Senior Security Engineer

Company OverviewBy Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.Position OverviewThis position is for the NCRC Range Modernization (RM) Senior Security Engineer position providing senior-level development, testing, and security support associated with their designated NCRC product scrum teams.ResponsibilitiesVulnerability ManagementImplement patching procedures for multiple Operating Systems (Linux, Windows, VMware, Cisco)Run and review vulnerability scans and STIGsPrioritize vulnerability remediation efforts across endpoints, networks, and applicationsAutomate patching process for multiple Operating Systems (Linux/Windows)Responsible for securing and hardening hardware and software systems.Governance, Risk & ComplianceSupport tracking resolution and milestones for program's Plan of Action and Milestones (POA&M) itemsDevelop and maintain security policies, procedures, and standardsEnsure compliance with relevant standards, directives and regulationsConduct risk assessments and support audit activitiesRemain abreast of emerging technologies, cyber threats and security toolsSecurity Architecture & EngineeringDesign, implement, and manage security solutions (e.g., SIEM, EDR, firewalls, IDS/IPS, IAM, VPN)Evaluate and integrate new security technologies and toolsAdvise ISSO and ISSM on issues related to securing and monitoring classified DoD networksCreation and maintaining of data flow and system boundary diagramsAgile/Scrum processRequired Experience/QualificationsBachelor’s (BS) degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)Security+ CertificationStrong understanding of network protocols, security architecture, and security practicesExperience with Linux-based and Windows-based systemsProficient in scripting (e.g., Python, PowerShell, Bash)Experience with automation tools (e.g., Ansible, Terraform, Chef, Puppet)Understanding of CI/CDIn-depth knowledge of modern threat landscapes, vulnerabilities, mitigation techniques, and security tools and processesFamiliarity with NIST 800-53, NIST 800-171, SOC 2 and/or ISO 27001Ability to write clear and concise cybersecurity guidance, procedures and documentationPreferred Experience/QualificationsDoD RMF security practices and regulationsVirtualization (preferably VMware)Familiarity with open-source security toolsFamiliarity with ACAS, Tenable Security Center, and Tenable NessusSpecial Requirements/Security ClearanceIn accordance with the specifications of a government contract, eligibility for this position mandates U.S. Citizenship status and a minimum SECRET security clearance with the ability to obtain a TOP SECRET The precise security clearance requisites will be detailed in the Government's Task Order.This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. The above is intended to describe the general contents of and requirements for the performance of this job.Benefits OverviewCESI recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:Medical, Dental & Vision CoverageWellness Program401(k) MatchingDisability (Short Term & Long Term)Employee Assistance ProgramLife InsuranceEducation & TrainingGenerous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)Cole Engineering Services, Inc. is an equal opportunity employer. We consider qualified applicants without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, political affiliation, age, marital status, disability, genetic information, veteran status, membership in an employee organization, or any other basis prohibited by federal, state, or local laws.Job SummaryID: 2026-11167# of Openings: 1Category: CyberClearance: TS/SCI