Security Engineer II

OBXtek is recruiting for a Security Engineer II to work on the PEO-T contract for USTRANSCOM.

The tasks for this person will be, but not limited to, the following:

• Formulates/defines test cases based on system requirements and specification.
• Devises or modifies procedures to test a unit or a system as a whole. Perform test cases, documents the result, and tracks changes.
• Prepares detailed specifications from which program bugs will be corrected and follows up with additional tests to ensure proper functional and system behavior per spec.

Standard work hours are 0700-1700.

Active Secret Clearance

1 year relevant experience in the following:

• Expertise to develop and/or review system authorization documentation in accordance with DoD implementation of the Risk Management Framework (RMF)
• Experience participating in TIMs on a wide range of PMO security engineering meetings
• Experience participating in Acquisition program Engineering Milestone Reviews,
• Experience coordinating with development Contractor security/system engineers and USTRANSCOM/DISA Security Office to resolve program security issues
• Possess skills to conduct Technical Reviews of development Contractor produced security deliverables
• Experience performing security activities to maintain authorization of the PMO programs
• Experience using the DOD Enterprise Mission Assurance Support Service (eMASS) system
• Experience providing support to ensure PMO system(s) are designed, developed, and deployed in accordance with applicable Executive Orders, Federal Policy, DOD regulations, USTRANSCOM requirements, and commercial best practice
• Experience performing vulnerability scans using ACAS, Nessus, and Fortify SCA, analyze outputs to identify vulnerabilities, and recommend mitigation and remediation actions
• Experience implementing DISA STIGS and verifying application
• Experience writing and tracking POA&Ms
• Experience conducting and evaluating security testing activities including security assessments, audits, and penetration testing
• Experience supporting operational security activities e.g., firewall implementation, risk mitigation, host security, encryption, intrusion detection, Virtual Private Network (VPN) implementations, and viral detections
• Experience with security lockdown and/or hardening of servers and network devices
• Ability to coordinate overall security strategy with multiple agencies, Authorizing Official (AO) representatives
• Ability to coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues
• Experience recommending changes to network and security architecture to improve security posture and meet operational performance requirements

Education/Certifications:

• Bachelors in Engineering, Computer Science, or Cybersecurity or equivalent
• Required Certifications:
  • IAM II (one of these: • CAP • CASP+ CE • CISM • CISSP • GSLC • CCISO)
  • Sec+ 

Standard work hours: 700-1700 CST.

COVID Policy: Prospective and/or new employees will be required to adhere with OBXtek’s COVID-19 policy. Employees working onsite at a customer location must comply with customer COVID-19 policy which may include any or all the following: social distancing, masks, vaccination, mandatory statements regarding one's vaccination status and mandatory testing.

Headquartered in McLean, Virginia and founded in 2009, OBXtek is a fast-growing leader in the government contracting field. Our mission is Our People…Our Reputation. Our people are trained professionals who enhance our customers’ knowledge and innovation using technology, collaboration, and education.

We offer a robust suite of benefits including comprehensive medical, dental and vision plans, Flexible Spending Accounts, matching 401K, paid time off, tuition reimbursement plans and much more.

As a prime contractor for 93% of our current work, OBXtek pairs lessons learned across disciplines with industry standard quality practices such as CMMI-Dev Level III, ITIL, 6Sigma, PMI, and ISO. Our rapid growth has been recognized by INC500, the Washington Business Journal, and Washington Technology magazine.

OBXtek is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, age, national origin, gender identity, disability, veteran status, sexual orientation or any other classification protected by federal, state or local law.