Job description

Position Summary Base-2 Solutions is seeking an Information Systems Security Engineer to provide cybersecurity and security engineering services including system security engineering, cybersecurity risk assessments, and security architecture support for the National Military Command Center (NMCC). This is a full-time onsite day-shift position at the Pentagon/NMCC, including ad-hoc telework. Essential Duties and Responsibilities • Perform or review technical security assessments of computing environments to identify vulnerabilities, non-compliance with cybersecurity standards, and recommend mitigation strategies. • Build, deploy, and patch HBSS Windows and ACAS Red Hat Linux 7.9 and 8 servers. • Build, maintain, and patch all ePO, Security Center, and Nessus servers. • Provide Security Center accounts for Vulnerability Managers to scan devices within ACAS. • Analyze ACAS scan results and remediate vulnerability findings. • Obtain licenses for all HBSS ePO's and Tenable Security Centers. • Obtain HBSS and ACAS kickstart ISOs from DISA. • Build virtual servers, deploy, and patch all McAfee modules via the ePO, and configure McAfee policies for each environment. • STIG HBSS Windows OS and ACAS RHEL servers and configure McAfee policies to comply with benchmarks. • Run SCAP scans on Windows and RHEL servers. • Update RedHat 7.9 and 8 rpms as released and set up Red Hat yum local rpm repositories to patch offline ACAS servers. • Deploy Rogue sensors on each subnet, identify rogue subnets and rogue endpoints. • Troubleshoot Security Center and Nessus scanner issues. • Design, implement, and maintain complex information technology systems, including computing infrastructure, cybersecurity networking rules, and troubleshooting network or other technical issues. • Lead technical solution development from refining customer requirements through design, build, test, and deployment. • Document and communicate technical solutions and analyses leading to recommended courses of action. Required Qualifications • Security+ certification. • 5+ years of experience in systems engineering including design and architecture, or the applicable LCAT education/experience alternative listed below. • Demonstrated capability to identify security risks throughout information system network structures including Operating Systems, hardware, and data transfer protocols. • Effective communication and presentation skills in formal and informal settings. • Strong planning, organizational, and time management skills. • Demonstrated initiative and ability to work independently. Preferred Qualifications • None specified. Required Education and Experience Equivalency • Bachelor's degree in computer science, information technology, or related field with 5+ years of experience. • Master's degree in computer science, information technology, or related field with 3 years of experience. • No degree with 12 years of intensive and progressive experience demonstrating the required proficiency levels related to the task. Required Certifications • Security+ Required Security Clearance • Active Top Secret/SCI Equal Employment Opportunity Base-2 Solutions is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, age, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law, and will not be discriminated against on the basis of disability. Learn more: base-2solutions.com/eeo

Requirements

Must-haves

Essential Duties and Responsibilities
Perform or review technical security assessments of computing environments to identify vulnerabilities, non-compliance with cybersecurity standards, and recommend mitigation strategies.
Build, deploy, and patch HBSS Windows and ACAS Red Hat Linux 7.9 and 8 servers.
Build, maintain, and patch all ePO, Security Center, and Nessus servers.
Provide Security Center accounts for Vulnerability Managers to scan devices within ACAS.
Analyze ACAS scan results and remediate vulnerability findings.
Obtain licenses for all HBSS ePO's and Tenable Security Centers.
Obtain HBSS and ACAS kickstart ISOs from DISA.
Build virtual servers, deploy, and patch all McAfee modules via the ePO, and configure McAfee policies for each environment.
STIG HBSS Windows OS and ACAS RHEL servers and configure McAfee policies to comply with benchmarks.
Run SCAP scans on Windows and RHEL servers.
Update RedHat 7.9 and 8 rpms as released and set up Red Hat yum local rpm repositories to patch offline ACAS servers.
Deploy Rogue sensors on each subnet, identify rogue subnets and rogue endpoints.
Troubleshoot Security Center and Nessus scanner issues.
Design, implement, and maintain complex information technology systems, including computing infrastructure, cybersecurity networking rules, and troubleshooting network or other technical issues.
Lead technical solution development from refining customer requirements through design, build, test, and deployment.
Document and communicate technical solutions and analyses leading to recommended courses of action.
Security+ certification.
5+ years of experience in systems engineering including design and architecture, or the applicable LCAT education/experience alternative listed below.
Demonstrated capability to identify security risks throughout information system network structures including Operating Systems, hardware, and data transfer protocols.
Effective communication and presentation skills in formal and informal settings.
Strong planning, organizational, and time management skills.

Nice-to-haves

None specified.
Active Top Secret/SCI

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: taleo-tbe
Effort: medium