Cyber Security Project Engineer

Department: Data Analysis and Technology Services

Employment Type: Full Time

Location: McLean, VA

Key Responsibilities

• Cyber security or related IT field. 
• Adversarial tactics, techniques, & procedures (TTPs).
• Computer attack methods and system exploitation techniques. 
• Cyber security principles for Linux, Windows, virtual platforms, networking, and Cloud. 
• Network architectures and fundamentals.
• Developing risk management methodologies.
• Analyzing test results to develop risk and threat mitigation plans.
• Working with market-leading vulnerability management tools including the ability to deploy, configure, and run these tools. 
• Vulnerability concepts and prevalent vulnerability types such as SQL injection, cross-site scripting (XSS), cross-
  site request forgery (CSRF), path traversals, denial of service (DoS), buffer overflows, command injection, race conditions, open redirects, privilege escalation, authentication bypasses, XML External Entity (XXE) attacks and similar. 
• Working with privilege and high/low trust boundaries and what defines a vulnerability vs. weakness.
• Vulnerability and risk scoring frameworks and methodologies such as CVSSv2 and CVSSv3. 
• Working with vulnerability repositories (NVD, CVE MITRE, and VULdb) and exploitation techniques (MITRE ATT&CK
  and DEFEND). 
• Web application (OWASP) and OS-level vulnerability categories and documentation. 
• Communicating how an attacker would exploit vulnerabilities and the types of attacks they could be used for. 
• General threat landscape of an IT network and how vulnerabilities and exploitation of them impact it. 
• Patch management and software development lifecycle (SDLC). 
• Security operations, vulnerabilities and exploitation, network
  security, cloud security, and a comprehensive background in information security. 
• Working with commercially available threat intelligence sources and toolsets. 
• Using open-source and human information sources to track and collect information on adversaries, malware, campaigns, and related malicious infrastructure.
• Conducting all-source research on a wide range of cyber issues. 
• Leveraging Tableau or PowerBI to collect and visualize metric data. 
• Administering a SharePoint environment. 
• Portfolio management. 
• Resolving complex problems including organizing and structuring solutions. 
• Developing executive level briefing materials and reports. 
• Program and Project Management methodologies. 
• and JIRA. 
• Eliciting and identifying requirements. 
• Reviewing program and generating formal review documentation. 
• Coordinating, supporting, and participating in program meetings and reviews. 
• Reviewing and identifying inconsistencies in program plans.
• Supporting division-level budget and plans activities. 
• Working with project management activities such as planning projects, meeting objectives, developing contingencies, and producing schedules. 
• Managing meetings to include meeting minutes, organizing, scheduling, and facilitating.

Highly Desired Qualifications

• Communicating vulnerability results and risk posture to senior executives. 
• Performing complex technical tasks with minimal direction. 
• Bachelor's degree in Computer Science, Information Systems, Engineering, or other related scientific or technical
  discipline. 
• Working with Confluence. 
• Working with advanced analytic features within Excel such as PivotTables, PivotCharts, VLOOKUP. 
• Malware reverse-engineering techniques. 
• Threat hunting in large distributed environments.

What We Offer You