Security Engineer

MetroStar Systems is looking for a Security System/Information Assurance Engineer who is
passionate about network and data security. You must have strong communication and
leadership skills to interact with client business leaders, stakeholders, and other senior level
executives. If you want to join a company that values mission-critical work and are open to
commuting to Washington, DC, we want you to work for MetroStar!
Our team is responsible for providing information management and information technology
support. Come be a game changer and join our team!

You're a great fit if you:

• can analyze and evaluate system security technology, policy, and training requirements in
support of Federal, DOD, and Intelligence Community (IC) and INFOSEC policies
• can Develop, maintain, and coordinate System Security Plans (SSP) to meet all IC and
DOD accreditation requirements
• have excellent collaboration, communication, technical skills and experience
• can establish and maintain a high level of client trust and confidence

You'll love this position if you have: (This is the stuff you MUST have to be a fit)

• a minimum of 3 years of experience identifying and mitigating vulnerabilities.
• a Bachelor’s in Computer Science, Information Systems, Engineering, Business or
Mathematics
• an active TS/SCI clearance
• an active CISSP or Security+ Certification
• experience with NIST 800.53 current revision
• experience with ICD 503 and 507 guidelines
• experience with DoD Risk Management Framework
• experience with vulnerability identification and remediation
• strong written and oral communication skills

We'll REALLY love you if you: (This is the bonus stuff that makes you stand out)

• have experience with NESSUS vulnerability scanning
• have experience with Splunk log correlation engine
• have experience with McAfee end point protection
• have experience patching servers and network devices
• are familiar with IC incident reporting procedures
• have experience performing data collection and analytics using User Activity Monitoring
tools
• are customer and relationship-focused, process-driven, results-oriented, and self-
motivated

What your day will look like:

• You'll review logs and scan results for known and zero-day vulnerabilities across
multiple voice and data networks
, • You'll provide expert assistance to the customer for incident mitigation
• You will identify and mitigate vulnerabilities using alternate or compensating controls
• You will support, monitor, test and troubleshoot IA software issues to ensure timely
response actions to security incidents
• You'll implement applicable patches including IA vulnerability alerts (IAVA) IA
vulnerability bulletins (IAVB) and technical advisories
• You will recognize potential security violations and take appropriate reporting and
resolution measures

The Admin Stuff: In compliance with federal law, all persons hired will be required to verify
identity and eligibility to work in the United States and to complete the required employment
eligibility verification form upon hire.

The Legal Stuff: MetroStar Systems is committed to creating a diverse environment and is
proud to be an equal opportunity employer. All qualified applicants will receive consideration for
employment without regard to race, color, religion, gender, gender identity or expression, sexual
orientation, national origin, genetics, disability, age, or veteran status. The statements herein are
intended to describe the general nature and level of work being performed by employees and are
not to be construed as an exhaustive list of responsibilities, duties, and skills required of
personnel so classified. Furthermore, they do not establish a contract for employment and are
subject to change at the discretion of MetroStar Systems.