Digiflight, Inc. has an opportunity for a Security Engineer to support a dynamic DevSecOps program operating in a SAFe Agile framework. She/he shall perform technical market research and analysis, and make recommendations of key technological, interface, service, security, and cyber issues likely to impact development and sustainment efforts. The Security Engineer will collaborate and provide inputs that support the solution engineering, planning, development, maintenance of architecture artifacts and security centric and program related documents required to support successful Assessment and Authorization (A&A) efforts required for Authorizations to Operate (ATOs). She/he will work with Information Systems Security Officials (ISSOs) and Information Systems Security Engineers (ISSEs) to provide user interface services across the functional capability areas.

Primary Responsibilities

a) Manages and executes security engineering activities during the analysis, design, development, and sustainment phases

b) Interfaces with the government as the lead for designing security related capabilities for each project

c) Analyze the security of the pipelines, applications, and services to achieve release and deployment and provides integration and implementation of security solutions and security features for system architectures

d) Defines holistic cloud security strategy and implement cloud orchestration tools and solutions to meet cloud security architecture requirements, policies, and procedures

e) Implements, maintains, and improves existing industry best practices of NIST security controls such as identity and access management, IDS/IPS, log analytics, encryption and data security

f) Resolves and mitigates vulnerabilities, design security functions, and provides evidence-based reasoning to substantiate claims for trustworthy and secure work products

g) Work with developers, IT management, and other business stakeholders to gain an understanding of business security requirements for critical systems and sensitive data.

h) Communicate security vulnerability reports and trends to ensure appropriate corrective action is taken.

i) Develop, implement, communicate, and enforce security policies and/or processes for data, software applications, and cloud infrastructure.

j) Strong technical, analytical, and interpersonal skills. Self-motivation and ability to work independently.

k) Superior attention to detail with excellent written and verbal communication, problem solving, researching and follow-up skills

Basic Qualifications

a) Implementing security measures that effectively safeguard sensitive data in the event of cyber-attack.

b) Developing and supporting network security solutions and providing guidance on vulnerabilities or potential vulnerabilities within the enterprise architecture.

c) Hands-on experience with Tanium, Gigamon, Suricata, SourceFire, FireEye, ePO, and other network and endpoint security tools.

d) Experience with the following security technologies: IPS/IDS, Firewalls, Proxies and reverse proxies, DNS servers, Anti-virus/Anti-malware tools, Endpoint detection and response tools, vulnerability and asset management tools.

e) Skilled in Linux-related scripting

f) One or more technical security certifications:

1. ISC2 â€“ Certified Cloud Security Professional (CCSP)

2. ISC2 â€“ Certified Information Systems Security Professional (CISSP)

3. ISC2 â€“ Certified Secure Software Lifecycle Professional (CSSLP)

4. ISACA â€“ Certified Information Security Manager (ISSM)

5. SANS â€“ Global Information Assurance Certification (GIAC) Cloud Security Essentials (GCLD), Cloud Security Automation (GCSA), Security Essentials (GSEC), and others

Candidate must be a US citizen

Candidate must have an active TS/SCI

Candidate must have a MA/MS degree with a minimum of 3 years of experience. This may be substituted with a BS/BA degree and a minimum of 6 years of total experience.

Our People

DigiFlight attracts the most highly skilled workforce to protect some of our nation’s most sensitive systems. Before joining the company, many DigiFlight professionals served our country in a civilian and/or military capacity. Our diverse team provides innovative solutions as they support critical clients in tackling tough challenges. Most importantly, our team is passionate about their work and making a difference.

Our corporate culture promotes a healthy work/life balance.

Our Benefits

DigiFlight’s competitive benefits package allows employees to manage their personal and professional portfolios through a variety of features and programs. Our benefits include:

Health, Dental, Vision, and Flexible Spending Account

Paid Time Off (PTO)

11 paid holidays

Tuition Education Assistance

Professional Development

401(k) retirement plan

Life insurance and short- and long-term disability insurance

Employee Referral Program

Marketing Incentive Plans

DigiFlight, Inc. (DFI) is an Affirmative Action, Equal Opportunity Employer. DFI offers a highly competitive, family-oriented benefits package.

Security Engineer - Military Veterans

at R&R Integrated Solutions

Columbia, MD