Cyber Security Analyst III

Job Description

Description

Providing expert oversight to maintain continuous compliance through monitoring, validating, and enforcing operational security to ensure EDSO's confidentiality, integrity, and availability

Modifying and implementing secure network connectivity between Amazon Web Services and the USMC

Evaluating and remediating potential security risks, where identified

Evaluating and remediating potential cloud, network, host, application, identity, firewall, load-balancing, WAF, and CI/CD pipeline security risk

Supporting DevSecOps pipeline administration, including secure code integration, configuration management, software deployment, vulnerability scanning, dependency scanning, secrets management, and CI/CD security controls

Supporting Cloud and network logging, alerting, monitoring, incident response, vulnerability remediation, and continuous compliance activities

Coordinating with platform engineers, network engineers, system administrators, developers, mission owners, and customer-support personnel to validate cyber security controls; maintain operational security; resolve cyber security incidents; support system changes; and sustain secure, reliable, and available IL6 cloud services

Provides operations and customer support for all services, to include, but not limited to:

Operating System Maintenance

VPC Configuration

Infrastructure as Code Tools

Amazon Web Services (AWS)

SCCA Network Components (Cisco Routers and F5 devices)

SCCA firewall (Palo Alto)

Identity and Access Management - Active Directory (AD)

Multi-Factor Authentication

Intrusion Detection and Intrusion Prevention System (IDS/IPS)

Assured Compliance Assessment Solution (ACAS)

Microsoft Defender

Windows Server Update Services (WSUS)

Online Certificate Status Protocol (OCSP)

#LI-LL1

FILLING THIS POSITION IS CONTINGENT UPON FUNDING

Requirements

BS degree in engineering, physical science, physics, network security, computer science

10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria

Experience with DevSecOps practices, secure CI/CD pipelines, configuration management, infrastructure as code, and secure software-delivery processes

Experience with cloud automation, and infrastructure-as-code tools (Ansible, Terraform, CloudFormation, Lambda)

Experience with Python, JSON

Experience supporting secure cloud networking, network segmentation, routing, firewall policies, and cloud connectivity

Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), continuous monitoring, vulnerability management, and cyber security compliance

Experience developing cyber security documentation, operational procedures, security-control evidence, remediation plans, risk registers, and technical reports

Ability to identify operational cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure

Amazon Web Services (AWS) experience

Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security

Desire to work in a secure lab environment

Holds an CompTIA Security+ or higher certification

Desired Skills

Experience with container security

Experience supporting GitLab security capabilities, including code scanning, dependency scanning, secrets management, runner security, auditing, and CI/CD pipeline controls

Experience with cloud security logging, monitoring, alerting, incident response, threat detection, and security-event analysis

Experience reviewing and validating cloud, network, firewall, WAF, load-balancing, and identity-and-access-management configurations

Network experience

SAFe (Scaled Agile Framework) Experience

Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local)

leadership in Information Technology services

Experience may be concurrent

Clearance Information

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET ELIGIBILITY

Travel Requirements

Travel one week per quarter to Charleston, SC or Stafford, VA

About Us

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

EEO

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.

Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.