Lead Cybersecurity Engineer<\/span><\/span><\/b>
<\/p>
The Lead Cybersecurity
Engineer shall have a bachelor’s degree in Information Technology, Engineering,
or a related field with a minimum of 10 years of progressive enterprise
engineering and management experience. This position requires an IAT III
certification.<\/span>
<\/p>
<\/span>
<\/p>
The <\/span>lead <\/span>cybersecurity <\/span>engineer <\/span>will <\/span>be <\/span>the <\/span>principle <\/span>technical <\/span>advisor <\/span>and <\/span>subject <\/span>matter <\/span>expert <\/span>for <\/span>system <\/span>categorization, <\/span>security <\/span>controls <\/span>selection, <\/span>security <\/span>controls <\/span>implementation, security <\/span>controls <\/span>assessment, <\/span>and <\/span>ATO <\/span>for <\/span>approved <\/span>cyber <\/span>security <\/span>tools. <\/span>The <\/span>lead cybersecurity <\/span>engineer <\/span>must <\/span>have
demonstrated <\/span>the ability <\/span>to <\/span>manage <\/span>complex <\/span>tasks <\/span>and <\/span>teams.<\/span><\/span>
<\/p>
The <\/span>lead <\/span>cybersecurity <\/span>engineer’s <\/span>responsibilities <\/span>include <\/span>but <\/span>are <\/span>not <\/span>limited <\/span>to:<\/span><\/span>
<\/p>
· <\/span><\/span><\/span>Provide <\/span>expertise <\/span>in <\/span>the <\/span>engineering <\/span>design, <\/span>development, <\/span>direction, <\/span>and <\/span>implementation <\/span>of <\/span><\/span>enterprise <\/span>network <\/span>cyber <\/span>defense <\/span>capabilities <\/span>to <\/span>prevent <\/span>sophisticated <\/span>cyber <\/span>threats and <\/span>vulnerabilities <\/span>or <\/span>detect <\/span>when <\/span>prevention <\/span>fails.<\/span><\/span>
<\/p>
· <\/span><\/span><\/span>Understand <\/span>the <\/span>fundamentals <\/span>of <\/span>layered <\/span>defense <\/span>and <\/span>zero <\/span>trust <\/span>technologies <\/span>and <\/span>processes.<\/span><\/span>
<\/p>
· <\/span><\/span><\/span>Understand <\/span>the <\/span>lifecycle <\/span>of <\/span>the <\/span>network <\/span>threats, <\/span>attack <\/span>vectors <\/span>and <\/span>methods <\/span>of exploitation.<\/span><\/span>
<\/p>
· <\/span><\/span><\/span>Have <\/span>specialized <\/span>knowledge <\/span>in <\/span>computer <\/span>network <\/span>theory <\/span>and <\/span>understand <\/span>IT <\/span>standards <\/span>and <\/span>cyber <\/span>security tools’ architectures, including <\/span>but <\/span>not <\/span>limited <\/span>to, <\/span>the <\/span>Open <\/span>System <\/span><\/span>Interconnection <\/span>(OSI) <\/span>model <\/span>and <\/span>the <\/span>methods <\/span>of <\/span>exploiting <\/span>those standards.<\/span><\/span>
<\/p>
· <\/span><\/span><\/span>Be familiar with the utilization,
configuration, and implementation of industry standard cyber defense
capabilities, including but not limited to, web content filters, email security
capabilities, Intrusion Detection System (IDS), Intrusion Prevention System
(IPS), Host -Based Security System (HBSS), Security Event and Incident
Management (SEIM), DNS security practices, advanced log analysis, network
monitoring, network flow analysis, packet capture analysis, network proxies,
firewalls, anti -virus capabilities, and access control lists.<\/span>
<\/p>