Security Engineer - prefer someone who has experience working on Department of Defense engagements
Location – Redmond, WA (onsite)
Duration – 12 months
US Citizens, Green Cards & GC-EAD Preferred. No Third-party C2C is Available for this job.
Responsibilities:
• STIG Implementation: Apply DOD Security Technical Implementation Guides (STIGs) to various Windows and Linux-based operating systems according to the specific requirements of each client's environment.
• Security Assessment: Conduct comprehensive security assessments to identify system vulnerabilities, risks, and potential non-compliance issues with DOD standards.
• Remediation: Work closely with engineers and product security to remediate identified security issues and ensure the successful implementation of STIGs.
• Documentation: Maintain detailed documentation of the STIG implementation process, including pre and post-assessment reports, security measures applied, and any necessary configuration changes.
• Reporting: Provide regular status updates to project stakeholders, management, and clients, outlining progress, challenges, and outcomes of STIG application efforts.
• Compliance Assurance: Verify and validate the effectiveness of STIG implementations and ensure that systems comply with DOD security guidelines.
• Research and Stay Updated: Keep abreast of the latest DOD STIG updates, industry best practices, and emerging security trends to continuously improve the implementation process.
• Collaboration: Collaborate with cross-functional engineering teams to achieve successful STIG application and documentation.
Qualifications and Skills:
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
• Proven experience in applying DOD Security Technical Implementation Guides (STIGs) to Windows and Linux-based operating systems.
• Comprehensive understanding of DOD security standards and their implications on system configurations.
• Knowledge of various security tools and technologies used in security assessments and compliance verification.
• Strong analytical and problem-solving skills to identify security gaps and recommend appropriate solutions.
• Excellent documentation skills to create detailed reports and maintain accurate records of STIG implementations.
• Ability to communicate effectively with technical and non-technical stakeholders.
• Industry certifications such as CISSP, CompTIA Security+, or other relevant certifications would be an advantage