Lead Security Engineer

***Must Be able to obtain a Public Trust***

Description

The Lead Security Engineer will assist the Cybersecurity Team's mission by supporting the implementation of IPv6 networking capabilities by joining a dedicated team of cybersecurity professionals who collaborate, cooperate, and facilitate maintaining and enhancing the security posture of DOT information systems and underlying infrastructure. These information systems and their supporting infrastructure support the DOT mission of managing and maintaining United States critical infrastructure (i.e. highways, bridges, roads, airports, etc.).

Additional Skills & Qualifications

Job Role Specific Requirements:

- Engage with Federal Leadership and counterparts to support designing, implementing, and maintaining secure IPv6 network architectures, including firewalls and network segmentation;

- Engage with network, system and application/software administrators/engineers to troubleshoot issues associated with IPv6 security related technologies

- Support regular assessments to identify potential vulnerabilities in IPv6 networks, services, and applications and develop strategies to mitigate these risk

- Support IPv6 related security incidents

- Support development and enforcement of IPv6-specific security policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirement

- Maintain detailed documentation of IPv6 network security configurations, incident reports, and security procedures

- Work IPv6 cybers related security operations ITSM (ServiceNow) assigned tickets to completion

- Participate in relevant CyberSecurity and Security Operations (SecOps) meetings

- Collaborate on and provide feedback on cybersecurity solutions that enhance DOT security posture with a focus on IPv6

Preferred Skills and Qualifications

- In-depth knowledge of networked environments and topologies, both IPv4 and IPv6, and the communication protocols implemented

- A comprehensive understanding of cybersecurity best practices and industry standards for implementing IPv6 securely

- Hands on experience with firewalls, routers, switches, proxies, cloud-based systems, operating systems, databases, networking, Data Loss Prevention, Endpoint Security Software, Network Intrusion Detection and Prevention Systems (IDS/IPS) and host-based IDS and IPS and general cyber security best practices and industry standards