Search Jobs | Dice.com

Job Details

Skills

System Security
DoD
Network Analysis
Risk Management
Regulatory Compliance
Endpoint Protection
Employee Self-service
McAfee
HBSS
Encryption
Malware Analysis
SPAM
Risk Assessment
Systems Engineering
Network Security
Intrusion Detection
IDS
Intrusion Prevention
IPS
Network Protocols
TCP/IP
DNS
Dragon NaturallySpeaking
Directory Services
Hardening
System Administration
Unix
Linux
IOS Development
Android
Microsoft Windows
Operating Systems
Access Control
ACL
Cyber Security
Privacy
Authentication
Virtual Private Network
Bluetooth
RFID
Computer Networking
Information Retrieval
Investor Relations
International Relations
WLAN
Wireless Communication
Cellular
Satellite
Internet
VoIP
Network
Identity Management
PKI
OAuth
SAML
Scripting
SQL
PL/SQL
Distribution
Software Security
Security Clearance
Training

System Security
DoD
Network Analysis
Risk Management
Regulatory Compliance
Endpoint Protection
Employee Self-service
McAfee
HBSS
Encryption
Malware Analysis
SPAM
Risk Assessment
Systems Engineering
Network Security
Intrusion Detection
IDS
Intrusion Prevention
IPS
Network Protocols
TCP/IP
DNS
Dragon NaturallySpeaking
Directory Services
Hardening
System Administration
Unix
Linux
IOS Development
Android
Microsoft Windows
Operating Systems
Access Control
ACL
Cyber Security
Privacy
Authentication
Virtual Private Network
Bluetooth
RFID
Computer Networking
Information Retrieval
Investor Relations
International Relations
WLAN
Wireless Communication
Cellular
Satellite
Internet
VoIP
Network
Identity Management
PKI
OAuth
SAML
Scripting
SQL
PL/SQL
Distribution
Software Security
Security Clearance
Training

Summary

Overview

Systems Security Engineer (Cybersecurity Analyst)

Bowhead is seeking a skilled Systems Security Engineer (Cybersecurity Analyst) to join our team in Dahlgren, VA. The ideal candidate will have a strong background in computer networking concepts and protocols, as well as network security methodologies. The Systems Security Engineer (Cybersecurity Analyst) will be responsible for identifying and mitigating vulnerabilities in security systems, conducting vulnerability scans, and applying system, network, and operating system hardening techniques.

Responsibilities

Key duties to include but are not limited to:

Conducting vulnerability scans and recognizing vulnerabilities in security systems.
Using DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.).
Conducting application vulnerability assessments.
Identifying systemic security issues based on the analysis of vulnerability and configuration data.
Sharing meaningful insights about the context of an organization's threat environment that improve its risk management posture.
Applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Troubleshooting and diagnosing cyber defense infrastructure anomalies and working through resolution.
Performing impact/risk assessments.

Required Skills:

Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
Skill in using DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.).
Skill in system, network, and OS hardening techniques (e.g., remove unnecessary services, password policies, network segmentation, enable logging, least privilege, etc.).
Skill in conducting application vulnerability assessments.
Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
Ability to share meaningful insights about the context of an organization's threat environment that improve its risk management posture.
Ability to cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Tenable Assured Compliance Assessment Solution (ACAS)
Trellix Endpoint Security System (ESS), previously known as McAfee Host Based Security System (HBSS)
Skill in applying host/network access controls (e.g., access control list).
Skill in using Virtual Private Network (VPN) devices and encryption.
Skill in securing network communications.
Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).
Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.
Skill in performing impact/risk assessments.
Skill to develop insights about the context of an organization's threat environment
Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Qualifications

Required:

Bachelor' degree required.
Minimum five (5+) or more years of systems engineering experience
Knowledge of computer networking concepts and protocols, and network security methodologies.
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth & concept of zero trust).
Knowledge of basic system, network, and OS hardening techniques.
Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
Knowledge of application vulnerabilities.
Knowledge of system administration, network, and operating system hardening techniques.
Knowledge of system administration concepts for operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems.

Preferred:

Knowledge of cyber threats and vulnerabilities.
Knowledge of specific operational impacts of cybersecurity lapses.
Knowledge of host/network access control mechanisms (e.g., access control list, capabilities list).
Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Knowledge of network traffic analysis methods.
Knowledge of Virtual Private Network (VPN) security.
Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly.
Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
Knowledge of application security risks.

Targeted salary range is $140,000 to $150,000 annually based on qualifications and experience.

Physical Demands:

Must be able to lift up to 10-25 pounds or more
Must be able to stand and walk for prolonged amounts of time
Must be able to twist, bend and squat periodically

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret level. ship is a requirement for Top Secret clearance at this location.

Please note that the salary information is a general guideline only. Bowhead considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 80183323
Position Id: 46832b85e80d3a2cffceea13fdb219ee
Posted 3 hours ago

Job Details

Skills

System Security
DoD
Network Analysis
Risk Management
Regulatory Compliance
Endpoint Protection
Employee Self-service
McAfee
HBSS
Encryption
Malware Analysis
SPAM
Risk Assessment
Systems Engineering
Network Security
Intrusion Detection
IDS
Intrusion Prevention
IPS
Network Protocols
TCP/IP
DNS
Dragon NaturallySpeaking
Directory Services
Hardening
System Administration
Unix
Linux
IOS Development
Android
Microsoft Windows
Operating Systems
Access Control
ACL
Cyber Security
Privacy
Authentication
Virtual Private Network
Bluetooth
RFID
Computer Networking
Information Retrieval
Investor Relations
International Relations
WLAN
Wireless Communication
Cellular
Satellite
Internet
VoIP
Network
Identity Management
PKI
OAuth
SAML
Scripting
SQL
PL/SQL
Distribution
Software Security
Security Clearance
Training

System Security
DoD
Network Analysis
Risk Management
Regulatory Compliance
Endpoint Protection
Employee Self-service
McAfee
HBSS
Encryption
Malware Analysis
SPAM
Risk Assessment
Systems Engineering
Network Security
Intrusion Detection
IDS
Intrusion Prevention
IPS
Network Protocols
TCP/IP
DNS
Dragon NaturallySpeaking
Directory Services
Hardening
System Administration
Unix
Linux
IOS Development
Android
Microsoft Windows
Operating Systems
Access Control
ACL
Cyber Security
Privacy
Authentication
Virtual Private Network
Bluetooth
RFID
Computer Networking
Information Retrieval
Investor Relations
International Relations
WLAN
Wireless Communication
Cellular
Satellite
Internet
VoIP
Network
Identity Management
PKI
OAuth
SAML
Scripting
SQL
PL/SQL
Distribution
Software Security
Security Clearance
Training

Summary

Conducting vulnerability scans and recognizing vulnerabilities in security systems.
Using DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.).
Conducting application vulnerability assessments.
Identifying systemic security issues based on the analysis of vulnerability and configuration data.
Sharing meaningful insights about the context of an organization's threat environment that improve its risk management posture.
Applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Troubleshooting and diagnosing cyber defense infrastructure anomalies and working through resolution.
Performing impact/risk assessments.

Required Skills:

Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
Skill in using DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.).
Skill in system, network, and OS hardening techniques (e.g., remove unnecessary services, password policies, network segmentation, enable logging, least privilege, etc.).
Skill in conducting application vulnerability assessments.
Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
Ability to share meaningful insights about the context of an organization's threat environment that improve its risk management posture.
Ability to cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Tenable Assured Compliance Assessment Solution (ACAS)
Trellix Endpoint Security System (ESS), previously known as McAfee Host Based Security System (HBSS)
Skill in applying host/network access controls (e.g., access control list).
Skill in using Virtual Private Network (VPN) devices and encryption.
Skill in securing network communications.
Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).
Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.
Skill in performing impact/risk assessments.
Skill to develop insights about the context of an organization's threat environment
Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Qualifications

Required:

Bachelor' degree required.
Minimum five (5+) or more years of systems engineering experience
Knowledge of computer networking concepts and protocols, and network security methodologies.
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth & concept of zero trust).
Knowledge of basic system, network, and OS hardening techniques.
Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
Knowledge of application vulnerabilities.
Knowledge of system administration, network, and operating system hardening techniques.
Knowledge of system administration concepts for operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems.

Preferred:

Knowledge of cyber threats and vulnerabilities.
Knowledge of specific operational impacts of cybersecurity lapses.
Knowledge of host/network access control mechanisms (e.g., access control list, capabilities list).
Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Knowledge of network traffic analysis methods.
Knowledge of Virtual Private Network (VPN) security.
Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly.
Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
Knowledge of application security risks.

Targeted salary range is $140,000 to $150,000 annually based on qualifications and experience.

Physical Demands:

Must be able to lift up to 10-25 pounds or more
Must be able to stand and walk for prolonged amounts of time
Must be able to twist, bend and squat periodically

Dice Id: 80183323
Position Id: 46832b85e80d3a2cffceea13fdb219ee
Posted 3 hours ago

Cybersecurity Systems Engineer - Entry Level

Manassas, Virginia

•

Today

Basic Qualifications Bachelor's degree in Systems Engineering, or a related Science, Engineering or Mathematics field. CLEARANCE REQUIREMENTS: Department of Defense Secret security clearance is preferred at time of hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required. Responsibilities for this Posi

Full-time

USD 77,843.00 - 86,358.00 per year

Systems Security Engineer (Cybersecurity Analyst)

Skills

Summary

Dice Job Match Score™

Similar Jobs

Systems Security Engineer (Cybersecurity Analyst)

Job Details

Skills

Summary

Dice Job Match Score™

Similar Jobs