java, PHP, C, .NET, Go, or Python
- Experience with various operating systems including Windows, Linux and Unix
- Strong leadership and interpersonal skills to facilitate effective collaboration across a variety of stakeholders
- Demonstrated ability to function independently and define the proper methods & procedures
- Understanding of guiding cybersecurity principles and control guidance
- Effective writing skills to capture issues and recommendations
- Strong customer relationship building ability
Basic Qualifiers: - Education Requirement: Bachelor's degree
- Can Additional Years of Experience Substitute for Degree? Yes
- Required Certification(s): Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
- Minimum Years of Overall Experience: 15+
- Minimum Years of Specific Experience in Field: 5
- Minimum Clearance to Start: Secret
- Work Status Allowable: US Citizenship
The Type of Person That Will Excel: - You are curious, inquisitive, and have demonstrated a constant eagerness to learn through actions.
- You have high attention to detail.
- You demonstrate personal accountability and integrity in all actions.
Travel and Telecommuting: - Travel: Little (less than 10%)
- Telecommute Options: Yes. Hybrid: 2 days onsite one week, 3 days onsite the next. On-call: Required periodically, with annual coverage varying up to 3-4 months
}
