Network Security Engineer

About the Role

• Network Security Engineer opportunity to support the United States Navy.
• Identify cyber posture, assess vulnerabilities, and recommend security strategies.
• Develop and implement security solutions for tactical and deployed systems.
• Troubleshoot and analyze complex challenges using network and cyber security best practices.
• Utilize tools and scripting techniques to automate tasks and improve efficiencies.
• Research and develop security solutions based on technology and market trends.
• Assess security threats and implement infrastructure controls, primarily in Red Hat Enterprise Linux.
• Work with multiple Warfare centers within the Navy to design and maintain cyber posture across classified and unclassified systems.
• Collaborate with systems engineers, software developers, and cybersecurity experts.
• Share expertise during the planning of acquisition, installation, and configuration of Army systems that require an Authority to Operate (ATO) via the Risk Management Framework (RMF) process.
• Assess mission objectives and provide cyber security solutions that coincide with mission parameters.
• Located in Dahlgren, VA.

Key Responsibilities

• Apply the Transmission Control Protocol/Internet Protocol (TCP/IP), including multicast and UDP.
• Implement a Demilitarized Zone (DMZ).
• Apply and configure firewalls and switches to system architectures.
• Analyze Windows Events and Linux syslogs, boot logs, and dmesg logs.
• Recommend network modifications to systems to mitigate known vulnerabilities.
• Develop and use or analysis models to support cybersecurity objectives.
• Operate and administrate computer systems running HP-UX, UNIX, Solaris, Linux (including RHEL or Ubuntu), and Microsoft Windows.
• Apply STIGs.
• Apply virtual hosting and server technology in system architectures.
• Apply the concept of deceptive technology such as honeypots in system architectures.
• Participate in Design Reviews.
• Author recommendations for improving network and code design.
• Contribute to a System Security Administrator and Operators Manual (SSAOM).

Requirements & Tech Stack

• Experience as a Linux and Windows OS as Systems Engineer or Administrator.
• Experience with HP-UX, UNIX, Solaris, Linux (such as RHEL or Ubuntu), and Microsoft Windows OS.
• Experience with virtualization technologies such as VMWare, Hypervisor, and KVM.
• Experience applying STIGs.
• Knowledge of how to implement approved encryption technologies, Virtual Private Networks (VPNs), and resolve Cross Domain issues.
• Knowledge of system hardening and security best practices.
• Knowledge of networking concepts including IPv4, SSH, and Firewalls.
• Knowledge of monitoring and cyber security tools including ACAS Security Center, Evaluate STIG, STIG Viewer, and Nessus Scanner.
• Secret clearance required.
• HS diploma or GED.
• Security+ ce, CySA+, GSEC, SSCP, CND, GICSP, or RHCSA Certification.

Nice to Have

• Experience with CI/CD pipelines and DevSecOps practices.
• Experience with threat intelligence platforms and incident response frameworks.
• Bachelor's degree in science.
• DoD IAT Level III or IAM level III Certification.