Senior Security Engineer

Job DescriptionEverforth ECS is seeking a Senior Security Engineer to work in our Washington, DC office.ECS Federal is a leading information security and information technology company in Washington, DC. We are looking to hire a Lead Security Engineer to support a full range of cyber security services on a long-term contract in Washington DC. The position is full time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.Job ResponsibilitiesLead a team of engineers to ensure that deliverables are completed on time and within the acceptable quality standards. Report to management achievements of team as well as performance issues. Work with customer to obtain engineering requirements, manage tasks, and ensure that deliverables are meeting client’s expectations. Design and develop cybersecurity or cybersecurity-enabledDesign hardware, operating systems, and software applications to adequately address cybersecurityDesign or integrate appropriate data backup capabilities into overall system designs and ensure that appropriate technical and procedural processes exist for secure system backups and protected storage of backup data.Develop and direct system testing and validation proceduresDevelop detailed security design documentation for component and interface specifications to support system design and development.Develop Disaster Recovery and Continuity of Operations plans for systems under development and ensure testing prior to systems entering a production environment.Develop specific cybersecurity countermeasures and risk mitigation strategies for systems and/orIdentify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find workarounds for communication protocols that are not interoperable).Identify and prioritize essential system functions or sub-systems required to support essential capabilities or business functions for restoration or recovery after a system failure or during a system recovery event based on overall system requirements for continuity and availability.Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with organization's evaluation and validation requirements.Implement security designs for new or existing system(s).Incorporate cybersecurity vulnerability solutions into system designs (e.g., Cybersecurity Vulnerability Alerts).Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.Design, develop, integrate, and update system security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation.Design to security requirements to ensure requirements are met for all systems and/orDevelop mitigation strategies to address cost, schedule, performance, and securityPerform security reviews and identify security gaps inTrace system requirements to design components and perform gapVerify stability, interoperability, portability, and/or scalability of systemSalary Range: $145,000- $180,000General Description of BenefitsJob RequirementsBachelor’s degree or higherActive Secret Clearance 8+ years’ experience in security engineering in mid to largeCertifications addressing security and risk management, asset security, security engineering, communications and network security, identity and access management, security assessment and testing, security operations, software development security, system security, network infrastructure, access control, cryptography, assessments and audits, and organizational securityStrong written and verbal communicationKnowledge of secure configuration management (e.g., Security Technical Implementation Guides (STIGs), cybersecurity best practices on cisecurity.org).Knowledge of software development models (e.g., Waterfall Model, Spiral Model).Knowledge of softwareKnowledge of structured analysis principles andExperience designing architectures andKnowledge of system design tools, methods, and techniques, including automated systems analysis and design tools.Knowledge of the systems engineeringKnowledge of Supply Chain Risk Management Practices (NIST SP 800-161)Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Job DetailsJob Type: Full-timeCategory: CybersecuritySalaried: Salaried