Systems Security Engineer (Cybersecurity/Quarantine Release)

Bowhead is hiring a Systems Security Engineer to identify and mitigate vulnerabilities in security systems in Dahlgren, Virginia. The role conducts vulnerability scans and assessments, applies system and network hardening, and supports cybersecurity risk management and incident troubleshooting.

Responsibilities

Conducting vulnerability scans and recognizing vulnerabilities in security systems

Using DoD network analysis tools to identify vulnerabilities (e.g., ACAS, HBSS, etc.)

Conducting application vulnerability assessments

Identifying systemic security issues based on the analysis of vulnerability and configuration data

Sharing meaningful insights about the context of an organization's threat environment that improve its risk management posture

Applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability Cybersecurity/Quarantine Release , authentication, non-repudiation)

Troubleshooting and diagnosing cyber defense infrastructure anomalies and working through resolution

Performing impact/risk assessments

Ability to identify systemic security issues based on the analysis of vulnerability and configuration data

Ability to share meaningful insights about the context of an organization's threat environment that improve its risk management posture

Ability to cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)

Ability to apply host/network access controls (e.g., access control list)

Ability to use Virtual Private Network (VPN) devices and encryption

Ability to protect a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters)

Must be able to troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution

Ability to develop insights about the context of an organization's threat environment

Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)

Other duties as assigned

Preferred

bachelor's degree higly desired

Knowledge of cyber threats and vulnerabilities

Knowledge of specific operational impacts of cybersecurity lapses

Knowledge of host/network access control mechanisms (e.g., access control list, capabilities list)

Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)

Knowledge of network traffic analysis methods

Knowledge of Virtual Private Network (VPN) security

Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable

Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML)

Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)

Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)

Knowledge of application security risks

Bachelor's Degree

Cyber Threats

Cyber Vulnerabilities

Cybersecurity Impact Analysis

Host Access Controls

Network Access Controls

Access Control Lists

Capabilities Lists

Cybersecurity Principles

Privacy Principles

Organizational Security Requirements

Authentication

Non-Repudiation

Network Traffic Analysis

VPN Security

Bluetooth Communications

RFID Communications

Infrared Networking

Wi-Fi Communications

Paging Systems

Cellular Communications

Satellite Communications

VoIP Communications

Jamming Techniques

Network Access Management

Identity Management

Access Management

Public Key Infrastructure

OAuth

OpenID

SAML

SPML

System Security Threats

System Vulnerabilities

Application Security Threats

Application Vulnerabilities

Buffer Overflow Attacks

Mobile Code Security

Cross-Site Scripting

PL/SQL Injection

Race Conditions

Covert Channels

Replay Attacks

Return-Oriented Attacks

Malicious Code

Passive Attacks

Active Attacks

Insider Attacks

Close-In Attacks

Distribution Attacks

Application Security Risks

Company

Tech career marketplace connecting professionals with recruiters

Centennial, Colorado, USA

https://www.or-quest.nl/

Founded in 1990

201-500 employees

Qualifications

High School Diploma required

Three to five (3-5) years of relevant experience required

Knowledge of computer networking concepts and protocols, and network security methodologies

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth & concept of zero trust)

Knowledge of basic system, network, and OS hardening techniques

Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications

Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services

Knowledge of application vulnerabilities

Knowledge of system administration, network, and operating system hardening techniques

Knowledge of system administration concepts for operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems

Must meet DoD 8570 Information Assurance Technical Level II certification requirements at time of hire

Must currently hold a security clearance at the Top Secret level

Bachelor's degree higly desired

Knowledge of cyber threats and vulnerabilities

Knowledge of specific operational impacts of cybersecurity lapses

Knowledge of host/network access control mechanisms (e.g., access control list, capabilities list)

Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)

Knowledge of network traffic analysis methods

Knowledge of Virtual Private Network (VPN) security

Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable

Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML)

Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)

Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)

Knowledge of application security risks

Required skills

Network Security, Computer Networking, Network Protocols TCP/IP, Network Protocols DHCP, Network Protocols DNS, System, Network, and Operating System Hardening, Intrusion Detection and Prevention (IDS/IPS), System Administration, Unix/Linux, iOS, Android, and Windows, Application Security Vulnerabilities, DoD 8570 Information Assurance Technical Level II Certification, Network Traffic Analysis, Access Control and Identity Management PKI, Access Control and Identity Management OAuth, Access Control and Identity Management OpenID, Access Control and Identity Management SAML, Access Control and Identity Management SPML

Preferred skills

bachelor's degree higly desired, Knowledge of cyber threats and vulnerabilities, Knowledge of network traffic analysis methods, Knowledge of Virtual Private Network (VPN) security, Knowledge of application security risks, Dice is the go-to career marketplace for tech professionals., Centennial, Colorado, USA, https://www.or-quest.nl/, Growth Stage, Leadership Team, Daniel Hinck, Client Success Partner, Kalyn Thorne, Client Success Partner - Enterprise, Recent News, WebProNews, 68% of Tech Pros Distrust AI Hiring, Dice Study Shows, 2025-08-25, PC Gamer, 2025-05-23, Business Insider, 2025-04-21, Company data provided by, AI Tools, Customize Your Resume, Maximize your interview chances, Build Cover Letter, Make your application stand out, Analyze How Well You Fit, Understand your strength & weakness

Experience

3-5 years