DHS HSEN – Senior Security Engineer - Washington, DC, United States - Versar Global Solutions

    Default job background
    Technology / Internet
    Description
    Position Summary BayFirst Solutions, a subsidiary of Versar, Inc., is seeking a Senior Security Engineer (DevSecOps) to support the Department of Homeland Security's Enterprise Engineering Division (EED) within the Office of the Chief Information Officer (OCIO)
    This candidate will be a member of a high functioning team supporting cybersecurity countermeasures to strengthen DHS enterprise and HQ networks, to include the administration and support to a portfolio of security tools and associated infrastructure in production
    This candidate will work directly with team of network and security engineers, data center specialists, industry vendors, and DHS stakeholder groups that includes 20+ DHS Components
    Duties / Responsibilities


    • Designs and develops cybersecurity technologies along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide cyber systems and networks
    • Demonstrated DevSecOps skills and experience required to meet requirements
    • Supports DHS Security Engineering efforts related to DevSecOps, Agile, GitHub, Kubernetes , OWASP, API, Scripter/code tester - Java, PHP, C, .NET, Go, PowerShell, Python, CSRF, XSS, ubernetes, AWS EKS, AWS Fargate, Red Hat OpenShift, AWS, AWS Lambda with AWS API Gateway, Terraform, AWS CloudFormation, Fortify, AppDetective,
    • Able to support the integration of security processes, controls, and technologies into technical solutions
    • Uses standard solutions, and a consistent approach in design, development, and testing
    • Recommend improvements to security architectures that increase levels of automation, implement a DevSecOps operating philosophy, and address current and anticipated data and processing needs
    • Recommend the proper placement of cybersecurity security tools, sensors, and software
    within the infrastructure


    • Develop cybersecurity support applications as required and integrate those applications into the cybersecurity support applications infrastructure, to include applications that may include dashboard displays allowing management a visual overview of cybersecurity operational status and performance metrics, interfaces with other DHS SOCs, and machine to machine interfaces to increase the level of automation within the cybersecurity infrastructure
    • Develop requirements for cybersecurity support applications including dashboard display, process automation, and interface applications
    • Prototype, develop, test, and implement applications including interface applications for transferring data to other DHS SOCs and ensuring machine to machine communication and interfaces to reach a state of automated processing within SOC operations
    • Utilize application program interfaces (APIs) to develop, test, and implement tool and process automation for integrated toolsets
    • Deploy and integrate applications within the cybersecurity infrastructure
    Minimum Qualifications / Requirements


    • At least six (6) years of professional experience in an IT Services environment, providing technical support with emphasis on cybersecurity and DevSecOps
    • U.S
    Federal government consulting DevSecOps experience preferred

    • Must be resourceful in learning a very complex and dynamically changing network
    • Must be able to work independently in fast paced, dynamic environment
    • Past experience within the Department of Homeland Security or other government agency is preferred
    • U.S
    citizenship required and eligibility for a DHS EoD is required to be considered for this position
    Education BA / BS (relevant field); relevant experience may be a substitute for education Certifications Required N/A Certifications Desired Certification involving cybersecurity DevSecOps related certifications desired: Certified Professional - DevOps Foundation (CP-DOF), Certified Professional (CP) DevSecOps, or Certified DevSecOps Professional (CDP) Software/Hardware Desired N/A