Cyber Security Threat Engineer

Cyber Security Threat Engineer

Comtech is a woman-owned small business founded in 1998 and headquartered in Reston, VA. We offer IT solutions across the disciplines of program/project management, applications development, infrastructure, Cyber security, and enterprise content/data management services. We have developed our methodologies and processes based on the IT Infrastructure Library (ITIL) v.3 Framework across enterprise infrastructure operations. These methodologies and processes are reinforced through our organization's externally accredited certifications, which include ISO 9001:2008 Quality Management System (QMS), ISO/IEC 20000-1:2011 IT Service Management Systems (SMS, corporate ITIL certification), ISO 27001:2005 Information Security Management System (ISMS), and CMMI-DEV Level 3.

Job Description

Job Title: Cyber Security Engineer Level-3

Location: Washington, DC Area

Duration: Long Term

Deliverables:

• Technical experience in cyber security, information assurance, network security, computer information systems, computer science, or management information systems
• Knowledge and experience with Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Vulnerability Assessment tools and other security tools found in large network environments; along with experience working with Security Information and Event Management (SEIM) solutions
• Understanding of common network services (DNS, web, mail, FTP, etc.), network vulnerabilities, and network attack patterns
• Understanding and familiarity with Security Information and Event Management (SIEM) systems
• Familiarity with intrusion detection / protection, firewalls, and anti-virus systems
• Knowledge and experience of managing network protocols
• Microsoft and Linux hosting and systems Administration experience.

Qualifications

• Cyber Threat Engineer will work on all systems and/or projects within the organization responsible for providing Cyber Security Threat detection utilizing network and host based Computer Security tools, appliances, and end products
• Perform analysis of all security systems log files, review, and keep track of triggered events, research current and future cyber threats, reconcile correlated cyber security events, develop, and modify new and current cyber security correlation rule sets, and operate security equipment and technology
• Document security incidents as identified in the incident response rules and escalate to management as required
• Monitor key security infrastructure elements, identify security events, perform analysis, and initiate response activities
• Perform packet analysis by identifying malformed packets and the payload of the packet
• Integrate security products, including designs for all organizational networks as well as designing, engineering, planning, integrating, configuring, testing, and deploying
• Maintain system baselines and configuration management items, including security event monitoring "policies" in a manner determined by the program management
• Provide documentation and interaction with other analysts and Operations and Maintenance (O&M) personnel to ensure a complete and functioning system that meets requirements
• Perform software testing (patches, other updates)
• Troubleshoot OSI layer and TCP/IP related problems.