Microsoft Windows Networks Security Engineer

Leidos is searching to add support to our customer in a wide range of systems engineering, administration, and Cyber security & regulatory compliance services necessary to maintain and secure OPR information technology networks used in the detection and investigations of cybercrimes and CBP policy violations.
Primary Responsibilities:
Serve as a Tier III support to provide Cyber Investigations with wide variety of technical expertise on multiple operating systems and network platform technologies regarding system hardening, vulnerability management activities. i.e. asset management, scanning, compliance and configuration analysis and reporting in accordance with DHS and CBP Policies and FISMA Performance metrics. This includes but is not limited to:

• Monitor multiple threat and vulnerability sources to evaluate technical risk to the Government i.e. SANS, US-CERT advisories, DHS Information Security Vulnerability Bulletins and communicate relevant infrastructure alerts, bulletins, and technical advisories to the Government.
• The technical scanning and remediation and reporting of systems hardware, software vulnerabilities.
• Coordination of scanning methodology and Patch management, monitoring, deployment reporting, piloting, operational coordination and testing.
• Systems technical risk status, data analytics and weakness remediation reporting.
• Security Architecture consultation, review and documentation of new systems, test systems and changes to new and existing Government systems to ensure compliance with baseline security and best practices.
• The development and maintenance Standard Operating Procedures to ensure coordinated risk monitoring and reporting.
• Make security content (e.g., Firewall, Router Switch) recommendations to include new access control, filters or ruleset modifications, removals to improve security posture and mitigate cyber threats.
• Assist the Government with the reporting and management of system level security violations and incidents.
• Assist with development of system Security Engineering SOPs, playbooks, work instructions, and other procedures and processes to mature cyber security capabilities.

Basic Qualifications:

• Require Bachelors Degree and 4 - 8 years of prior relevant experience in order to operate within the scope contemplated by the level.
• Additional experience in lieu of degree.
• 8+ years of successfully implementing advanced cyber security technology in a complex environment
• 5+ years' experience with CISCO and Juniper Networks
• Understanding of networking environments and related Technologies (routing, switching, VLANs, subnets, firewalls); Windows operating systems
• Understanding of IT security principals, technologies, best practices to include logical access control; PKI and other encryption methods; network-based and host-based IDS/IPS; security configuration baselines; auditing; vulnerability discovery and management
• Ability to work independently to identify errors, pinpoint root causes, and devise solutions with minimal oversight;
• Extensive in-depth technical experience with network infrastructure, operating systems, database, and web applications
• Experience with scanning and elevation tools (Nessus, Retina, Wireshark, NMAP, etc.); and,
• Excellent verbal and written communication skills.
• Understanding of networking environment to include networking technologies (routing, switching, VLANs, subnets, firewalls); TCO/IP stack' Windows operating systems; common networking protocols; and common enterprise technologies
• Demonstrated experience in testing and implementing network vulnerability and protection
• Senior-level knowledge of information security concepts, policy frameworks, and best practices
• Experience with Hardware Lifecycle Management, Software Maintenance and Assurance, Logging and Configuration Management

Preferred Qualifications:

• LINUX/UNIX-based operating systems; common networking protocols; and common enterprise technologies;
• ISC2 Certified Authorization Professional (CAP) or ISC2 Certified Cloud Security Professional (CCSP) certification or CompTIA Certified Advanced Security Practitioner (CASP+)
• CISSP, CISA, GIAC, Security +, Certified Ethnical Hacker, etc.

Clearance: All CBP SOC employees are required to successfully complete a CBP Background Investigation to support this program
Pay Range:
Pay Range $81,250.00 - $146,875.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.