Systems Security Engineer

Bowhead is seeking a Systems Security Engineer (Cybersecurity/Quarantine Release) to support security engineering efforts from an onsite location in Dahlgren, VA. The role focuses on finding and reducing vulnerabilities across systems, networks, and operating environments, with an emphasis on assessments, hardening, and risk-driven remediation.

Working with DoD-aligned tooling and security principles, you will help translate vulnerability and configuration data into practical insights for improving an organization’s risk management posture, including impact and risk assessments and troubleshooting of cyber defense infrastructure anomalies.

Responsibilities

• Perform vulnerability scans and recognize vulnerabilities in security systems.
• Use DoD network analysis tools to identify vulnerabilities (for example, ACAS and HBSS).
• Conduct application vulnerability assessments.
• Identify systemic security issues by analyzing vulnerability and configuration data.
• Share meaningful insights that reflect the context of an organization’s threat environment to strengthen its risk management posture.
• Apply cybersecurity and privacy principles to organizational requirements, including confidentiality, integrity, availability, authentication, and non-repudiation.
• Troubleshoot and diagnose anomalies in cyber defense infrastructure and work through resolution.
• Complete impact/risk assessments.
• Apply host and network access controls (such as an access control list).
• Support network protection against malware using approaches such as NIPS, anti-malware, restricting or preventing external devices, and spam filters.
• Complete other duties as assigned.

Requirements

• High School Diploma required; a bachelor’s degree is highly desired.
• 3 to 5 years of relevant experience required.
• Knowledge of computer networking concepts and protocols, along with network security methodologies.
• Knowledge of network security architecture concepts, including topology, protocols, components, and principles such as defense-in-depth and zero trust.
• Knowledge of basic system, network, and OS hardening techniques.
• Knowledge of Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) tools and applications.
• Knowledge of network protocols including TCP/IP, Dynamic Host Configuration, DNS, and directory services.
• Knowledge of application vulnerabilities.
• Knowledge of system administration and hardening techniques for networks and operating systems.
• Knowledge of operating system concepts across environments such as Unix/Linux, IOS, Android, and Windows.
• Must meet DoD 8570 Information Assurance Technical Level II certification requirements at the time of hire.
• Must currently hold a Top Secret security clearance.
• US Citizenship is required for Top Secret clearance at this location.

Technologies

• ACAS, HBSS, NIPS, anti-malware
• Intrusion Detection System (IDS), Intrusion Prevention System (IPS) tools and applications
• DoD network analysis tools
• TCP/IP, Dynamic Host Configuration, DNS
• Unix/Linux, IOS, Android, Windows
• Virtual Private Network (VPN), encryption
• Access control list
• DoD 8570 Information Assurance Technical Level II certification requirements

Preferred Skills

• Knowledge of cyber threats and vulnerabilities.
• Knowledge of the operational impacts of cybersecurity lapses.
• Knowledge of host/network access control mechanisms (for example, access control list and capabilities list).
• Knowledge of cybersecurity and privacy principles tied to organizational requirements such as confidentiality, integrity, availability, authentication, and non-repudiation.
• Knowledge of network traffic analysis methods.
• Knowledge of VPN security.
• Knowledge of transmission records and jamming techniques that enable undesirable information transmission or prevent installed systems from operating correctly (including Bluetooth, RFID, Infrared Networking, Wi-Fi, paging, cellular, satellite dishes, and VoIP).
• Knowledge of network access, identity, and access management (including public key infrastructure, OAuth, OpenID, SAML, SPML).
• Knowledge of system and application security threats and vulnerabilities such as buffer overflow, mobile code, cross-site scripting, PL/SQL and injection attacks, race conditions, covert channel, replay, return-oriented attacks, and malicious code.
• Knowledge of classes of attacks including passive, active, insider, close-in, and distribution attacks.
• Knowledge of application security risks.

Physical Demands

• Must be able to lift up to 10-20 pounds or more.
• Must be able to stand and walk for prolonged amounts of time.
• Must be able to twist, bend, and squat periodically.

Location: Dahlgren, VA (onsite). Salary: USD 110,000 - 135,000 per year. Minimum experience: 3 years.