XOR Security

Job Description: 
XOR Security is currently seeking talented Cloud Engineer to support an Agency-level enterprise cyber program.  To support this vital mission, XOR staff are on the forefront of providing Advanced CND Operations, and Security Engineering support to include the development of advanced analytics and countermeasures to protect critical assets from hostile adversaries. To support the integrity, security, and resiliency of critical operations, we are seeking candidates with diverse backgrounds in security engineering and systems administration. The ideal candidate will have a solid understanding of complexities related to cloud security, Operations and Maintenance (O&amp;M), cloud brokering, and cloud infrastructure implementation.   
Location: 
Washington D.C., USA  
Skills and Qualifications: 
Required Qualifications: 
<ul>
<li>Microsoft Azure </li>
<li>2-4 years of experience in cloud environments focused on security </li>
<li>2-4 years of experience in security engineering </li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.  </li>
</ul>
Job Duties: 
<ul>
<li>Possesses in-depth knowledge of information security, cloud security, systems engineering, big data, or the various sciences related to enterprise technology. </li>
<li>Possesses in-depth knowledge in information security, cloud security, systems engineering, big data, or the various sciences related to enterprise technology. </li>
<li>Participate in the improvement of agency's overall security posture and mission capabilities with the adoption of cloud computing technologies. </li>
<li>The Contractor shall actively participate in discussions to coordinate and align mission/business objectives and cloud technological capabilities to allow continued technology modernization within the agency. </li>
<li>Participates as needed in all phases of systems security engineering with emphasis on the planning, analysis, security, testing, integration, documentation, and presentation phases.  </li>
</ul>
<ul>
<li>Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures.  </li>
<li>Support the maturation of agency's enterprise architecture to align with the Commission's information security and risks to the organizational operations, organizational assets, and individuals.  </li>
<li>Develop alternatives of system designs and/or architectures which consider trade-offs between security requirements, functional/operational requirements and cost  </li>
<li>Identify and define the requirements of the overall security of the network.  </li>
<li>Plan, engineer, and monitor overall security implementation of network systems.  </li>
</ul>
<ul>
<li>Support in configuring and implementing network security tools.  </li>
<li>Test and provide solutions for system weaknesses, threats, security issues.  </li>
<li>Research and identify latest suitable technologies and processes that will improve the overall security of the system.  </li>
<li>Regularly audit the existing network configuration and provide improvement recommendations.  </li>
</ul>
Closing Statement: 
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits. 
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V. 
Citizenship Clearance Requirement Applicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Washington

Cloud Security Engineer

EMW, Inc.

Deadline Date: Tuesday 16 August 2022 Requirement: Penetration Testing Services Location: Mons, BE Full time on-site: Yes NATO Grade: A3/115 Total Scope of the request (hours): 570 Required Start Date: 19 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Duties and Role: The duties of the individual mainly focus on: <ul> <li>Provide Web and application level penetration testing;</li> <li>Provide security design reviews to ensure compliance with NATO policies and directives;</li> <li>Provide security consultancy and advice to projects, plans, and other entities;</li> <li>Brief at technical levels on security reports and testing outcome.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul><li>The candidate must have a currently active NATO SECRET security clearance.</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:<ul> <li>Web application and thick-client penetration testing;</li> <li>Assessing security vulnerabilities within OS, software, protocols &amp; networks;</li> <li>Researching and evaluating security products &amp; technologies;</li> <li>Knowledge in system and network administration of UNIX and Windows systems;</li> <li>Use of penetration testing tools, techniques, and recognized testing methodologies;</li> <li>Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);</li> <li>Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies;</li> <li>Ability to evaluate risks and formulate mitigation plans;</li> <li>Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan.</li> </ul>

Mons

SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug

CRI Group

DESCRIPTION OF THE TASKS
Following tasks will be performed by external service provider:- Technical responsibility for System and Networking projects - Provision of technical studies, technical expertise, and technical evaluations - Participation in meetings within the Commission - Design, engineering, testing, documentation, release control, maintenance, and technical support of Linux workstation environment- Assistance with training support staff and users- Drafting of technical, operational, and user documentation - Participation in coordination, project, and operational meetings.- Provision of expert advise and assistance, technology watch, evaluation studies, architectural considerations, applicable standards, solution patterns, and best practices in the specific are of Linux systems.- Provide support and follow up on incidents and problems related to his/her duties
KNOWLEDGE AND SKILLS
Following skills and knowledge are required for the performance of the above listed tasks: - Excellent knowledge of the Linux distribution (s) used in the European Commission including – but not limited to – system architecture, installation, configuration, maintenance, and support- Excellent knowledge of writing clear and structured analysis documents- Excellent communication skills with technical and non-technical audiences- Good knowledge of HSMs (certification in this field, e.g., Nshield will be considered asset)- Good knowledge of firewalls, and related VPN technologies- Good knowledge of LDAP authentication servers and networking- Good knowledge of Databases (certification in this field, e.g., Oracle will be considered asset)- Good knowledge of Security (certification in this field, e.g., CISSP/CISM will be considered asset)- Good knowledge of IT Infrastructure/Operations including virtualization and datacentres technologies- Practical experience in management of a secured environment- Ability to participate in technical meetings- Ability to apply high quality standardsDue to the nature of a large international organisation such as the European Commission, candidates should also have the following non-technical skills:- Fluency in English, both spoken and written- Capability of integration in an international/multicultural environment, rapid self-starting capability and experience in working in team
- Ability to work in multi-cultural environment, on multiple large projects- Excellent Team Player- High degree of discretion and integrity is required as the applications managed and maintained in DG CLIMA, E.3 unit contain personal and sensitive data
SPECIFIC EXPERTISE
Following specific expertise is mandatory for the performance of tasks:- at least 3 years of specific expertise in Linux virtualization and HSM management (min. competence level 4)
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Brussel

Linux Consultant with virtualization and HSM management expertise

<h3>Job Description:</h3>
XOR Security is currently seeking talented SOC Analyst for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. 
The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network.  The candidate will Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs and provide a technical resource and escalation point for tier 1 analysts.  The candidate will perform incident response to investigate and resolve security incidents.  The candidate will need to be able to determine between false and true positives events, prioritizing them appropriately and see them through from end to end.  Additionally, the candidate will perform or review root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.
In addition, the candidate will need to stay up to date with current vulnerabilities, attacks, and countermeasures.  The candidate will Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will Regularly develop new use cases for automation and tuning of security tools.  The candidate will Define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluate and implement enhancements.  The ideal candidate will possess a strong technical expertise of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards
Location:
Washington D.C., USA
Schedule:
6am - 2pm or 10am - 6pm. Analyst should be flexible for both for potential rotation.
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as GCIH</li>
<li>Experience with tools such as Active Directory, Cisco IOS, MS Server, ESA, WSA, Stealthwatch, AMP, Splunk, FortiSIEM, SNORT, Yara, IronPort, and Firepower.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Three (3) years of experience in network defense environments</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write new content/searches/scripts (e.g., Splunk dashboards, Splunk ES alerts, SNORT signatures, Python scripts, Powershell scripts)</li>
<li>Familiarity with Splunk Enterprise Security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
</ul>
<h3>Closing Statement:</h3>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Mid Level SOC Analyst

Deadline Date: Friday 12 August 2022 Requirement: Cyber Security Endpoint Engineer Location: Mons, BE Full time on-site: Yes NATO Grade: A/88 Total Scope of the request (hours): 570 Required Start Date: 12 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Specific Working Conditions: Normal Office Conditions. Exceptionally may be required to work outside of normal working hours or on a shift system for a limited period due to urgent operational needs such as support of delivery of critical services, major cyber incidents and other emergency scenarios Duties and Role: The contracted individual must be able to perform effectively and efficiently with minimal supervision. The contracted individual will be asked to support the development of one or more technical deliverables and/or provide support to projects and exercises. The duties of the individual mainly focus on: <ul> <li>Maintenance of the existing, supported, endpoint security products.</li> <li>Development of new security guides and configuration related to endpoint protection products like antimalware, Data Loss Prevention, application whitelisting and full drive encryption.</li> <li>Provide technical support to the NCSC, mainly remotely through email or telephone, over endpoint protection technologies.</li> <li>Maintain up to date the NCSC repository related to security guides.</li> <li>Test endpoint protection products during their lifecycle (new versions, patches) and with different configurations.</li> <li> Support and follow up the requests for change (RFC) for the endpoint protection products.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: Mandatory <ul> <li>The candidate must have a currently active NATO SECRET security clearance.</li> <li>Extensive practical experience with McAfee product suite</li> <li> Expert level and previous experience with (referred later as McAfee products):<ul> <li>McAfee Data Loss Prevention </li> <li>McAfee Application and Change Control</li> <li>McAfee File and Removable Media Protection (FRP)</li> <li>McAfee ePolicy Orchestrator</li> </ul> </li> <li>Prior experience in maintenance, operations and troubleshooting of McAfee products</li> <li>Managing the life cycle of McAfee products:<ul> <li>Tracking and testing new releases</li> <li>Updating and managing the current configuration to ensure best industry standards and organisational security requirements are met</li> <li>Updating the current documentation</li> <li>Co-ordinate and support implementation of required changes.</li> <li>Lead the change management process.</li> </ul> </li> <li>Support troubleshooting of McAfee products across the enterprise</li> <li>Develop documentation and configuration for McAfee products</li> <li>Liaise with vendor and provide third level support</li> <li>Practical hands-on experience in systems and tools administration.</li> <li>Comprehensive knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications.</li> <li>Troubleshooting of Linux and/or Windows infrastructures.</li> <li>Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams.</li> <li>Demonstrable ability to work autonomously and proactively, to understand the NCSC chain of command and to follow internal processes</li> </ul> Desirable The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas: <ul> <li>McAfee endpoint protection products like antimalware, Data Loss Prevention, application whitelisting and full drive encryption; including proven records of deliverables.</li> <li>Maintenance and administration of email protection products (such as Symantec Mail Security).</li> <li>Testing and validating that contracted deliverables meet the requirements and fulfil the intended use-cases.</li> <li>Good understanding of the constraints related to IT systems on NATO networks</li> <li>Experience with implementation projects within NATO and/or National military organizations</li> </ul>

C002329 Cyber Security Endpoint Engineer (NS) - FRI 12 Aug

Apply to Clearance Cyber Security Jobs in companies remotely and near you. New Clearance Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cloud Security Engineer at XOR Security	Full Time Audit Analytics Azure Big Data
SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug at EMW, Inc.	Full Time Contract Application Security Windows BASH
Linux Consultant with virtualization and HSM management expertise at CRI Group	Full Time CISM Consultant Cissp Clearance
Mid Level SOC Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response Active Directory
C002329 Cyber Security Endpoint Engineer (NS) - FRI 12 Aug at EMW, Inc.	Remote Full Time Contract Windows Clearance

Clearance Cyber Security Jobs

0 Clearance Cyber Security Jobs. Page 1 of 1

5 closed clearance cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Clearance Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Clearance Cyber Security Jobs

0 Clearance Cyber Security Jobs. Page 1 of 1

5 closed clearance cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Clearance Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter