IS/ Network Security Specialist III

• Focusing on user support and operational continuity, ensuring the platform remains available and usable
• Providing hands-on cyber security support for secure AWS services, enterprise network components, platform operations, mission-owner integrations, service requests, incidents, maintenance activities, and service-restoration efforts
• Evaluating and remediating potential security risks, including cloud, network, host, application, identity, firewall, load-balancing, WAF, certificate-management, and CI and CD pipeline security risks
• Maintaining network diagrams, configuration records, operational runbooks, knowledge articles, technical procedures, and service-support documentation
• Supporting the cyber security monitoring, vulnerability remediation, security-control validation, user support, incident handling, and operational continuity
• Providing operations and customer support for all services, to include, but not limited to:
  • Operating System Maintenance
  •  VPC Configuration
  •  Cloud Automation Tools
  •  Amazon Web Services (AWS)
  •  SCCA Network Components (Cisco Routers and F5 devices)
  •  SCCA firewall (Palo Alto)
  •  Identitfying and Access Management - Active Directory (AD)
  •  Multi-Factor Authentication
  •  Intrusion Detection and Intrusion Prevention System (IDS/IPS)
  •  Assured Compliance Assessment Solution (ACAS)
  •  Microsoft Defender
  •  Windows Server Update Services (WSUS)
  •  Online Certificate Status Protocol (OCSP)
  •  GitLab and CI and CD pipeline network connectivity, access controls, runner connectivity, and DevSecOps infrastructure support
• Providing cloud and network logging, monitoring, alerting, incident response, vulnerability remediation, configuration management, and continuous compliance activities

FILLING THIS POSITION IS CONTINGENT UPON FUNDING

#LI-LL1

• BS degree in engineering, physical science, physics, network security, computer science
• 10 years of experience in relevant technical field, to include: technology analysis and assessment, design definition, development of systems specification, systems analysis, systems architecture, systems/equipment integration, test & evaluation criteria
• Experience with cloud automation and infrastructure-as-code tools including Ansible, Terraform, CloudFormation, Lambda, Python, and JSON 
• Experience supporting AWS networking including Virtual Private Cloud (VPC), routing, security groups, network access controls, DNS, load balancing, and hybrid-cloud connectivity
• Experience with Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), vulnerability management, continuous monitoring, and cyber security compliance
• Experience developing technical documentation, network diagrams, configuration baselines, implementation procedures, operational runbooks, remediation plans, and technical reports
• Ability to identify network and cyber security risks, assess potential mission impact, recommend mitigation measures, and track remediation through closure
• Amazon Web Services (AWS) experience
• Holds a current CompTIA Security+ certification
• Five years of technical experience in cyber engineering, network infrastructure, networking, server virtualization, object-oriented programming, software development, software configuration, software installation, or cloud transition, and cyber security
• Desire to work in a secure lab environment
• Team player

• Network experience
• Experience supporting GitLab, GitLab runners, CI and CD pipeline connectivity, repository access, DevSecOps tooling, and network and security controls for software delivery
• Experience with container networking and container security
• Experience supporting AWS Secure cloud or federal mission environments
• Experience with Assured Compliance Assessment Solution (ACAS), Microsoft Defender, Windows Server Update Services (WSUS), and vulnerability-remediation activities
• SAFe (Scaled Agile Framework) Experience
• Recognized expert who has demonstrated industry and/or public service (e.g., federal, state, or local) leadership in Information Technology services
• Experience may be concurrent

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET ELIGIBILITY

• Travel one week per quarter to Charleston, SC or Stafford, VA

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.

Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.