Cyber Security Engineer 3

Job Summary: Provide cybersecurity engineering support to DoD software application development activities through cybersecurity requirements definition, process enhancements and application security testing activities.

Essential Job Functions:

• Define cybersecurity requirements for software applications to meet program requirements and objectives.
• Provide recommendations to incorporate security engineering practices throughout the system development lifecycle.
• Perform assessments of cybersecurity requirement compliance using manual and automated software analysis tools and methods.
• Perform assessments using adversarial tools, techniques, and methods against network-enabled applications and web applications to identify weaknesses, gaps, and vulnerabilities.
• Propose mitigation and countermeasures to reduce or eliminate software-level threats.
• Directly interface with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle.

Required Skills:

• Experience in software engineering, development and/or systems engineering throughout all phases of the system development lifecycle.
• Systems administration skills, experience with Linux, security settings, services, hardening of systems (STIGs, security policies); any shell scripting or Python a plus.
• Knowledge of threat assessment and solutions to mitigate or eliminate such threats.
• Experience with offensive security tools and adversarial techniques and methods.
• Experience implementing software application solutions to comply with NIST SP 800-53 security controls.
• Formal technical documentation skills.
• Experience working with Cyber Range Environments

Required Education/Experience:

• Bachelor's Degree in Computer Science, Engineering, Cybersecurity, It or related field required.
• Professional and / or military experience may be substituted in lieu of degree.

Required Certifications:

• This position requires certifications necessary to meet IAT II in accordance with DoD 8570.01-M.
• One or more of the following certifications is required immediately of hire:

• GSEC; Security+
• SSCP
• Maintaining required continuing education and certification status is required

Desired Skills:

• An understanding of DoD acquisition processes and relevant cyber security processes, such as the Risk Management Framework (RMF).

Desired Certifications: CISSP, OSCP, GPEN, GWAPT, GSSP, CEH

#ZR

Other Requirements: Please note that pursuant to a government contract, this specific position requires U. S. Citizenship status with a current SECRET security clearance, with the ability to attain a TOP SECRET/SCI clearance. Security Clearance requirements will be specified in the Government's Task Order.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. The above is intended to describe the general contents of and requirements for the performance of this job.

Cole Engineering Services, Inc. is an equal opportunity employer. We consider qualified applicants without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, political affiliation, age, marital status, disability, genetic information, veteran status, membership in an employee organization, or any other basis prohibited by federal, state, or local laws.