Security Engineer

Security Engineer page is loaded## Security Engineer locations: STSY
12 - VA - Falls Church time type:
Full time posted on:
Posted Todayjob requisition  Inc Regular
** PRIMARY FUNCTION
** The Security Engineer provides cybersecurity engineering and technical security support for enterprise application modernization efforts supporting the Executive Office for Immigration Review (EOIR). This individual is responsible for supporting the design, implementation, configuration, testing, and ongoing security of applications, systems, and supporting environments.

The Security Engineer works closely with project management, solution architects, developers, system administrators, testing personnel, and Government stakeholders to ensure security requirements are incorporated throughout the system development lifecycle. This individual supports the identification and remediation of security vulnerabilities, implementation of security controls, and development and maintenance of security documentation necessary to support Department of Justice (DOJ) and Federal cybersecurity requirements.

This position is contingent upon contract award
** ESSENTIAL FUNCTIONS
*** Support the design, implementation, configuration, and maintenance of security controls for applications, systems, and supporting environments.
* Collaborate with solution architects, developers, system administrators, and Government stakeholders to incorporate security requirements throughout the system development lifecycle.
* Review system designs, configurations, interfaces, and technical implementations to identify potential security risks and vulnerabilities.
* Support security assessments, vulnerability scanning, remediation activities, and validation of corrective actions.
* Identify, document, track, and assist with the remediation of security findings and vulnerabilities.
* Support implementation and maintenance of identity and access management, authentication, authorization, least privilege, and role-based access controls.
* Assist with security configuration and hardening of applications, cloud resources, databases, integrations, and supporting infrastructure.
* Support security testing throughout development, integration, testing, deployment, and ongoing operations.
* Collaborate with development and operations personnel to incorporate secure development and Dev Sec Ops  practices into application development and deployment processes.
* Support security monitoring and assist with the identification, analysis, response, and remediation of security incidents as required.
* Develop and maintain security-related technical documentation, procedures, configuration information, and supporting artifacts.
* Support the preparation and maintenance of documentation required for system security, authorization, assessment, and ongoing compliance activities.
* Monitor security risks and vulnerabilities and communicate potential impacts and recommended mitigation actions to technical and project leadership.
* Support compliance with applicable DOJ and Federal cybersecurity policies, standards, and requirements.
* Participate in technical reviews, security reviews, project meetings, and other activities necessary to support secure system implementation and operations.
*
* SUPERVISORY RESPONSIBILITIES:

** No
* * DESIRED KNOWLEDGE, SKILLS, & ABILITIES:
*** Experience supporting the Department of Justice (DOJ), EOIR, or other Federal civilian agencies.
* Experience providing cybersecurity engineering support for enterprise application modernization or digital transformation initiatives.
* Experience securing cloud-based, hybrid, and Microsoft technology environments.
* Knowledge of Federal cybersecurity requirements, security controls, risk management, and system authorization processes.
* Familiarity with the NIST Risk Management Framework (RMF) and NIST security controls.
* Experience with vulnerability assessment, security scanning, remediation, and security configuration management.
* Knowledge of identity and access management, authentication, authorization, least privilege, and role-based access controls.
* Familiarity with application security, database security, API and integration security, and secure software development practices.
* Familiarity with Microsoft Azure, Microsoft 365, and related enterprise technologies.
* Experience working within Agile software development and Dev Sec Ops  environments.
* Strong analytical, troubleshooting, and problem-solving skills.
* Ability to effectively communicate…