This is a 100 Onsite Role.
About the Position:
The Security Operations Engineer shall be responsible for implementing new firewall architectures upgrades and features as necessary and assisting in the administration of all information security firewalls to include updates upgrades policy administration and validation.
- Ensure compliance with security policies develop and update IT security documentation provide related statusreports briefings schedules and project plans in written form.
- Plan and implement security reviews for changes impacting hardware software baselines connections or applications.
- Collaborate with staff to plan and implement new firewall architectures upgrades and features as necessary.
- Assist in the administration of all firewalls to include updates upgrades policy administration and validation.
- Perform other security related tasks including vulnerability scanning and log management.
- Assist in reviewing and implementing customer changes consistent with existing policies.
- Review and update documentation to ensure consistency with current procedures.
- Manage and tune additional software blades associated with firewall architecture (IPS URL Application Control AV Advanced Malware detection).
- Follow industry best practices NIST SP 80053 and agency security policy standards to identify gaps and inefficiencies in the security infrastructure and provide options for resolving them.
- Make recommendations to modernize Clients security infrastructure in a more effective and efficient manner.
- Explain new security requirements to IRM&TS staff and contractors to support implementation.
- Work outside of normal business hours to support outage resolution planned maintenance or to implement an upgrade.
- Perform other related duties.
Requirements
Basic Qualifications and Required Skills:
- Bachelors degree in an ITrelated field withEight 8 years of experience in Information Technology Cybersecurity or a related field.
- Minimum six 6 years of experience configuring and administering firewall technologies such as carrier class Checkpoint Firewalls Palo Alto and Network Security Policy Management.
- Top Secret security clearance is not a must for wellqualified candidates.
- Any of the mentioned Certifications are required;CCSE CISSP CISM Security CASP.
- Indepth knowledge of security operations including firewall rules and security policies.
- Strong networking ability and knowledge of firewall platforms to assist in rapid identification and isolation of issues during incidents and outages.
- Experience working with RMF and NIST SP 80053 (Rev 4/5.
- Expert knowledge of RMF accreditation packages and all steps of the RMF process.
- Knowledge of cyberattack patterns tactics techniques and procedures.
- Ability to adapt security processes/tools to evolving landscapes and risk scenarios.
- Strong knowledge of Checkpoint firewall hardware modifications.
- Strong knowledge of iBoss Cloud IPS and IDS configurations.
- Strong knowledge of SSLV Symantec security application.
- Ability to work both independently and within a team environment.
- Ability to work in a fastpaced environment while maintaining outstanding customer service skills.
- Proficiency in explaining complex policies and protocols in simple terms.