Information Assurance Security Engineer and Team Lead

Company: Leidos
Location: Englewood
Posted on: April 11, 2021

Job Description:

Job DescriptionDescription Job Description: Leidos is a Fortune 500--- company aimed at embracing and solving some of the world's most pressing challenges. Through science and technology, Leidos makes the world safer, healthier and more efficient. Our Civil Group offers an array of exciting career opportunities for the best IT, energy, logistics and engineering professionals. Leidos is seeking an Information Assurance Security Engineer and Team Lead that will report directly to the Information Assurance Program Manager. The Information Assurance Security Engineer and Team Lead is a hands-on senior member of the Leidos - Antarctic Support Contract (ASC) Information Security (InfoSec) team responsible for leading the application of cybersecurity principles and best practices to proactively protect and maintain the confidentiality, integrity, and availability, of United States Antarctic Program (USAP) data, information systems, and enterprise network. Personnel in this position must have an elevated level of trust, with access to sensitive and private information, which must be handled with integrity and respect in accordance with USAP policies and procedures. The successful candidate should possess both leadership skills and a deep technical background in securing and monitoring Windows and Linux operating systems and applications, Cisco network devices, Palo Alto firewalls, and Fortinet NAC. The candidate must be familiar with managing continuous security monitoring activities, including in-depth vulnerability scans, risk analysis and remediation planning. Essential Responsibilities Include: * Responsible for coordinating with the Information Assurance Program Manager to identify and prioritize Security Engineering team tasking, facilitating team meetings, and managing on-call schedules and playbooks. * Provides mentoring and training for junior staff members. * Leads continuous security monitoring of IT infrastructure and applications, and responding to and tracking down alerts and alarm conditions. * Reviews change control tickets and provides input and approval from and information security perspective. * Leads incident response activities and developing incident response playbook and process improvements. * Performs security and risk review of proposed software solutions. * Collaborates with Data System, Network, and Applications teams to improve overall cybersecurity and achieving operational metrics. * Acts as technical consultant for IT operations, Security Compliance teams and other departments. * Utilizes technical skills to provide technical input, review, and feedback on secure system design for projects and other initiatives. * Drives process improvements in vulnerability scanning, standard security configurations and the overall continuous monitoring landscape. * Researches vulnerabilities and threats, assesses and documents risks, and provides recommendations for remediation or mitigation. * Other security relate duties as assigned. Required Qualifications: * Bachelor's degree in Information Technology or Cybersecurity; equivalent combination of education, experience and certifications will be considered in lieu of a degree. * 8+ years of combined information technology and information security experience. * Current security certification(s) (e.g., CISSP (preferred), CISM, CEH) and IT certification(s) (e.g., MCSE, RHCE, CCNA, CCNP). * Ability to obtain a Public Trust security clearance. Required Skills: * Proficient in applying secure design, implementation, and continuous monitoring to an enterprise IT Infrastructure (network devices, systems, applications, services, virtual environments, LAN/WAN topologies, and protocols). * Strong knowledge in managing Continuous Security Monitoring (CSM) tools, including Security Incident and Event Management (SIEM) systems. * Experience administering vulnerability scanning and determining remediation plans for network, systems, and applications. * Experience developing, implementing and validating secure baseline configurations and polices via Security Technical Implementation Guides (STIGs). * Knowledgeable in performing packet level analysis of network traffic using protocol analyzers * Proficient in administering network and endpoint antimalware tools. * Ability to perform firewall rule analysis and recommendations for rule creation. * Familiar with email messaging and connection security, including anti-spam, anti-phishing, and anti-malware tools. * Ability to deploy and manage Public Key Infrastructure (PKI) and PIV card security. * Expert level knowledge in security incident response processes (Prepare, Detect, Analyze, Contain, Eradicate, and Recover) including forensics analysis and tools. * Experience in the design and implementation of Trusted Internet Connections (TIC), Cloud Access Security Broker (CASB) and securing cloud services (Azure, AWS, etc). * Ability to leverage project management methodologies (e.g., Traditional, Agile, Scrum, Kanban, etc.) in perfor

Keywords: Leidos, Denver , Information Assurance Security Engineer and Team Lead, Engineering , Englewood, Colorado