Information Security Engineer

Overview

For two decades, Millennium Corporation has been operating on the leading edge of cybersecurity. Our elite team of more than 400 experts has an unparalleled record of performance supporting Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. With the largest contingent of contracted Red Team operators in the DoD, we provide an unmatched level of threat intelligence and battle-tested experience for customers in both the DoD and federal civilian markets.

What We Believe

We believe that diversity is a fact, inclusion is a choice.  At Millennium Corporation, we are inclusive. We celebrate multiple approaches and different points of view. We strongly believe that diversity drives innovation, and we are building a culture where differences are valued. We are always growing our programs and we offer tools to help our employees grow and manage their careers.

Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law. Millennium promotes affirmative action for women, minorities, disabled persons, LGBTQ+ and veterans.

Responsibilities

Millennium Corporation is hiring an Information Security Engineer in Annapolis, MD. Candidate must have an active Top Secret/SCI clearance with eligibility to obtain CI Polygraph.

The Information Security Engineer will be responsible for assisting the government by providing the design, implementation, and maintenance of IT systems within the SCIF, ensuring compliance with stringent security requirements and best practices.  The Information Security Engineer will also:

• Provide senior-level system administration and engineering oversight for hardware, software, and network components.
• Partner with the ISSM to develop and enforce security policies and procedures in alignment with NIST RMF guidelines. 
• Design, install, and manage security mechanisms that protect networks and information systems against hackers, breaches, viruses, and spyware. 
• Respond to incidents, investigate violations, and recommend enhancements to plug potential security gaps. 
• Analyze data to spot trends, and create tools to support research efforts.
• Mitigate threats by gathering information and developing plans, and monitor networks for security breaches. 
• Create and test disaster recovery procedures to keep IT running in the event of a security breach.
• Research data and new technologies, and gather information on the latest risks. 
• Utilize specialized expertise, up-to-date knowledge, and proficiency in analysis, forensics, and reverse engineering to monitor and diagnose malware events and vulnerability issues resulting in Web threats that facilitate cybercrime.  
• Collaborate with the ISSM to develop and enforce security policies and procedures in alignment with NIST RMF guidelines as well as A&A process.  
• Assist the government in developing and maintaining comprehensive System Security Plans (SSPs) and other relevant documentation.  
• Actively participate in incident response activities and assist in security assessments and audits.

Qualifications

• Candidate must have an active Top Secret/SCI clearance with eligibility to obtain CI Polygraph.
• Bachelor's degree and 8 years of experience OR Master's degree and 6-10 years of experience with with the performance, design, configuration, and testing of complex large-scale computer networks.
• Knowledge of development and design of SCIF IT infrastructure to include virtualization, hybrid and cloud. 
• Experience with server and software upgrades and designing and running government cyber testing ranges. 
• Experience with AWS, Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI) or IBM Cloud. 
•  Experience or knowledge of industry leading Cloud Service Providers (CSP)
• Knowledge of FedRAMP
• Experience with Accreditation and Authorization (A&A)/ Risk Management Framework(RMF) Process.
• Experience or knowledge of DEVSECOPS process
• Experience or knowledge of Terraform or other Infrastructure As Code applications or services.
• A current CCNA Certification 

Business Development

Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.

Physical Requirements

• Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 10-15 pounds at a time.

Travel Requirements

Once a quarter

COMPENSATION:

$150K-$170K (Depending on experience).