Information System Security Engineer

Responsibilities

• Plan, execute, and document security risk assessments of servers, software applications, and infrastructure
• Analyze business impact, threat landscape, and vulnerability data to determine risk posture
• Develop and maintain a risk register and risk management framework
• Perform regular vulnerability scanning using tools like Nessus, Qualys, or Rapid7
• Collaborate with IT teams to ensure timely patching and remediation
• Maintain and improve vulnerability scanning infrastructure and implement automation scripts
• Develop and deliver security awareness training to IT staff
• Ensure compliance with security standards such as PCI DSS, HIPAA, and GDPR
• Research emerging cyber threats and provide actionable recommendations to customers

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field
• 5+ years of experience in information security focusing on risk assessment and vulnerability management
• In-depth understanding of NIST 800-53 or OWASP frameworks
• Experience with vulnerability scanning tools (Nessus, Qualys, Rapid7, or OpenVAS)
• Experience with penetration testing tools (Metasploit, Burp Suite)
• Strong knowledge of Windows, Linux, networking protocols, and web application security
• Proficiency in scripting languages like Python or PowerShell
• Experience with cloud security (AWS, Azure, or GCP)

Preferred Qualifications

• Relevant 8140 security certifications such as CISSP, CISA, CISM, OSCP, or CEH

About the Company

Electrosoft Services, LLC is an award-winning company providing technology-based solutions to federal customers, specializing in cybersecurity, ICAM, Zero Trust, and enterprise AI.