Sr. Security Engineer

Position Details:
Job Title: Sr. Security Engineer
Job Type: Full-time
Location: Remote, DC
Revised: 1/13/2025
Dynanet Corporation Overview:
Dynanet is a small minority-owned business that has been providing IT services to Federal and State customers for more than 25 years. We were established in 1995 to deliver information technology engineering and management services to state and federal governments. Initially focused on IT infrastructure services, the company has expanded its services to include application services, cloud enablement, cybersecurity, automation, and management consulting. Dynanet is appraised on the CMMI ML3 DEV V2.0 rating, highlighting its focus on quality and process improvements. The company's growth and evolution have allowed it to align its expertise with the needs of the federal, state, and IT industries. 
About the Role:
We are looking for a highly skilled Sr. Security Engineer with expertise in understanding the threat landscape and implementing holistic countermeasures. In this role, you will focus on security architecture and incident management, contributing to the organization’s ability to identify, mitigate, and resolve cybersecurity threats effectively. 
Roles & Responsibilities:
As a Sr. Security Engineer, your responsibilities will include
1. Threat Analysis & Response:  · Conduct Web Application Firewall (WAF) traffic load analysis and monitor performance impacts. · Assess potential attack characteristics based on mission-critical infrastructure. · Identify and define site-specific data collection requirements to enhance threat detection capabilities.
2. Security Problem Resolution: · Analyze and resolve information security issues using expertise in major security products and services. · Recommend and implement security solutions based on knowledge of infrastructure security disciplines and technology limitations.
3. Cybersecurity Architecture & Compliance: · Design and implement robust cybersecurity controls across multiple environments. · Ensure compliance with NIST directives (e.g., 800-53), FedRAMP, and ATO processes.
4. Monitoring & Reporting: · Utilize tools like Splunk for monitoring, reporting, and dashboard creation. · Prepare and provide detailed security reports, including diagrams, for infrastructure and security teams.
5. Risk Management & Vendor Assessment: · Conduct third-party vendor risk reviews and cloud risk assessments. · Recommend strategies for mitigating cyber risks and remediating vulnerabilities.
6. Incident Management: · Lead the response to security incidents, ensuring rapid containment and resolution. · Document lessons learned and enhance incident response protocols based on real-world experiences.
Dynanet Team Requirements and Expectations: 

• Possess Strong written and verbal communication skills.
• Highly organized with an ability to prioritize, balance, and effectively advance multiple competing priorities in a high-volume, fast-paced environment.
• Ability to interact in a professional and collaborative manner with fellow Dynanet Teammates and the clients, and business partners that we work with.
• Ability and desire to challenge and educate yourself to support and advance IT services delivery in the Federal agencies we serve.
• Excellent judgment and creative problem-solving skills.
• Respond to team members and client requests via email, MS teams, or other communication means during core business hours.
• Active listening skills to understand clients' needs, and collaboration skills to work with other developers and designers.

Education/Experience Requirements: 

• Bachelor’s degree in computer science, IT or relevant field
• Extensive experience with:
  • WAF Solutions: Barracuda Cloud WAF, AWS WAF.
  • Monitoring Tools: Splunk (including monitoring, reporting, and dashboarding).
  • Security Solutions: DBProtect for database security and risk assessment.
• Proficiency in:
  • Cybersecurity architecture design and implementation.
  • Incident management and security incident response.
  • Vulnerability remediation and cyber risk mitigation.
• Familiarity with:
  • NIST directives (e.g., 800-53), FedRAMP, and the ATO process
• Experience conducting third-party vendor risk assessments.
• Strong technical skills in creating detailed infrastructure and security architecture diagrams.
• Background in performing comprehensive cloud risk reviews.

Employee Benefits Overview:

• Industry Competitive Compensation
• Medical and Dental Insurance
• Paid Time Off/Holidays
• 401(k) Retirement Plans with Matching
• Remote Work
• Paid Training
• Employee Referral Program
• Employee Development Program