5+ years of experience in security engineering and SIEM administration.
Certifications in security and risk management, asset security, and network security.
Strong knowledge of secure configuration management techniques and cybersecurity best practices.
Experience with programming languages such as Python, C, Java, and shell scripting.
Responsibilities
Design hardware and software to meet cybersecurity needs.
Develop cybersecurity products and solutions.
Create system testing and validation procedures.
Implement real-time monitoring dashboards for information systems.
Develop security design documentation for system components.
Perform security reviews to identify architecture gaps.
Ensure system stability and interoperability.
Benefits
Strong written and verbal communication skills.
Knowledge of secure configuration management techniques.
Experience with software development models and engineering principles.
Familiarity with security technologies and SIEM products.
Knowledge of network security architecture concepts.
Full Job Description
ECS is seeking a Mid-level SIEM Engineer to work in our Washginton, DC office.
The position is full-time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.
Position Responsibilities:
Design hardware, operating systems, and software applications to adequately address cybersecurity requirements.
Design and develop cybersecurity or cybersecurity-enabled products.
Develop and direct system testing and validation procedures and documentation.
Develop dashboarding capabilities, utilizing the enterprise SIEM and Enterprise Governance Risk and Compliance (eGRC) solution, for the ISSO's to perform real time monitoring of Agency information systems
Develop detailed security design documentation for component and interface specifications to support system design and development.
Implement security designs for new or existing system(s).
Incorporate cybersecurity vulnerability solutions into system designs (e.g., Cybersecurity Vulnerability Alerts).
Create and track metrics using the dashboard in the SIEM/eGRC solution
Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
Design, develop, integrate, and update system security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation.
Perform security reviews and identify security gaps in architecture.
Trace system requirements to design components and perform gap analysis.
Verify stability, interoperability, portability, and/or scalability of system architecture.
Salary Range: $108,000- $125,000 General Description of Benefits
Strong written and verbal communication skills.
Knowledge of secure configuration management techniques. (e.g., Security Technical Implementation Guides (STIGs), cybersecurity best practices on cisecurity.org).
Knowledge of CRIBL.
Knowledge of software development models (e.g., Waterfall Model, Spiral Model).
Knowledge of software engineering.
Knowledge of structured analysis principles and methods.
Experience designing architectures and frameworks.
Knowledge of system design tools, methods, and techniques, including automated systems analysis and design tools.
Knowledge of the systems engineering process.
Knowledge of Supply Chain Risk Management Practices (NIST SP 800-161)
Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
Experience with Windows, Linux, UNIX, any other major operating systems
Experience with programming in Python, C, Java, Perl, Shell and/or bash shell scripting.
Familiarity with REST API best practices and usage
Familiarity with security technologies (firewalls, IDS/IPS, AV, etc.) and other SIEM products
Certifications/Licenses:
Bachelor's degree or higher
5+ years' experience security engineering experience and SIEM (security incident and event monitoring) administration, deployment, and/or architectural design
Certifications addressing security and risk management, asset security, security engineering, communications and network security, identity and access management, security assessment and testing, security operations, software development security, system security, network infrastructure
Active Public Trust clearance or eligible to obtain a Public Trust clearance
About ECS
ECS is a leading provider of digital solutions and services to the federal government. The company was founded in 2001 by Roy Kapani and has since grown to become a trusted partner to a wide range of government agencies. ECS offers a broad range of services, including cloud computing, cybersecurity, and artificial intelligence. The company has been recognized for its innovative solutions and has won numerous awards, including the AWS Public Sector Partner of the Year award.
