Senior Information Security Engineer

Purpose:
Primarily responsible for managing complex
tracking and data analysis tasks in order to
identify live computer attacks and probes as they
occur;
Responsible for all technical aspects of national
Computer Emergency Response Team (CERT)
operations including intrusion detection, new
incident tracking, documentation, analytical
investigation, problem closure and future security
threat countermeasures;
Assists in projects that develop and implement
security standards, procedures and guidelines
for multiple platforms and diverse systems
environments;
Ensures NIRT operational continuity and
maintains supporting infrastructure;
Assists in the development, testing and
implementation of security plans, products,
control techniques, security policy and
procedures for national network security
oversight and intrusion response tracking;
Investigates and recommends appropriate
corrective actions for data security incidents
including effective communication with the
implementation staff responsible for taking
corrective actions;
Assess vulnerabilities, then communicates to
System-wide information security and AIS staff
to ensure prompt and effective distribution of
alerts and that incidents are addressed in the
most effective and efficient manner possible;
Assists in the definition, construction and
continual enhancement of an effective incident
response architecture at the macro level;
Handles up-to-date threat and vulnerability
profiles, including respective countermeasures;
Performs all assigned duties in compliance with
ISO9001 quality management standard.

The mission of the Incident Response Team (IRT) is to provide assistance to the Federal Reserve System in protecting its information systems. This IRT provides the Federal Reserve System with world class security services including incident response, penetration testing, intrusion detection, security alerts, and vulnerability assessment.
REQUIREMENTS
Required Qualifications:
Experience Requirements:
Bachelor's degree in computer science,
engineering, or a related discipline, and five to
seven years of technical experience in the
security aspects of multiple platforms,
operating systems, software, communications,
and network protocols, OR an equivalent
combination of education and work experience;
Experience in configuration/administration/
management in one or more of the following
areas: Microsoft Windows (NT,
2000, XP, 2003), Sun Solaris, Linux, routers &
switches, firewalls, proxy servers, Web
servers, and any programming skills;
Experience in intrusion detection systems and
virtual private networks;
Proven project management skills;
Ability to manage multiple complex projects
simultaneously and to work in a highly dynamic,
rapidly changing environment;
Familiarity with security protocols and
legislation related to information security;
Demonstrated ability to develop, test, and
implement security plans and network
architecture;
Experience in technical and project
documentation, and the ability to communicate
complex technical concepts clearly, both orally
and in writing;
Excellent analytical ability;
Team player with excellent consultative and
communication skills, and the proven ability to
work effectively with client, IT management and
staff, vendors and consultants;
Possession of or the ability to obtain U.S. Secret
Security Clearance; and
CISSP certified /qualified or ability to actively
work towards obtaining the certification.

Travel Percentage: 0%