Cyber Defense Engineer

Location: St. Louis, MO

Department: 57603214 - AFS Cyber Resilience and Defense

Overview: AFS is seeking a highly skilled and hands-on Principal Cyber Defense Engineer to join our team. This role will focus on leading technical efforts in cybersecurity, working closely with federal law enforcement clients to ensure their cybersecurity systems are robust and effective. We are growing in this space and are looking for technical leaders to drive this work forward. 

Key Responsibilities: 

• Lead the design, implementation, and management of advanced cybersecurity systems. 

• Perform hands-on technical work, including system configuration, integration, and optimization. 

• Engage in incident response activities, including threat hunting, forensic analysis, and remediation efforts. 

• Develop and implement cybersecurity strategies and initiatives to enhance system security. 

• Conduct vulnerability assessments and penetration testing to identify and mitigate security risks. 

• Collaborate with cross-functional technical teams to develop and deploy customized cybersecurity solutions. 

• Stay updated on the latest cybersecurity trends, threats, and technologies, and apply this knowledge to improve security posture. 

• Provide technical expertise and guidance on cybersecurity best practices, policies, and frameworks. 

• Ensure compliance with relevant federal regulations and standards. 

• Prepare and present technical reports, documentation, and analysis to internal stakeholders and clients. 

Required Experience: 

• Minimum of 5 years of experience in a cybersecurity role, with a strong focus on hands-on technical work. 

• Experience in managing technical teams 

• Hands-on design and engineering experience with three or more cybersecurity tools and technologies such as (but not limited to): firewall security configuration and best practices, intrusion detection/prevention systems (IDS/IPS), endpoint protection, Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), network security monitoring, Network micro-segmentation, Secure Access Service Edge(SASE), Cloud Native Application Protection Platform (CNAPP) 

• Proficiency in scripting and automation using languages such as Python, PowerShell, or Bash. 

• Hands-on experience with forensic tools and techniques for incident response and investigation. 

• Active Secret Clearance. 

Preferred Qualifications: 

• Bachelor's degree in Cybersecurity, Information Technology, or related field. Advanced degree preferred. 

• Relevant certifications such as CISSP, SANS Defensive Certifications, CISM, OSCP, or equivalent.