Apply on Employer Site

Lumen Technologies · 12 hours ago

LEAD INFORMATION SECURITY ENGINEER

Herndon, VA

Full-time

Onsite

Senior Level, Lead/Staff

$114K/yr - $152K/yr

5+ years exp

Lumen Technologies is a company focused on connecting people, data, and applications. They are seeking a Lead Information Security Engineer to implement Managed Security Services in a Federal Security Operations Center, providing expertise in DDoS mitigation and security event management.

Big DataInformation ServicesInfrastructureOptical CommunicationSecurityTelecommunicationsVoIPWireless

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Subject Matter Expert on DDoS attacks, mitigation and threat analysis

DDoS worldwide intelligence collection, analysis, reporting and dissemination

Threat Feed research, recommendation, implementation and Administration

Interface with DDoS service vendors

Expertise in DDoS attack tools and countermeasures

Perform complex changes within the managed security environment

Manage and resolve customer service faults, outage, and impairment events

Monitor, triage, and respond to alerts for client security events. Investigation and resolution of impairment scenarios on Managed DDoS Security products

Research and implement customer generated change requests for Managed DDoS Security products

Generate incident cases and escalate to Operation Engineering and IPNOC teams in accordance with time and severity-based SLA’s

Performs tasks associated with the installation, turn up and maintenance of Lumen security infrastructure

Present as technical expert delivering solutions to clients, internal business, and third-party vendors

Develop enhancements to existing solutions, promote creation of new tools, processes, and applications

Directly support, train and mentor tier I and II colleagues

Possess exceptional customer service skills

Multi-task during events

Communicate effectively with managers, customers, and vendors

Maintain solid working relationships, including collaborative technical activities with peers

Strong written and verbal communication skills

Analytical and problem-solving skills

Attention to detail with good organizational capabilities

Prioritize with good time management skills

Demonstrate collaboration/cooperation with other Service Assurance teams outside of the SOC (IP/Ethernet, Transport, etc.)

Regularly observed communication with peers and other functional SOC teams on selected collaboration platforms (Teams, Email, phone, etc.)

Work within multiple ticketing platforms and accept/update/close tickets in order received

If not previously approved, candidate must be willing to submit for a T/S clearance with SCI

Qualification

DDoS MitigationCyber Threat IntelligenceSecurity CertificationsRoutingNetworkingIncident AnalysisCustomer Service SkillsAnalytical SkillsCommunication SkillsOrganizational SkillsTime Management

Required

Candidate must be a US Citizen with an active TOP SECRET clearance

Preferred

5-7 years in a Security Operations environment

Experience with Cyber Threat Intelligence and interface with intelligence community

Experience with writing reports and making presentations to customers

Certifications In specific security technologies such as Fortinet, Arbor, Radware, Palo Alto, Cisco or Checkpoint

Demonstrated understanding of Denial-of-Service concepts and attack vectors, and mitigation options

Demonstrated proficiency in routing and networking skills, including the ability to: Troubleshoot BGP and BGP community strings, Review and analyze packet captures, Trace customers or attack traffic through our global backbone, Understand and be able to modify policies/prefix lists on multiple router platforms, Troubleshoot GRE Tunnels issues

Stay abreast of new attack vectors and interface with customers, other SOC engineers, and Ops Engineering regarding new vectors and mitigation techniques

Expert level knowledge and skills of at least one programming language (python preferred)

Security industry certifications (examples): CISSP, CRISC, CISM, Security+, CCNA, ACIA, CCNA, CEH, ITIL Foundations