Security Engineer

Summary

Join GuidePoint Security as a Network Security Engineer and contribute to the design, development, and implementation of enterprise network cyber defense capabilities. You will work individually or in a small team, potentially leading projects to analyze and resolve issues. Responsibilities include planning and implementing policy changes on Palo Alto firewalls, assisting in network security architecture design, and administering enterprise load balancers. You will also investigate and document security incidents, implement corrective measures, and brief senior leadership and government stakeholders. This role requires 4+ years of experience with cybersecurity tools, especially Palo Alto Firewalls, and experience with Windows and Linux systems. US citizenship is required.

Requirements

• 4+ years of experience with privileged and elevated access using cybersecurity tools, especially Palo Alto Firewalls
• US Citizen with clear background (active Public Trust clearance is preferred)
• Experience with Windows and Linux, including installing, configuring, or maintaining servers operating systems and applications
• Experience working with STIGs, SCAP, and cybersecurity best practices
• Knowledge of Risk Management Frameworks
• HS diploma or GED and 7+ years of experience conducting or supporting cyber engineering projects and activities, Associate’s degree and 5+ years of experience conducting or supporting cyber engineering projects and activities, Bachelor’s degree and 3+ years of experience conducting or supporting cyber engineering projects and activities, or Master’s degree and 1+ years of experience conducting or supporting cyber engineering projects and activities

Responsibilities

• Participate on a team of skilled network security engineers responsible for the ingratiation, operations, and sustainment of a suite of enterprise class Cybersecurity technologies
• Perform the planning and implementing policy changes on Palo Alto next generation firewalls
• Assists in the analyses and design of a world wide network security architecture
• Administer configuration changes on enterprise load balancers that include enterprise TLS break/inspect
• Work focused special projects both independently and within a group
• Participate in the investigation and documentation of security related incidents
• Implement corrective measures in response to emerging network security threats
• Brief senior contract leadership and government stakeholders on the current status of the enterprise network security posture

Preferred Qualifications

• Palo Alto certifications (PNCSA, PNCSE)
• Trellix Endpoint Security Suite (ESS) (or former McAfee HBSS, ePO, FireEye MVX, NX, HX, PX, IA, AX, IAS PCAP), Splunk/Cribl, or ForeScout experience
• Experience with Cloud Enterprise, authorizing cloud systems, and Cloud services, including AWS, Azure, or GCP
• Experience with big data analytics, machine learning, artificial intelligence, or anomaly detection
• Experience with Zero-Trust Architecture
• Experience with DevSecOps, CI/CD, IaC and CaC, IT Infrastructure Library, and IT Service Management
• Experience in a consulting or client-facing environment
• Ability to automate security configurations of Linux and Windows systems, and recommend and implement remediations for non-compliant security controls

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family) and GPS will contribute in one lump sum: ($500 per EE annually / $1000 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option