Electrosoft

Information System Security Engineer (Pipeline)

Belleville, IL · Staff+

Sponsorship not specified$53k-$800kDetected 79 days ago

PythonPowerShellAWSGCPAzureLinuxCybersecurityPenetration TestingComplianceTCP/IPZero TrustHIPAAResearchLeadershipCommunicationProblem Solving

About the role

While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation.
What sets us apart from all other contractors is the sense of teamwork our employees feel - and the knowledge that outstanding effort is recognized and rewarded.
The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Plan, execute, and document comprehensive security risk assessments of servers (on-premise and cloud), software applications (web and desktop), and infrastructure components.
Develop and maintain a risk register, tracking identified risks, mitigation plans, and remediation progress.
Perform regular vulnerability scanning using tools such as Nessus, Qualys, Rapid7 InsightVM, or similar.
Collaborate with system administrators, developers, and other IT teams to ensure timely patching and remediation of vulnerabilities.
Develop and implement automation scripts to streamline vulnerability management processes.
Develop and deliver security awareness training to IT staff and other stakeholders on risk assessment and vulnerability management best practices.

Bachelor's degree in Computer Science, Information Security, or a related field.
5+ years of experience in information security, with a strong focus on risk assessment and vulnerability management.
Experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7 InsightVM, OpenVAS) and penetration testing tools (e.g., Metasploit, Burp Suite).
Strong knowledge of common operating systems (Windows, Linux), networking protocols, and web application security.
Experience with scripting languages (e.g., Python, PowerShell) for automation.
Experience with cloud security (AWS, Azure, GCP)

Relevant 8140 security certifications (e.g., CISSP, CISA, CISM, OSCP, CEH) preferred.

Analyze business impact, threat landscape, and vulnerability data to determine overall risk posture.
Contribute to the development and maintenance of the organization's risk management framework.
Analyze scan results, identify false positives, and prioritize vulnerabilities for remediation.
Track and report on vulnerability remediation progress.
Maintain and improve vulnerability scanning infrastructure.
Evaluate and recommend new security tools and technologies to enhance risk assessment and vulnerability management capabilities.

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers.
We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance.
If we've described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.
Develop actionable recommendations for customers to improve their security posture based on the latest threat intelligence and industry trends.
Present findings and recommendations to customers and internal stakeholders.

This listing is sourced directly from Electrosoft's careers page and normalized into a canonical job model.