Information Assurance Engineer with Security Clearance

Information Assurance Engineer with Security Clearance

Employer: Telos Corporation

Location: Huntsville

Salary: Competitive

Closing date: 6 Nov 2024

Sector: IT

Job Role: Information Assurance

Job Type: Permanent

The most security–conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security. Be a part of the Telos culture and see what sets us apart! This position will be 80% remote with 8 weeks of possible travel per year.

Responsibilities:

1. Performing technical (evaluation of technology) and non–technical (evaluation of people and operations) risk and vulnerability assessments.
2. Conducting and/or supporting authorized penetration testing on enterprise network assets.
3. Making recommendations regarding the selection of cost–effective security controls to mitigate risk.
4. Preparing assessment reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions.
5. Maintaining deployable cyber defense assessment toolkit to support cyber defense assessment missions.
6. Formal written and verbal communication with customer leadership and technical staff regarding assessment findings and reports.
7. Virtual team communication via multiple collaboration tools with team members and leadership.

Skills:

1. Conducting vulnerability scans and recognizing vulnerabilities in security systems.
2. Cloud Technologies such as AWS, Microsoft Azure, etc.
3. Conducting application vulnerability assessments.
4. The use of penetration testing tools and techniques.
5. Using network analysis tools to identify vulnerabilities.
6. Assessing compliance with standard configuration baselines.
7. Assessing the application of cryptography.
8. Assessing the robustness of security systems and designs.
9. Mimicking threat behaviors.
10. The use of social engineering techniques.
11. Performing impact/risk assessments.
12. Identifying systemic security issues based on the analysis of vulnerability and configuration data.
13. Conducting security assessment interviews.
14. Assessing security controls against recognized compliance frameworks.

Knowledge:

1. Application vulnerabilities.
2. Computer networking concepts and protocols, and network security methodologies.
3. Network traffic standards and technology.
4. Penetration testing principles, tools, and techniques.
5. System and application security threats and vulnerabilities.
6. Risk management processes.
7. Network security architecture concepts.
8. National and international laws, regulations, policies, and ethics as they relate to cybersecurity.
9. Cybersecurity principles.
10. Specific operational impacts of cybersecurity lapses.
11. Cryptography and cryptographic key management concepts.
12. Host/network access control mechanisms.
13. Network access, identity, and access management.
14. Basic system administration, network, and operating system hardening techniques.
15. Understanding of common Risk Management Frameworks and cybersecurity and compliance frameworks.

Qualifications:

1. Bachelor's Degree in Cybersecurity, Computer Science, Mathematics, Information Technology, or 6 years equivalent combination of education, professional training or work experience.
2. 8+ years of experience in cybersecurity and compliance.
3. Secret Clearance required.
4. Must possess one of the following certifications: CISSP, CEH, SSCP, OSCP, CISA, CAP, Security+.

Telos maintains a drug–free workplace and will conduct drug testing on all applicants who have accepted an offer of employment. Telos Corporation participates in the E–Verify program.

Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic.