Security Engineer - Remote

SemanticBits, LLC
13921 Park Center Road Suite 420
Herndon, VA 20171
United States

Industry
Healthcare & Social Assistance
Application Closing Date
12/31/2020
Experience Required
Yes
Degree Required
Yes

Job Description
SemanticBits is looking for a Security Engineer to keep our business, users, and data safe by assuring the security of our applications and platforms. This will be a highly collaborative position, in which the right candidate works to secure existing applications and platforms, makes platform and security enhancements, and helps to scale our security program through automation, process improvement, and tool creation.
The selected candidate will be required to work on multiple products and must be able to develop and present secure solutions and advice to technical teams as well as leadership. The candidate will further be required to assess risks and advise on security standards, best practices, and solutions. All this must be done by maintaining security quality and customer satisfaction.

Responsibilities:
Collaborating with various teams to secure new platforms/applications
Implementing platform security and framework improvements
Implementing analysis and monitoring tools
Working with engineering and QA teams to build tools and scale security in a continuous deployment environment
Assessing the security of applications, APIs, and platforms via penetration testing and code reviews
Document System Security plan and Contingency Plans for related projects
Job Requirements
A Bachelor's degree or higher in Computer Science, Electrical Engineering, Information Assurance, Network Security Computer Engineering or a related field, or equivalent experience
At least 5 years of experience in the following;
NIST 800-53 security controls
Penetration Testing
System Hardening (blue team)
Programming/Scripting (java, node, python, etc)
Incident Response
Strong knowledge to perform below tests:
Penetration testing
Static Analysis/Static Application Security Testing
Vulnerability Assessment/Scanning
Dynamic Analysis/Dynamic Application Security Test (DAST)
Malicious Software Analysis
Strong foundation in one or more of the following:
Data management security
Authentication
Applied cryptography
Linux security
Network & Cloud security
Advanced knowledge of Linux platforms
Advanced knowledge of application mobile security tools
Strong technical acumen securing software and hardware
Understanding of software development and working experience with any one of the higher level programming languages or scripting
Familiarity and experience with security technologies such as security engineering, security architecture, cryptography, data security, risk management, identity and access management, communication and network security, security assessment and testing, software development security, security operations
Familiarity and experience with popular open source security projects such as OWASP ZAP and Snort
Thorough understanding of issues documents in the OWASP Top Ten and CWE Top 25
Demonstrated ability to exploit and mitigate application-level vulnerabilities
Strong understanding of cryptography as applied to web application security (encryption, hashing, PKI management), including analysis and implementation
Experience using Linux/Unix at the command line for tasks related to web application development and deployment (DevOps)

One or more of the following certifications is preferred;
OSCP, OSCE, OSWE, CISSP, GPEN, GXPN

Nice to Have:
Strong engineering background
Application architecture experience
Experience working in the healthcare industry
Federal Government contracting work experience
Prior experience working remotely full-time

Physical and emotional requirements for the job:
This position is to be performed remotely from an individual’s home office and involves sedentary work. Employees in this role can be expected to exert up to 10 pounds of force on occasion in order to lift, carry, push, pull or otherwise move standard electronic equipment. Employees are expected to make decisions in a timely manner and display emotional intelligence during occasional stressful situations.
Benefits:
Generous base salary
Three weeks of PTO
Excellent health benefits program (Medical, dental and vision)
401k retirement plan. We contribute 3% of base salary irrespective of employee's contribution
100% paid short-term and long-term disability
100% paid life insurance
FSA
Casual working environment
Flexible office hours
New laptop (Mac or PC - your choice)

SemanticBits, LLC is an equal opportunity, affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other characteristic protected by law. We are also a veteran-friendly employer.
Employer
Padra Xiong
13921 Park Center Road Suite 420
Herndon VA 20171
United States

View Count 155