Security Engineer

StraitSys Inc provides cybersecurity engineering and technical security support for enterprise application modernization efforts supporting the Executive Office for Immigration Review. The Security Engineer will design, implement, test, and maintain security controls, support vulnerability remediation and security assessments, and help ensure compliance with Department of Justice and Federal cybersecurity requirements.

What you'll do:

• Support the design, implementation, configuration, and maintenance of security controls for applications, systems, and supporting environments
• Collaborate with solution architects, developers, system administrators, and Government stakeholders to incorporate security requirements throughout the system development lifecycle
• Review system designs, configurations, interfaces, and technical implementations to identify potential security risks and vulnerabilities
• Support security assessments, vulnerability scanning, remediation activities, and validation of corrective actions
• Identify, document, track, and assist with the remediation of security findings and vulnerabilities
• Support implementation and maintenance of identity and access management, authentication, authorization, least privilege, and role-based access controls
• Assist with security configuration and hardening of applications, cloud resources, databases, integrations, and supporting infrastructure
• Support security testing throughout development, integration, testing, deployment, and ongoing operations
• Collaborate with development and operations personnel to incorporate secure development and DevSecOps practices into application development and deployment processes
• Support security monitoring and assist with the identification, analysis, response, and remediation of security incidents as required
• Develop and maintain security-related technical documentation, procedures, configuration information, and supporting artifacts
• Support the preparation and maintenance of documentation required for system security, authorization, assessment, and ongoing compliance activities

What they're looking for:

• Experience supporting the Department of Justice (DOJ), EOIR, or other Federal civilian agencies
• Experience providing cybersecurity engineering support for enterprise application modernization or digital transformation initiatives
• Experience securing cloud-based, hybrid, and Microsoft technology environments
• Knowledge of Federal cybersecurity requirements, security controls, risk management, and system authorization processes
• Familiarity with the NIST Risk Management Framework (RMF) and NIST security controls
• Experience with vulnerability assessment, security scanning, remediation, and security configuration management
• Knowledge of identity and access management, authentication, authorization, least privilege, and role-based access controls
• Familiarity with application security, database security, API and integration security, and secure software development practices
• Familiarity with Microsoft Azure, Microsoft 365, and related enterprise technologies
• Experience working within Agile software development and DevSecOps environments
• Strong analytical, troubleshooting, and problem-solving skills
• Ability to effectively communicate cybersecurity risks and technical information to technical and non-technical stakeholders