Talent.com
Senior Security Engineer (Compliance)

Senior Security Engineer (Compliance)

Versar, Inc.Washington, DC, US
30+ days ago
Job type
  • Full-time
Job description

Job Description

Job Description

Position Summary

Versar, Inc., is seeking a Senior Security Engineer (Compliance) to support the Department of Homeland Security’s Enterprise Engineering Division (EED) within the Office of the Chief Information Officer (OCIO). This candidate will be a member of a high functioning team supporting cybersecurity countermeasures to strengthen DHS enterprise and HQ networks, to include the overseeing and providing strategic and tactical direction with security compliance. This candidate will work directly with team of network and security engineers, data center specialists, ISSOs, industry vendors, and DHS stakeholder groups that includes 20+ DHS Components.

This effort is responsible for providing support for the following Homeland Security Enterprise Network (HSEN) services along with Security Engineering Compliance to include :

  • Design and development of cyber security technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide cyber systems and networks.
  • Responsibility for DHS Security ATO and RMF compliance support ensuring systems are documented, security control implementation / documentation, self-inspection (STIG / vulnerability / compliance) auditing and issue remediation.
  • Strong working relationship with ISSOs and technical teams to ensure NIST Compliance and RMF ATO Security Authorization.

Additional Duties / Responsibilities

  • Provide DHS Security Authorization Support
  • Assist and support the SOC Security Authorization Process following National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 including, but not limited to, the following elements :
  • Security Plan

  • Security Risk Assessment
  • Security Controls Assessment
  • Continuity of Operations Plan (COOP)
  • Development of POA&Ms
  • Provide assistance and support to the SOC System ISSO, to document that documents and maintains the SOC Security Authorization documentation in the Information Assurance Compliance System (IACS), conducts NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems assessment, and tracks NOSC Cyber (SOC) POA&Ms.
  • Develop and document a comprehensive COOP which ensures that the Contractor maintains
  • Maintain appropriate NOSC Cyber infrastructure backups, and documents priorities and procedures for re-instantiating critical functions in the event of a failure.
  • Test the DHS NOSC Cyber COOP capabilities in conjunction with internal test procedures and the DHS Information Technology Disaster Recovery Plan.
  • Provide support to Government management by establishing POA&Ms and process for tracking the correction of internal self-assessment and external audit findings relating to security authorization of NOSC operations and activities.
  • Minimum Qualifications / Requirements

  • At least six (6) years of professional experience in an IT Services environment, providing technical support with emphasis on security compliance for federal networks.
  • Prior experience with NIST FIPS Standards, Contingency Plans, Network Infrastructures, Security Impact Analysis, Privacy Impact security Assessments & Analyses, Standard Operating Procedures.
  • U.S. Federal government consulting experience preferred.
  • Must be resourceful in learning a very complex and dynamically changing network
  • Must be able to work independently in fast paced, dynamic environment.
  • Past experience within the Department of Homeland Security or other government agency is preferred.
  • U.S. citizenship required and eligibility for a DHS EoD is required to be considered for this position.
  • Education

  • BS degree in Information Systems, Computer Engineering, Computer Science, or Cyber Security, or equivalent experience
  • Certifications Desired

  • Security Certifications : CISSP, CCSP, CISM, GSLC, CISA, CASP, or equivalent
  • Software / Hardware Desired

  • IBM AppScan, HP WebInspect, Nexpose, Splunk, Nessus, HP Fortify, McAfee SECURE, McAfee Virus Scan, Enterprise, ArcSight Sourcefire, Nagios, Saint, Solarwinds, Remedy, Primavera, Xacta, CSAM
  • #LI-FH1

    Create a job alert for this search

    Senior Security Engineer • Washington, DC, US

    Related jobs
    • Promoted
    FIPS Certified Security Engineer

    FIPS Certified Security Engineer

    VirtualVocationsAlexandria, Virginia, United States
    Full-time
    A company is looking for a Security Engineer, FIPS / CC (Mobile Devices).Key Responsibilities Lead the end-to-end validation process for IT products, including security assessments and documentatio...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Security Software Engineer

    Senior Security Software Engineer

    VirtualVocationsAlexandria, Virginia, United States
    Full-time
    A company is looking for a Senior Security Software Engineer.Key Responsibilities Develop and maintain embedded software with a focus on security Implement and manage security protocols and auth...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Security Controls Assessor

    Senior Security Controls Assessor

    VirtualVocationsAlexandria, Virginia, United States
    Full-time
    A company is looking for a Senior Security Controls Assessor to support a high-visibility federal program.Key Responsibilities Perform security and privacy control assessments for various systems...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Security Engineer - Application Security

    Security Engineer - Application Security

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for a Security Engineer - Application & AI Security (REMOTE).Key Responsibilities Build and deploy security controls across web applications, data pipelines, and AI systems; ...Show moreLast updated: 18 hours ago
    • Promoted
    Security Engineer (Infrastructure), Public Sector

    Security Engineer (Infrastructure), Public Sector

    Scale AI, Inc.Washington, DC, United States
    Full-time
    Scale is a vital part of bringing AI-enabled technologies to the world, from autonomous driving to drones, robots, and large language models. For example, Scale works with the world's top self-drivi...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Compliance Engineer

    Senior Compliance Engineer

    VirtualVocationsArlington, Virginia, United States
    Full-time
    A company is looking for a Senior Compliance Engineer responsible for overseeing product certification processes for electrical and electronic equipment in Mexico and the EU.Key Responsibilities ...Show moreLast updated: 2 days ago
    • Promoted
    • New!
    Senior Security Assurance Analyst

    Senior Security Assurance Analyst

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    Security Assurance Analyst to lead the design, implementation, and optimization of enterprise information security controls and compliance programs. Key Responsibilities Lead and maintain SOC 2 an...Show moreLast updated: 12 hours ago
    • Promoted
    Information Security Engineer

    Information Security Engineer

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for an Information Security Engineer to join their Information Security and Technology team.Key Responsibilities Drive decision-making for platform and application security a...Show moreLast updated: 30+ days ago
    • Promoted
    Lead Security Engineer - Cyber Security

    Lead Security Engineer - Cyber Security

    RelativityBaltimore, MD, United States
    Full-time
    As a Lead Cyber Security Engineer, you will ensure the security of Relativity's network and infrastructure.In this role, the main responsibilities will be to investigate and analyze emerging threat...Show moreLast updated: 30+ days ago
    • Promoted
    Security Engineer

    Security Engineer

    VirtualVocationsWashington, District of Columbia, United States
    Full-time
    A company is looking for a Security Engineer to join their cybersecurity team.Key Responsibilities Administer and maintain identity providers and manage endpoint protection platforms Monitor and...Show moreLast updated: 30+ days ago
    • Promoted
    Advanced Security Engineer - Cyber Security

    Advanced Security Engineer - Cyber Security

    RelativityBaltimore, MD, United States
    Full-time
    As an Advanced Cyber Security Engineer, you will ensure the security of Relativity's network and infrastructure.In this role, the main responsibilities will be to investigate and analyze emerging t...Show moreLast updated: 30+ days ago
    • Promoted
    Principal Security Engineer

    Principal Security Engineer

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for a Principal Security Engineer (IC4).Key Responsibilities Develop and enhance an in-house threat hunting capability to identify and preempt attacks by advanced threat acto...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Security Analyst

    Senior Security Analyst

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for a Senior Security Analyst to monitor and respond to cybersecurity threats.Key Responsibilities Monitor and triage security alerts from various sources and lead incident r...Show moreLast updated: 30+ days ago
    • Promoted
    Staff Security Engineer

    Staff Security Engineer

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for a Staff Security Engineer with expertise in network and cloud security.Key Responsibilities Design, implement, and manage firewall policies and security configurations ac...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Engineer - Sensor Security

    Senior Engineer - Sensor Security

    VirtualVocationsWashington, District of Columbia, United States
    Full-time
    Engineer - Sensor Security Platform (Remote).Key Responsibilities Understand, modify, and assume ownership of complex sensor detections and response capabilities Gain expertise in the core logic...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Threat Research Engineer

    Senior Threat Research Engineer

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for a Senior Threat Research Engineer.Key Responsibilities Research novel cloud-based cyber attacks and report findings Develop threat intelligence based on malware analysis...Show moreLast updated: 1 day ago
    • Promoted
    Senior Security Engineer

    Senior Security Engineer

    VirtualVocationsArlington, Virginia, United States
    Full-time
    A company is looking for a Senior / Staff Security Engineer to enhance and secure its corporate infrastructure.Key Responsibilities Design, implement, and manage security for corporate endpoints an...Show moreLast updated: 30+ days ago
    • Promoted
    FIPS 140 Security Engineer

    FIPS 140 Security Engineer

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a FIPS 140 Security Engineer to support various FIPS 140 validation projects.Key Responsibilities Conduct general security analysis and design work for product architectu...Show moreLast updated: 14 days ago
    • Promoted
    PAM Security Engineer

    PAM Security Engineer

    VirtualVocationsBaltimore, Maryland, United States
    Full-time
    A company is looking for an IAM / PAM Security Engineer to implement cybersecurity strategies for protecting digital identities within a federal agency's IT environment.Key Responsibilities Imple...Show moreLast updated: 1 day ago
    • Promoted
    Senior Cloud Security Engineer

    Senior Cloud Security Engineer

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a Senior Cloud Security Engineer.Key Responsibilities Implement and automate security controls using AWS native tools and third-party solutions Monitor AWS environments ...Show moreLast updated: 30+ days ago