Cyber Security Engineer Senior

General Dynamics Information Technology (GDIT) is a global technology and professional services company focused on delivering technology solutions to the U.S. government. They are seeking a Cybersecurity Engineer Senior to support security infrastructure for the CMS Center for Clinical Standards and Quality, implementing and maintaining security tools and responding to security incidents.

Responsibilities:

• The candidate will be responsible for administering, configuring, deploying, and maintaining Cisco FirePower Threat Defense (FTD) and SkyHigh Web Gateway appliances across the authorization boundary and enterprise-level environments
• Implement advanced intrusion prevention systems (IPS) using CISCO FirePower to identify and block malicious traffic
• Implement CISCO routers (CSRs) to do Policy Based Routing (PBR) on all network traffic from the Virtual Private Clouds (VPC)
• Design and optimize Security Rule Sets (SRUs) and tailor policies to meet organizational and mission-critical security requirements
• Perform threat analysis, event correlation, and deep packet inspection to mitigate emerging cyber threats
• Configure and manage Cisco FireSight/FirePower Management Center (FMC) for centralized policy management, event monitoring, and system reporting
• Integrate FirePower NGIPS with other security solutions such as SIEM or SOAR platforms to enable automated threat response capabilities
• Perform system upgrades, signature/engine updates, and antivirus pattern maintenance to ensure continued protection
• Conduct regular audits and vulnerability assessments within FirePower systems to identify gaps in coverage
• Troubleshoot Cisco FirePower appliances for performance issues, ensuring high availability and resilience across the network
• Collaborate with cross-functional IT and security teams to optimize firewall configurations and enforce Zero Trust principles
• Collaborate with CCSQ Security Operations Center (SOC), Cloud Solutions Engineers, and Application Development Organizations on blocking notifications and proactive optimization of the tools
• Create and maintain detailed documentation for system configurations, policies, procedures, and operational tasks
• Provide technical expertise, guidance, and training to internal teams on Cisco FirePower operations and best practices
• Strong background with AWS security concepts, tools, and services
• Ability to work in fast paced environment, Self-motivated with a strong ability to work in a multi-tasking and changing environment
• Experience working in an Agile environment
• Support Security audits as needed and to advise ADO from a Tier2 or 3 perspective and to support security events of interest
• Demonstrated experience with and exposure to the above stated security appliances

Requirements:

• 5 + years of related experience
• Bachelor's Degree in Computer Science or related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience
• 5+ years of related experience in maintaining security systems in cloud environments
• Experience in Amazon Web Services (AWS) Cloud Environments and the CMS CCSQ/QNET a must
• Documented history configuring, maintaining, tuning, reporting, remediating from multiple security tools and services
• Background in AWS Security services including Guard Duty, Security Hub, Inspector
• Proven ability to resolve security findings from security scanning
• Ability to pivot and learn new tools on demand
• Knowledge of system hardening benchmarks such as USGCB & STIG
• SEIM experience with Splunk
• Strong communication skills
• Ability to work in fast paced environment
• Self-motivated with a strong ability to work in a multi-tasking and changing environment
• Experience working in an Agile environment
• Certification in cloud security, such as AWS Certified Security Specialty, CISSP, or security related discipline
• Strong understanding of key management and certificate management
• Knowledge of system hardening benchmarks such as CIS
• Experience with Crowdtrike Falcon, Palo Alto NGFW & Snyk