Apply on Employer Site

Leading Path Consulting · 1 month ago

Cybersecurity Project Engineer

McLean, VA

Full-time

Onsite

Mid Level

Leading Path Consulting is a company that specializes in cybersecurity solutions. They are seeking a Cybersecurity Project Engineer to support their Cybersecurity team in assessing and authorizing critical systems, detecting adversary behavior, and enhancing the defensive posture of their customers' information systems.

ConsultingInformation ServicesInformation Technology

Comp. & Benefits

No H1B

U.S. Citizen Only

Responsibilities

Analyze IT systems for cyber security vulnerabilities

Develop IT system or network architecture design

Conduct IP data flow analysis, encryption configuration, and vulnerability analysis using both open-source and commercial tools

Analyze IT network configurations of devices such as firewalls, routers, switches, VPNs, or Intrusion Detection/Prevention Systems for cyber security vulnerabilities

Work with communications protocols such as IP, TCP, UDP, HTTP, HTTPS, MPLS, OSPF, IGRP, BGP, SIP, H.232

Work with multiple OS’s, including Windows, Linux, and OSX

Work with Microsoft Windows versions; 7, 8, 10, 2008R2, 2012, 2012R2, or 2016

Utilize cloud computing technology and hypervisors such as HyperV, VMWare ESX, or Virtual Box

Transition security domains and use of cross domain appliances

Manage network management systems, network storage, backup systems, and disaster recovery (DR) architectures

Perform technical risk assessments and provide technical risk mitigation guidance

Ensure appropriate risk mitigation considerations, risks and vulnerabilities are well understood and appropriately mitigated

Analyze procurement processes of hardware, software and services to comply with cyber security and operational needs

Create concise and well-structured written assessments

Qualification

Cybersecurity Vulnerability AnalysisNetwork Architecture DesignCommunications ProtocolsOperating SystemsCISSP CertificationCloud Computing TechnologyTechnical Risk AssessmentsNetwork Management SystemsCISM CertificationCertified Ethical HackerTechnical Writing

Required

Demonstrated experience analyzing IT systems for cyber security vulnerabilities

Demonstrated experience developing IT system or network architecture design, conducting IP data flow analysis, encryption configuration, and vulnerability analysis using both open-source and commercial tools, such as Nmap, Wireshark, Metasploit, Canvas, Kismet, or BackTrack

Demonstrated experience analyzing IT network configurations of devices such as firewalls, routers, switches, VPNs, or Intrusion Detection/Prevention Systems for cyber security vulnerabilities

Demonstrated experience with communications protocols such as IP, TCP, UDP, HTTP, HTTPS, MPLS, OSPF, IGRP, BGP, SIP, H.232

Demonstrated experience with multiple OS's, including Windows, Linux, and OSX

Demonstrated experience with Microsoft Windows ver.; 7, 8, 10, 2008R2, 2012, 2012R2, or 2016

Demonstrated experience with cloud computing technology and hypervisors such as HyperV, VMWare ESX, or Virtual Box

Demonstrated experience with transitioning security domains and use of cross domain appliances

Demonstrated experience with network management systems, network storage, backup systems, and disaster recovery (DR) architectures

Demonstrated experience performing technical risk assessments and providing technical risk mitigation guidance

Demonstrated experience ensuring appropriate risk mitigation considerations, risks and vulnerabilities are well understood and appropriately mitigated

Demonstrated experience analyzing procurement processes of hardware, software and services to comply with cyber security and operational needs

Demonstrated experience creating concise and well-structured written assessments

Certifications: CISSP Certification

Preferred

Demonstrated experience with the Sponsor's IT review boards

Demonstrated experience with providing recommendations to IT architecture and design reviews

Demonstrated experience with the Sponsor's security policies and regulations

Demonstrated experience providing recommendations in technical standards, security standards, and operational assurance

Demonstrated experience with USG standards such as Intelligence Community Directive (ICD) 503, Federal Information Processing Standards (FIPS), National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37, SP 800-39, SP 800-53, SP 800-53A, SP 800-60

Certifications: Certified Information Security Manager (CISM), Certified Ethical Hacker