Information Security Engineer

Intellect Faces is seeking an Information Security Engineer for onsite work in Annapolis, MD
. This role is built for engineers who want to apply hands-on vulnerability testing, security policy and risk management, and practical secure configuration work across both desktop and server environments.

• Apply security practices and policies while performing hands-on vulnerability testing using Customer tools
  .
• Use the Risk Management Framework in support of system risk processes.
• Formulate and assess IT security policy
  .
• Work across multiple systems and components simultaneously, managing different configurations.
• Adopt and adhere to best practices in day-to-day security activities.
• Plan and prioritize tasking effectively, and communicate clearly about technical options and trade-offs
  .
• Deliver high-quality work both independently and as part of a team in a fast-moving environment.

• Must hold TS/SCI Full Scope Polygraph through MD Customer
  . The last poly must be within the past 6 years
  , with no CCAs
  .
• Demonstrated knowledge and experience with common security tools including Nessus, NMAP, and Wireshark
  .
• Experience implementing hardware/software security including communication protocols,
  encryption techniques/tools
  , and web services
  .
• Experience with secure configurations for commonly used desktop and server operating systems
  .
• Strong verbal and written communication skills.
• A solid understanding of security practices and policies, along with hands-on vulnerability testing experience using Customer tools.
• Ability to plan and prioritize tasking and communicate clearly regarding technical options and trade-offs.

• Five (5) years of experience with Defense in Depth principles/technology (including access control, authorization, identification and authentication, public key infrastructure, and network and enterprise security architecture) and applying risk assessment methodology to system development.
• DoD 8570 compliance with IASAE Level 2 or 3.
• ISSEP certification.
• CISSP certification.
• Experience developing or implementing integrated security services management processes, including assessing and auditing network penetration testing, anti-virus planning assistance, risk analysis, and incident response.
• Experience providing information assurance support for application development, including system security certifications and project evaluations for firewalls encompassing development, design, and implementation.
• Experience with penetration testing tools
  .
• Experience with scripting languages
  .

• 5+ years of relevant experience.
• Bachelor’s degree in Computer Science
  , Information Assurance
  , Information Security System Engineering
  , or a related field.

• Nessus
  , NMAP
  , Wireshark
• Encryption techniques/tools, web services
• Penetration testing tools, scripting languages
• Public key infrastructure
• Network and enterprise security architecture