INFORMATION SECURITY ENGINEER

IntellectFaces is seeking an Information Security Engineer for onsite work in Annapolis, MD. This role is built for engineers who want to apply hands-on vulnerability testing, security policy and risk management, and practical secure configuration work across both desktop and server environments.

Responsibilities

• Apply security practices and policies while performing hands-on vulnerability testing using Customer tools.
• Use the Risk Management Framework in support of system risk processes.
• Formulate and assess IT security policy.
• Work across multiple systems and components simultaneously, managing different configurations.
• Adopt and adhere to best practices in day-to-day security activities.
• Plan and prioritize tasking effectively, and communicate clearly about technical options and trade-offs.
• Deliver high-quality work both independently and as part of a team in a fast-moving environment.

Requirements

• Must hold TS/SCI Full Scope Polygraph through MD Customer. The last poly must be within the past 6 years, with no CCAs.
• Demonstrated knowledge and experience with common security tools including Nessus, NMAP, and Wireshark.
• Experience implementing hardware/software security including communication protocols, encryption techniques/tools, and web services.
• Experience with secure configurations for commonly used desktop and server operating systems.
• Strong verbal and written communication skills.
• A solid understanding of security practices and policies, along with hands-on vulnerability testing experience using Customer tools.
• Ability to plan and prioritize tasking and communicate clearly regarding technical options and trade-offs.

Preferred Qualifications

• Five (5) years of experience with Defense in Depth principles/technology (including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture) and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• ISSEP certification.
• CISSP certification.
• Experience developing or implementing integrated security services management processes, including assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation.
• Experience with penetration testing tools.
• Experience with scripting languages.

Minimum Qualifications

• 5+ years of relevant experience.
• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field.

Technologies

• Nessus, NMAP, Wireshark
• Encryption techniques/tools, web services
• Penetration testing tools, scripting languages
• Public key infrastructure
• Network and enterprise security architecture