Senior Cyber Security Infrastructure Engineer

Company: Attain
Location: Pittsburgh
Posted on: November 19, 2020

Job Description:

Who We Seek Passion Seekers. You genuinely care about the work that you do and its impact on society. Self-Starters. You're a go-getter who isn't afraid to step up and disrupt the status quo. Entrepreneurs. You bring fresh ideas to the table, work hard, develop business and consistently seek new challenges. Collaborators. You're a great contributor to a high performing team that accomplishes great feats for our clients. What You Will Do Attain is currently seeking a Cyber Infrastructure Team Lead responsible for ensuring the project's Cyber Infrastructure and cyber tools remain operational, are properly integrated with the environment, and meet the required mission needs. The candidate will assist the client in ensuring cyber tools are configured and used to protect overall confidentiality, integrity, and availability of data and resources in accordance with departmental requirements and in compliance with applicable laws, regulations, and security controls, procedures, and operational requirements. Oversee a small team to provide engineering and administrative support for all cyber systems and tools including ServiceNow, SIEM, vulnerability management, incident response, and other cyber security solutions Provide real-time monitoring of the health and functionality of Cyber Systems and reporting performance metrics (KPIs)Cross-functional coordination of ongoing operational concerns, patches, fixes, upgrades, and enhancements for cyber infrastructure and applications Ensure the incorporation of industry best practices throughout the Cyber program which consists of defending the IT environment from cyber threats detecting compromises, weaknesses and incidents and responding to those events to prevent further damage Provide technical expertise and support related to the evaluation, development, and application of information security technology, plans, policies, and procedures Provide regular status and progress of ongoing initiatives and projects Manage backlogged enhancements, in-progress work efforts with the team, opportunities for process, system and architecture improvements Deliver business value through API integrationscustom developed interfaces Assist with the testing, implementation, integration, and administration of cyber tools and capabilities, including the ServiceNow ITSM platform Enhance Discovery, Configuration Management Database (CMDB), Service Mapping, Incident Management, Change and Release Management, and Performance AnalyticsReporting capabilities within the ServiceNow Platform Enhance Cyber Security Operations and user experiences within ServiceNow modules for Cyber Security Operations Collaborate with business analysts to develop and document business requirements for ServiceNow module capabilities in support of Cyber Security initiatives Support ServiceNow integrations with cyber technical tools, e.g. SIEM, Vulnerability Management, Network Monitoring, Endpoint DetectionResponse, Incident Response, and others Assist the Cyber Security Manager with security control's Continuous Monitoring (CM) and Continuous Diagnostic and Mitigation (CDM) planning and implementation, and the creation and maintenance of all associated Assessment and Authorization (AA) documentation in accordance with Federal, DOE and NETL regulations, procedures and processes Participate in risk assessments to determine whether additional countermeasures beyond those identified in the relevant system security plan are required and whether an identified unique local threat exists Assist cyber teams in documenting residual risk and mitigation measures such that the AOAODR can make determinationdecision relative to the acceptability of risk and the resultant impact on an authority to operate Assist in identifying, prioritizing, and coordinating the protection of cyber infrastructure and key resources (i.e. Prioritize Disaster Recovery efforts for cyber infrastructure, etc.) Required Skills Ability to manage and lead direct reports Understanding of information technology and telecommunications systems working knowledge of network interoperability, cybersecurity, and survivability issues, including cybersecurity best practices and standards Experience working with technologies including but not limited to LinuxUnix, Windows systems, KVM, Hypervisor, OpenStack, Docker, Salt, Ansible, and Terraform Strong knowledge in system administration, scripting (such as python, bash, VB, PowerShell, etc.), remote management, troubleshooting, and understanding of IT System health monitoring Strong understanding of enterprise IT, including networking infrastructure, systems administration, data centers, and software applications and the development life cycle Familiarity with NIST and Federal Information Processing Standards (FIPS) to include NIST standards and special publications Reasoning and problem-solving skills (including, but not limited to skills in troubleshooting and diagnosing cyber defense infrastructure anomalies, as well as working through resolution) Work in a matrix organizational structure and distributed team environment Ability to implement project plans and document progress of assigned tasks Ability to prepare and deliver presentations to technical and non-technical audiences Strong written and verbal communication skills Desired Skills Government IT experience is highly desired Familiarity with cyber security and auditing tools Skill in securing network communications Skill in using incident handling methodologies for next level support, if needed Skill in system, network, and OS hardening techniques. (e.g. remove unnecessary services, password policies, least privilege, etc.) Skill in applying hostnetwork access controls (e.g. access control list) Experience working with various ServiceNow modules Years of Experience 7-10 years Certifications A certification in IT-related security principles or auditing (e.g., CISSP, ITIL, CISA, CASP, CCSK, CISM, or SANs Program certifications) is highly desired Minimum Education Required Bachelor's Degree About Us Attain is a place for great ideas and the people who have them. As a digital solutions, management, and strategy consulting firm, our professionals provide innovative solutions to revolutionize government, education, health, and nonprofit organizations and positively impact those they serve. We are business analysts, technologists, digital strategists, managers of change, and forward thinkers, with the entrepreneurial drive to shape the future. With a nationwide presence, our team is in 40 states and the District of Columbia. Visit www.attain.comcareers httpwww.attain.comcareers to explore your path forward with Attain. Attain is an Equal OpportunityAffirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Applicants have rights under Federal Employment Laws. For more Information visit EEO httpsurldefense.comv3httpswww.dol.govofccpregscomplianceposterspdfeeopost.pdfF1XoHSsTIdq0zG-EsHDg3zrd1On8uw1NQi5AqXf4cZ4nFMnSDJkyPC5EiL7SiKes , EEO Poster Supplement httpsurldefense.comv3httpswww.dol.govofccpregscomplianceposterspdfOFCCPEEOSupplementFinalJRFQA508c.pdfF1XoHSsTIdq0zG-EsHDg3zrd1On8uw1NQi5AqXf4cZ4nFMnSDJkyPC5EiBQrAYh0 , Family and Medical Leave Act (FMLA) httpswww.dol.govsitesdolgovfilesWHDlegacyfilesfmlaen.pdf , and Employee Polygraph Protection Act (EPPA) httpswww.dol.govagencieswhdpostersemployee-polygraph-protection-act .

Keywords: Attain, Pittsburgh , Senior Cyber Security Infrastructure Engineer, Other , Pittsburgh, Pennsylvania