DHS HSEN - Senior Security Tools Engineer

Who We Are:

Headquartered in Washington, DC, Versar Global Solutions provides full mission lifecycle solutions for challenges faced by our government and commercial Customers in the natural, built, and digital environments. With nearly 2,000 team members around the world, and a rich legacy spanning more than 70 years, Versar Global Solutions delivers a broad array of planning, analysis and risk management solutions, project and program management, operations and maintenance services, and information technology applications for environmental management and remediation projects, mission critical facilities and installations, and in support of readiness and contingency operations.

Who You Are:

Versar Global Solutions is seeking a Senior Security Tools Engineer to support the DHS' Homeland Security Enterprise Network (HSEN) within the Office of the Chief Information Officer (OCIO), IT Operations, Enterprise Engineering Division (EED). This Security Tools Engineer will be a member of a high functioning team of network and security engineers, data center specialists, and stakeholder groups, such as the DHS Network Operations Security Center - Cyber (NOSC-Cyber), ISSOs, and industry vendors, working to continually strengthen and secure HSEN and its data.

The candidate's primary responsibilities are to provide for enhanced security monitoring and to own the creation, documentation, and administration to a category of security hardware and software to include tool areas like Data Migration Assistant (DMA), Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), malware analysis, forensics, encryption, continuous monitoring tools, and incident and case tracking and ticketing.

What You'll Do:

• Provide support for the administration, maintenance, configuration, patching, upgrades and optimization of security tools, devices, application systems, and servers and sensors within the cybersecurity infrastructure.
• Maintain SIEM applications to collect and aggregate IDS and IPS data from network sensors, raw data from collection agents, firewalls, proxy servers, DLP, antivirus, vulnerability scanner elements, and other security-relevant devices.
• Support and evolve the interfaces between network, SOC, and systems information into the SIEM tool using information from the Information Assurance Compliance System (Xacta) and input from ISSOs; perform asset categorization and prioritization.
• Ensure tools administration with disaster recovery and fail-over procedures in place for security tools, databases, server roles to include but not limited to: (DNS, Adm , Remote desktop), Active Directory, DNS, Remote Desktop, Domain Tools, Infoblox DNS Threat Analytics, DbProtect, Venafi, RedSeal, Burp Suite Pro, Suricata, SAVScan, NetWitness, ArcSight, FireEye, Swimlane, Splunk, Grafana, Crowdstrike, Wireshark, Broadcom Bluecoat, Sophos, Palo Alto MineMeld, Palo Alto DLP, Mcafee (ePO, DLP), Volexity, Symantec Endpoint Protection, ProofPoint, O365 DLP. FireEye (EX, HX, NX), CA PAM, Thycotic Secret Server, Sailpoint, RSA Archer, Tenable/Nessus, Tanium, and EnCase.

What You'll Bring:

• BA or BS (Cyber Security, Computer Science, Information Systems, Software Engineering, Computer Engineering, or related field); relevant experience may be a substitute for education.
• At least six (6) years of professional experience in an IT Services environment, providing technical support with emphasis on cybersecurity and security tools.
• Demonstrated experience with network and security management tool suites, with an emphasis on SIEM and SOAR solutions.
• Knowledge of deploying, developing and maintaining in a virtual environment.
• Strong tools customization and integration skills, database, scripting and web front-end experience.
• Working knowledge of a variety of security/networking technologies to communicate and collaborate on issues and solutions with other engineers.
• Strong knowledge of IT security related to networks and applications.
• Must be resourceful in learning a very complex and dynamically changing network.
• Must be a self-starter, able to work independently, and able to manage time effectively.
• Working knowledge of cloud platforms such as AWS, Azure.
• Past experience working in a fast-paced SOC or NOC environment is a plus.
• Ability to communicate effectively with all levels of an organization from engineering, operations, and management.
• Be authorized to work in the US or will be authorized by the successful candidate's start date to be eligible for a DHS EOD is required.
• Must be proficient in English, both written and verbal, to ensure effective communication and collaboration.
• Successful results of preemployment screenings, including federal background check, MVR, and drug screen.
• Comply with company drug and alcohol policy.

Preferred Qualifications:

• Certification involving cybersecurity
• CompTIA Security+ certification
• Working knowledge of Splunk and Swinlane
• Knowledge of at least one programming or scripting language (ex. Python, PowerShell, PHP, Perl)
• Windows/Linux experience

Location Requirements

The position will primarily remote; however, preference will be given to those local to the MD/DC/VA areas.

Compensation

Expected Salary: $110,000 - $130,000 per year

Versar Global Solutions is providing the compensation range and general description of other compensation and benefits that the Company in good faith believes it might pay and/or offer for this position based on the successful applicant's education, experience, knowledge, skills, and abilities in addition to internal equity and geographic location. The Company reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant's status protected by local, state, or federal law.

EEO Commitment

Versar Global Solutions is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Versar Global Solutions complies with applicable state and local laws governing non-discrimination in employment in every location in which the company operates. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Versar Global Solutions expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, marital status, amnesty, or status as a covered veteran. Improper interference with the ability of Versar Global Solutions employees to perform their job duties is not tolerated.