Security Engineer

Role: Security Engineer
Location: Washington DC (Hybrid)
Duration: Long term
Experience: 10+ Years
Certifications are mandatory - CISA, CISM
Visa: H1B, GC $ USC Only

This role will focus on designing and developing security architecture patterns that meet regulatory obligations and data protection requirements as well as align with the business and corporate security strategy. 

Duties and Responsibilities:
Strategy and Planning
Perform security assessments, identify gaps in existing security architecture, and recommend changes or improvements.
Design security architecture elements to mitigate threats.
Create solutions that align enterprise security architecture frameworks and standards (e.g. SABSA, NIST 800-53, ISO 27002) with -overall business and security strategy.
Participate in risk assessments for new technologies and projects.
Employ secure configuration management processes.
Document security requirements and controls for protecting information, systems, and technology assets.
Define and document how the implementation of a new technology impacts the security posture of the current environment.
Document and update as necessary all definition and architecture activities.
Provide input on security requirements to be included in request for proposals (RFPs), statements of work (SOWs), and other procurement documents.

Qualifications:
Experience in identifying gaps in existing architectures.
Experience in designing security architectures to mitigate threats.
Knowledge of computer networking concepts and protocols (e.g. TCP/IP, DNS) and network security methodologies.
Knowledge of network access, identity, and access management (e.g. public key infrastructure, Oath, OpenID, SAML, SPML).
Knowledge of capabilities and applications of network equipment including routers, switches, servers, transmission media, and related hardware.
Knowledge of remote access technology concepts.
Knowledge of application firewall concepts and functions (e.g. single point of authentication enforcement, data anonymization, DLP scanning, SSL security).
Work experience in cybersecurity designs for systems, networks, and multi-level security requirements or requirements for processing multiple classification levels of data.
Knowledge of risk management processes and experience in conducting risk assessments.
Knowledge of identity and access management methods.
Experience with Windows, Unix, and Linux operating systems.
Knowledge of business continuity and disaster recovery operation plans.