Mid level Information System Security Engineer

Company: Judge Group, Inc.
Location: Colorado Springs
Posted on: April 5, 2021

Job Description:

Location Colorado Springs, CO Description Our client is currently seeking a Cleared Mid level Information System Security Engineer For immediate consideration, email your resume to Devon Owen at Responsibilities include, but are not limited to Apply intermediate-level knowledge of information security principles and practices. Manage and maintain the security integrity of all IT systems and network architectures. Ensure systems are securely operated, maintained, and disposed of in accordance with security policies and practices defined by the customer (federal government agency) and outlined in the security plan. Ensure all system users have the correct authorizations and privileges to perform their jobs and are aware of their security responsibilities while accessing the system. Provide training to system users on preferred security practices. Author risk assessments and support certification and accreditation activities. Participate in system reviews, to include custom, COTS and GOTS software and hardware, and in-house software development, and provide recommendations for securing the systems and software. Other facets of the IT Security Engineer responsibilities include the following oProvide daily, ongoing security oversight of assigned systems, to include the security impact of proposed modifications, additions, and technology refresh evolutions oAdvise users of the security features and procedures used in their ISs oUnderstand system security vulnerabilities and associated threats, and assess the overall security risks to the system. oProvide mitigation recommendations to reduce identified security risks oWork directly with internal IT staff and customer to establish and enforce IT security best practices, protection objectives, process improvements and effective IT security controls oPerform system vulnerability scanning using approved software tools oDemonstrate understanding of software installations, systems monitoring and troubleshooting, account management, and overall efforts to minimize system downtime oUnderstand the administration of critical server infrastructure, including stand-alone and virtual servers, Containerization, server backup and recovery, and platforms such as file servers and web servers Provide support to the administration staff for security-relevant applications, such as IDSIPS and log manager, and associated accounts. Assist in IT security incident response and documentation. Perform regularly scheduled security reviews (e.g., technology, operations and personnel). Serve as an interface to government compliance and policy teams to ensure the system consistently meets the requirements for certification and accreditation. Participate in designing and managing IT Security strategy including both infrastructure and applications. Assist with security and compliance-based projects. Consult with users to determine requirements, and provide security solutions to meet needs. Coordinate projects involving database and security issues and requirements. Basic Qualifications Bachelor's Degree in Computer Science, Information Systems Management, Information Technology or other related discipline 3-5 years' Information Security experience as a Security Engineer supporting development, test and production environments. Experience implementing and enforcing security directives, policies, publications and regulations Experience with System Security Plan content and requirements Experience in IT security certifications (CISSP, CompTIA Security +, CPP) Possess clear understanding of security protocols and standards and have experience with software and security architectures. Ability to design and implement security tests in accordance with stated criteria Experience with security practices of Intranet and Extranet Experience with LinuxUNIX and Windows Operating Systems Experience understanding protocols and standards, such as, SSLTLS, CIFS, HTTPS, DHCP, SMTP, LDAPS and Microsoft DNS Experience in networking concepts and services, such as, VPNs, IPSec, PKI and TCPIP Expertise in accreditation processes, such as Risk Management Framework (RMF), with knowledge of NIST 800.53 standards. Preferred Qualifications 3+ years of experience in IT security field Familiar with security controls for Federal Information Systems Ability to integrate and function as a Security professional team member Ability to work with minimal direction on a variety of, and sometimes ambiguous, requirements Strong communication skills, both oral and written Organized, responsive and highly thorough problem solver Familiar with security controls of Federal Information Systems Contact mailto?subjectMid20level20Information20System20Security20Engineer This job and many more are available through The Judge Group. Find us on the web at www.judge.com httpwww.judge.com

Keywords: Judge Group, Inc., Colorado Springs , Mid level Information System Security Engineer, IT / Software / Systems , Colorado Springs, Colorado