Junior Security Engineer

Quantum Sky is searching for an experienced Junior Security Engineer in Washington, DC to support architecture, security operations, and incident response activities. Tasks are expected to be executed while coordinating with various government teams in mission-critical environments.

Responsibilities

• Develop, document, and review secure baseline configurations for each technology used within the environment
• Assist in determining authorization boundaries and placement of new systems within the Agency’s enterprise architecture
• Design, develop, and maintain detailed security drawings
• Develop alternative system designs and architectures
• Perform security impact analyses for proposed changes to assigned systems
• Review IT system plans to ensure designs meet governmental standards and provide an appropriate level of protection for client systems and data
• Conduct gap analysis of system requirements and components

Required:

• Minimum of four (4) years of general work experience and at least two (2) years of relevant experience in functional responsibility
• Bachelor's degree in a technical field from an accredited college/university or equivalent experience
• Experience administering security tools such as Splunk, Symantec DLP, FireEye, IDS
• Experience with at least one of the following: Windows Server 2008/2012, Windows 7/8/10, Syslog (rsyslog, syslog-ng, etc), Linux variants (RedHat/CentOS/Ubuntu), Event log collection, VMWare
• Familiar with the use of a SIEM for analysis
• Familiar with multi-tiered network applications, common ports, and protocols used in those communications
• Ability to perform online research and comprehend attack signatures while comparing them to network traffic to perform a proper analysis of detections
• Strong analytical and organizational skills
• Experience working in a SOC and performing incident response is preferred.
• Thorough understanding and knowledge of TCP/IP networking

Desired

• Experience and education preferred in CEH, eCPPT, OSCP, GCFW, GCIH, other relevant IT security certifications, or advanced vendor certifications such as Splunk Certified Architect or SourceFire Certified Administrator; Security+, Network+, GSEC, or other relevant IT security product certifications such as Certified Systems Analyst, or SnortCP CISSP, CISM, or ISO 27001
• Familiarity with implementing DISA STIGs and CIS Benchmarks preferred
• Experience with Splunk SIEM, Swimlane, Bluecoat, Sourcefire (Snort), VMRay, and Vulnerability MGMT tools such as Qualys

Location:

• This role is on-site in Washington, DC

Clearance

• U.S. Citizenship, Public Trust eligible