Senior Cyber Security Engineer – REMOTE Arlington, VA 22203 Work remotely from a U.S. – based location! We are recruiting for a senior level Cyber Security Consultant to support security and risk analysis for a DoD program. Qualified candidates will have demonstrated expertise to identify security requirements built on business category, project mission, application baseline, and architecture design. This position requires experience leading report creation and providing shareholders with metrics to identify and track security trends. Duties and responsibilities include (but are not limited to): Support application security requirements for a DoD customer. Identify, analyze, and report on security impacts using commercial off the shelf (COTS) vulnerability scanning, dynamic application security testing (DAST), and static application security testing (SAST) tools. Assist in defining requirements, designing, and structuring security components, and testing efforts. Support related documentation Other duties, as assigned Education and qualifications include (but are not limited to): U.S. citizenship Current Top Secret security clearance Bachelor’s degree in a related discipline; additional years of related experience in lieu of a degree will be considered. Current Security certification to meet DoD 8570 IAT II compliance requirements 7 years of related experience supporting Cloud Cyber Defense including: Cyber Security Management, Code scanning tools, Vulnerability Management & Reporting, and OWASP Top 10 Knowledge of Risk Management Framework (RMF) controls for application security Experience defining requirements, designing, and structuring security components, and testing efforts Experience leading report creation and providing shareholders with metrics to identify and track security trends. Effective written and verbal English communication skills to interact at all program levels Must be self-driven and able to work independently in a dynamic environment with a blended government and contractor team
- RMF #DAST #SAST #OWASPTop10
- CJ
cots Dynamic application security testing (DAST) sast Cybersecurity OWASP