DHS HSEN - Senior Security Engineer (Cloud Infrastructure/O&M)

Who We Are:

Headquartered in Washington, DC, Versar Global Solutions provides full mission lifecycle solutions for challenges faced by our government and commercial Customers in the natural, built, and digital environments. With nearly 2,000 team members around the world, and a rich legacy spanning more than 70 years, Versar Global Solutions delivers a broad array of planning, analysis and risk management solutions, project and program management, operations and maintenance services, and information technology applications for environmental management and remediation projects, mission critical facilities and installations, and in support of readiness and contingency operations.

Who You Are:

Versar Global Solutions is seeking a Senior Security Engineer (Cloud Infrastructure) to support the Department of Homeland Security's Enterprise Engineering Division (EED) within the Office of the Chief Information Officer (OCIO). This candidate will be a member of a high functioning team supporting cybersecurity countermeasures to strengthen DHS enterprise and HQ networks, to include the overseeing and providing strategic and tactical direction with security compliance. This candidate will work directly with team of network and security engineers, data center specialists, ISSOs, industry vendors, and DHS stakeholder groups that includes 20+ DHS Components.

What You'll Do:

This effort is responsible for providing support for the following Homeland Security Enterprise Network (HSEN) services along with Security Engineering & Architecture cloud infrastructure support to include:

• Design and develop cyber security technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide cyber systems and networks.

Additional Duties / Responsibilities

• Responsible for 24/7 (on-call) to the DHS Network Operations Security Center - Cyber (NOSC Cyber) Infrastructure O&M and user support for Cloud AWS, Azure, Google; CloudTrail, Lookout, Kubernetes, Terraform and other Security systems and tools.
• Part of team that supports NOSC-Cyber hardware and portfolio of network devices to include Cisco devices and Cisco ISE, Palo Alto Firewalls, Broadcom (Bluecoat) Proxies, SAN, Fiber Channel, Hyperconverged technology, ForeScout, NetFlow, IDS/IPS, McAfee NSM.
• Provide support for servers and operating systems (OS), WAN/LAN, storage, Firewalls, IDS/IPS, sensors, Proxy servers, Hyperconverged, Cloud Gateways and other Infrastructure are functional, accredited, documented, configured, patched, security compliant, monitored, optimized, available 99.95%+.
• Provide support to NOSC Cyber security tool maintenance and administration
• Maintain SIEM applications to collect and aggregate IDS/IPS data from network sensors, raw data from collection agents, firewalls, proxy servers, DLP, antivirus, vulnerability scanner elements and other security-relevant devices.
• Interface DHS Enterprise and systems information into the SIEM tool using information from the Compliance and Technology Information Assurance Compliance System (IACS) and input from tool ISSOs and perform asset categorization and prioritization.
• Create procedures and documentation for maintaining all security hardware and software.
• Create categories of tools to be managed include DMA tools, SIEM, Malware analysis, asset management, forensics, encryption, continuous monitoring tools, and incident and case tracking and ticketing.
• Perform full-scope administration, maintenance, management, and configuration, patching, upgrades and optimization of security tools, devices, application systems, and servers and sensors within the cybersecurity infrastructure.
• Install and/or modify network and/or endpoint security elements, tools, and other systems as required to maintain optimal coverage and performance, as approved by DHS.
• Create and maintain standard Tool Maintenance Design Documentation and Test Plans for new and existing security applications and hardware in order to avoid obsolescence and to improve productivity for the DHS user community and for DHS management.
• Create diagrams of new or revised solutions for transition to operational support encompassing the entire "end-to-end" configuration flow diagram describing all solution elements.
• Administer, manage, configure, maintain, and tune NOSC-Cyber tools, devices and application systems, servers and sensors, and remediating vulnerabilities.
• Review network security architecture and design and provide recommendations to the Government Leads.
• Configure and manage security tools to optimize data correlation and event discovery and detection.
• Provide security device signature maintenance and performance reports.
• Create and maintain tool tuning and operation O&M SOPs/ C ONOPS and functionality and or operational documentation and other required documentation as described in the Cybersecurity Service Provider Program (CSP).
• Maintain a monitored, remotely accessible, unattributed network for use by DHS NOSC analysts in accordance with DHS and FISMA directives.
• Maintain an Out of Band Digital Media Analysis network for use by DHS NOSC analysts in accordance with DHS and FISMA directives.
• Operate and maintain any other tools under the direct control of DHS NOSC, such as specialized or "one-off" monitoring or analysis platforms.
• Track and manage NOSC security devices, physical property, and asset management.
• Assist the Government Local Property Officer (LPO) with documenting and maintaining inventory of Enterprise SOC document property and assets, documenting Enterprise NOSC software licenses, and tracking maintenance and support agreements, including technology refresh.
• Be responsible for supporting LAN/WAN/SD-WAN security solutions including creating and maintaining LAN/WAN access control standard design documentation.
• Provide appropriate diagnostic or monitoring tool enhancement recommendations to the Government.
• Manage all software licensing on behalf of the DHS NOSC.
• Assist with requirements gathering and systems analysis for new software requirements.
• Provide Software Maintenance Recommendations to the Government Leads.
• Provide recommendations to meet business needs.
• Perform security impact assessments.
• Assist with vendor product evaluations and provide an impact analysis for any new software/products proposed.
• Support the O&M and feature development for the DHS incident tracking system, and integrations with the SOAR tool.
• Establish a SIEM capacity management process and plan.
• Test SPL content, scripts and other automation products prior to deployment to ensure they do not produce a negative impact to either the logging solution or other tools and technologies.
• Revise content as needed to enhance performance and ensure compatibility.
• Report all new, modified and removed content to the Government.
• Ensure that systems under SOC control are compliant with the existing DHS Security Logging Strategy.
• Tune the capabilities as practicable to improve efficiency.
• Propose enhancements for these candidates to the Government for evaluation and prioritization;
• Identify shortfalls in the current capability.
• Recommend improvements to current processes.
• Review network Systems Engineering Lifecycle (SELC) as required and provide comments as requested by the network engineering team regarding evaluation, testing, design and implementation of a security architecture that supports network security controls, monitoring, and analysis of network security events, and data flow, collection and retention.

What You'll Bring:

• BS degree in Information Systems, Computer Engineering, Computer Science, or Cyber Security, or equivalent experience.
• At least six (6) years of professional experience in an IT Services, cyber security environment support cloud-based infrastructures.
• U.S. Federal government consulting experience preferred.
• Must be resourceful in learning a very complex and dynamically changing network.
• Must be able to work independently in fast paced, dynamic environment.
• Past experience within the Department of Homeland Security or other government agency is preferred.
• U.S. citizenship required and eligibility for a DHS EoD is required to be considered for this position.
• Must be proficient in English, both written and verbal, to ensure effective communication and collaboration.
• Successful results of preemployment screenings, including federal background check, MVR, and drug screen.
• Comply with company drug and alcohol policy.

Location Requirements

The position will primarily work remote; however, preference will be given to those who reside locally to the MD/DC/VA areas.

Compensation

Expected Salary: $120,000 - $150,000 per year

Versar Global Solutions is providing the compensation range and general description of other compensation and benefits that the Company in good faith believes it might pay and/or offer for this position based on the successful applicant's education, experience, knowledge, skills, and abilities in addition to internal equity and geographic location. The Company reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant's status protected by local, state, or federal law.

EEO Commitment

Versar Global Solutions is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Versar Global Solutions complies with applicable state and local laws governing non-discrimination in employment in every location in which the company operates. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Versar Global Solutions expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran. Improper interference with the ability of Versar Global Solutions employees to perform their job duties is not tolerated.