Talent Deep Dive Security Engineer, Security Software .

Location Hotspot: Bethesda Maryland, Financial District, Maryland Avenue are the key employer hotspot in Washington DC,Metro Area which is a home to many tech giants like Google, Microsoft, IBM, Oracle etc.,Washington DC, Metro AreaBethesda,MarylandBethesda, Maryland has presence of multiple Technology and BFSI companiesFinancialDistrictFinancial District is home to technology giants and major companies in the Software /Internet verticalMarylandAvenueMaryland Avenue majorly hosts companies in Cybersecurity, Aviation, and BFSIBethesda,MarylandBoxboatNorthrop GrummanCapital OneMicrosoftFinancialTarkikDistrictIBMDell EMCGoogleOracleCapital ueAXAManTechInternationalPeer Employer Extended ListBAE InternationalHotspotEmployer LocationsGeneral DynamicsThalesFreddie MacCSRA AES CorporationRaytheonDanaherVISAFannie MaeCiscoAES CorpNote: The represented data has been collected from multiple articles and are curated from DRAUP Proprietary Database1010

Washington DC, Metro Area: Average talent cost for a Security Software Developer is greater than the average talent cost of aSecurity Engineer and Security Compliance OfficerAverage Salary (000’ USD) per annumAverage Salary 115,000 USDAverage Salary 130,000 USDAverage Salary 80,000 USD1751551351351201001009075Security EngineerSecurity Software DeveloperEntry Level(0-5 Years)Note : DRAUP’s Talent Simulation Module was used to analyze the talent cost by locations and skill setsMid Level(6-10 Years)Security ComplianceSenior Level(10 Years)1111

Washington DC, Metro Area: Top Employer Profiles for Security Engineer talent poolTop Employers & HeadcountJob TitlesWorkloads 160 Cyber Security EngineerInformation Security EngineerCyber Systems EngineerCyber Information Assurance Analyst Perform data centric risk assessment including vulnerability scans, penetration tests Install, configure and use tools such as Fortify, HP Scan to perform white box securityassessments Drive vulnerability testing by leveraging COTS and GOTS based tools and generatesecurity finding reports and build security control test cases 140 Cyber Security Architect Cyber Security Threat and VulnerabilityEngineer Information System Security Architect Penetration Tester Develop technical and written solutions to prevent cyber security vulnerabilities Design and recommend integrated system solutions internally and for the client Create new techniques for solving and optimizing existing operational security issuesand POAM items to reduce program risk Identify and report cyber threat surface and risk mitigation postures 60 Cyber Security EngineerCyber Security ArchitectSecurity AnalystIAM Engineer Development and support the Identity and Security Platform for customer apps Configure and handle security tools in compliance with DoD requirements Provide information security domain expertise throughout the security toolsdevelopment task and translate security requirements into technical designs Develop decentralized apps using blockchain with non relational database 30 Security ArchitectCyber Security EngineerLead Security Operations EngineerApplication Security Engineer Build an incident response program for incident detection, analysis, containment,eradication, recovery and forensic artifacts required for additional investigations Security guidance to new projects and initiatives, and develop software's in PHP, C/C ,Java and Python Develop automation and processes to identify security flaws, and enforce securitystandards 30 Cyber Security Engineer Cyber Threat Intelligence Analyst Security AnalystNote : DRAUP’s Proprietary Talent Module was used to analyze talent by locations and skill setsNote : The analysis doesn’t include Service Provider companies, Government entities and Defence Organization Develops technical and procedural knowledge of all MSS services Configure, implement, maintain, patch and update deployed security devices in a globalenvironment Develop and operate tools to detect security threats and incidents Respond to detected threats by driving quick mitigation policies1212

Washington DC, Metro Area: Security Engineer : Sample Talent Profiles (1/2)Mike MicheoEducation: BS Computer andInformation Sciences, StrayerUniversitySr. Security AnalystExperience in Current Role: 2 YearsTotal Experience: 8 YearsRobert BoyerEducation: N/AProvide threat and risk assessment reviews and guidance. Respond to and successfully triageincoming client requests Responsible for developing Standard Operating Procedures (SOP), System Design Documentation(SDD), System Manuals, Standing Instructions (SI) and Bench Level Instructions (BLI) Installation and maintenance of equipment and tools employed including firewalls, gateways,routers, switches, specialized Intrusion Detection Systems, Data Lost Prevention servers &workstations, RedSeal, Qualys, and SplunkRicky A. MarzettSenior Security SpecialistEducation: MS Information systemsecurity, Strayer UniversityMarylandExperience in Current Role: 12 YearsTotal Experience: 19 Years Install and maintain security scanning, monitoring, and evaluation tools used across the enterprise Create scripts to automate repetitive and recurring tasks Perform static and dynamic analysis of .NET and Java based applications including code reviews Implement and oversee security tools, technologies and security hardening of device configurations Design, develop, administer, and secure the enterprise Linux systems in the labAlexandra PelanSecurity EngineerEducation: N/AExperience in Current Role: 1 YearTotal Experience: 14 YearsCore Responsibilities Design and develop system security architectures, security controls for client network andinfrastructureExperience in Current Role: 9 YearsTotal Experience: 18 YearsCore ResponsibilitiesCore Responsibilities Cyber Security EngineerCore Responsibilities Troubleshoot security related issues such as firewalls, switches, physical and virtual servers Troubleshooting the issues discovered during subsystem and system level testing. Conductprotective and corrective measures when a security incident on vulnerability is discovered Evaluate, design and implement secure solutions for networking, authentication and authorizationwith the latest security and infrastructure technologies Evaluate industry trends and security documentation including SSAAs, COOPs, and SOP assesssecurity tools Responsible for securing and monitoring Windows and Linux servers on-premise and in the AWS Monitor vulnerability reports and observe National Vulnerability Database and US Cert CyberSecurity Bulletins for identifying impactsAssess threat advisories to determine vulnerability. Design, recommend integrated system solutionsensuring proprietary or confidential data and systems are protectedNote : DRAUP’s Proprietary Talent Module was used to analyze talent by locations and skill sets1313

Washington DC, Metro Area: Security Engineer : Sample Talent Profiles (2/2)Mohad MohamedEducation: MS InformationSystems, George MasonUniversityCyber Security EngineerExperience in Current Role: 1 YearsTotal Experience: 8 YearsMarshall MutumanjeEducation: N/AExperience in Current Role: 4 YearsTotal Experience: 18 YearsCore ResponsibilitiesCore Responsibilities Security EngineerEstablish, maintain and execute all components of an incident response plan, from incident intakethrough root cause analysis, technical remediation analysis and reporting Analyze, measure and report risk occurred due to software vulnerability Design incident response for cloud service models Responsible for maintaining the integrity & security of enterprise wide cyber systems and networks Protect the network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices,spam filters) Perform cyber threat intelligence analysis, correlate actionable security events Perform network traffic analysis using raw packet data, net flow, IDS, IPS, & custom sensor output Analysis and definition of security requirements for applications and systemsBruce WitherspoonEducation: N/APrincipal Security EngineerExperience in Current Role: 1 YearsTotal Experience: 7 YearsSahil SethiSecurity EngineerEducation: Btech ComputerScience, Punjab TechnicalUniversityExperience in Current Role: 5 YearsTotal Experience: 11 YearsCore Responsibilities Configure and troubleshoot cyber security device, test security products and systems to detectweakness in information security Review security plans and assist in developing security measures to safeguard information Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation Develop and implement information systems security programs. Develop new product, process,standards or operational plans to improve the existing cyber security processNote : DRAUP’s Proprietary Talent Module was used to analyze talent by locations and skill setsCore Responsibilities Perform CND trend analysis and threat intelligence reporting Verify new cyber threat adversary tools, tactics, and processes Identify Advanced Persistent Threat (APT) activities and review DoD and open source intelligence forthreats Test and identify risks and vulnerabilities to key applications within cyberspace1414

Washington DC, Metro Area: Top Employer Profiles for Security Software Developer talent poolTop Employers & HeadcountJob TitlesWorkloads 180 Cyber Security Software Engineer Cloud Migration Security Developer Security Software Architect 140 Cyber Software Engineer Software Developer and Malware Analyst Web security developer Build, test and maintain reusable and reliable code for Online Aerospace SupplierInformation System (OASIS) web application development Develop and implement security related solutions to harden the security posture Run vulnerability assessment, penetration testing and create assessment reports 120 Cyber Security Software Developer Software Engineer – Security Product Security Developer Design and develop protocol parsers for detecting application threats andvulnerabilities on the network Perform application vulnerability assessments on high-risk targets within theCompany’s intranet 60 Software Engineer Senior Software Engineer Chief Software Architect Utilize application security testing methodologies to perform vulnerability assessments Develop multi factor authentication and implement RESTful API for internal UIdevelopment and for external users Develop network sensor apps, establish GRPC-based remote backend connection, andbuild Docker containers for functional customization 50 Software Engineer Senior Software Engineer Principal Software Engineer Develop and provide enhancements to multithreaded system utility software Develop system level software in C, C and Python for all cybersecurity products Conduct requirement gathering, design and documentation, code review,implementation and testing, and software release Front end integration and development for the Cybersecurity offeringsNote : DRAUP’s Proprietary Talent Module was used to analyze talent by locations and skill setsNote : The analysis doesn’t include Service Provider companies, Government entities and Defence OrganizationBuild product processes, automation and operational frameworkDevelop new applications and frameworks to help the enterprise discover cyber risksMaintain application and servers within the distributed systemsPerform Network vulnerability assessment testing1515

Washington DC, Metro Area: Security Software Developer : Sample Talent Profiles (1/2)Ethan PedoeimEducation: BS ComputerEngineering, University ofMaryland College ParkCybersecurity/Software EngineerExperience in Current Role: 1 YearsTotal Experience: 3 YearsJustin ChenEducation: BS ComputerEngineering, University ofMaryland College ParkSoftware Developer & MalwareAnalystExperience in Current Role: 4 YearsTotal Experience: 8 YearsCore ResponsibilitiesCore Responsibilities Design, implement and demonstrate software applications within an IT security architecture Responsible for platform and security application development, database and micro-service design Develop and implement IDS & SIEM solution to detect malicious threats and anomalous networkactivity Perform security assessments and vulnerability analysis on company assets Create and maintain automation scripts leveraged for integrations between data sources and SOCsolutions Build, test and maintain efficient, reusable, and reliable code for Online Aerospace SupplierInformation System (OASIS) web application development Construct and execute roadmaps for cybersecurity strategy implementation and communication Integrate and test software components into systems to meet requirementsDaniel GuymonEducation: MS ComputerEngineering,Virginia Polytechnic Institute andState UniversityCyber Cloud Architect & DeveloperExperience in Current Role: 1 YearsTotal Experience: 12 YearsAnthony ChowCyber Security Software DeveloperEducation: BS Computer Science,University of Maryland CollegeParkExperience in Current Role: 1 YearTotal Experience: 14 YearsCore ResponsibilitiesCore Responsibilities Develop several web applications using ASP.NET, C#.NET, SQL Server, XML, XSLT Design, develop, test and productize security content updates across multiple security product lines Design, develop, troubleshoot and debug software programs for databases, applications, tools,networks etc Develop distributed, fault-tolerant software using Python, Java, C programming Responsible for penetration testing on cloud-based solutions and in house productsDesign, develop and implement framework to calculate the security risks of the cloud carrier byidentifying the router vulnerabilities using C#.NET, ASP.NET, SQL Server, Java, Python, XML Perform feasibility testing on security programs. Lead releases through Gate 3 and ensurecompliance with standards and requirements Drive client requirements in the strategic design process and translate security & businessrequirements into technical designsNote : DRAUP’s Proprietary Talent Module was used to analyze talent by locations and skill sets1616

Washington DC, Metro Area: Security Software Developer : Sample Talent Profiles (2/2)Pallavi ShridharEducation: MS InformationSystems, George MasonUniversityInformation Security SoftwareSpecialistExperience in Current Role: 2 YearsTotal Experience: 8 YearsDavid HarmonEducation: BS ComputerScience,Dartmouth CollegeCreate test plans and test data for validation of security in the software Develop frond end for registration system using Python/Flask/Bootstrap/Jquery Provide Transaction Management using the Hibernate configurations Responsible for creating map services, implementing security using ArcGIS serverMary LiebCybersecurity Software ArchitectEducation: MS Cyber Security,Johns Hopkins Whiting School ofEngineeringExperience in Current Role: 1 YearsTotal Experience: 16 Years Develop network sensor apps, establish GRPC-based remote backend connection, and build Dockercontainers for functional customization Optimized host-level resource assignments to achieve scalable flow rates for any customer Develop multi factor authentication and implement RESTful API for internal UI development and forexternal usersSandeep ReddySoftware EngineerEducation: MS Computer Science,University Of Maryland CollegeParkExperience in Current Role: 1 YearsTotal Experience: 3 YearsCore Responsibilities Design, research and develop components of software architecture Use cryptographic methods to verify integrity and authenticity of the software products Develop and implement tests for the verification of requirements Develop frontend security application using Angular, HTML, CSS, Javascript, Jquery, BootstrapNote : DRAUP’s Proprietary Talent Module was used to analyze talent by locations and skill setsExperience in Current Role: 1 YearsTotal Experience: 9 YearsCore ResponsibilitiesCore Responsibilities Senior Software EngineerCore Responsibilities Develop and provide enhancements to multithreaded system utility software License management, remote configuration, file/folder synchronization and process management Redesigned and refactored the security apps system using Spring and related technology Redesigned the Fidelis software update process using Python, C and enhanced the efficiency ofbandwidth and maintenance window1717

Washington DC, Metro Area: Top Employer Profiles for Security Compliance talent poolTop Employers & HeadcountJob TitlesWorkloads 30 Cyber Security Strategy Analyst Cyber Security Analyst Senior Security Compliance Audit Analyst Develop security policies and ensure security compliance for Cloud implementation Perform complex analysis of cyber intelligence and law enforcement/ counterintelligence policy and governance issues Drive security requirements for the customer, integrating multiple capabilities andscenarios supporting the cloud implementation 25 Deliver all necessary cybersecurity reporting, and prepare IT security programs formandatory governmental compliance inspections Develop and implement IT site security procedures to ensure full compliance withgovernment classification guidelines Develop and administer companies Cybersecurity plans and adhere to standards 20 Cyber Security Analyst Security Analyst Security and Compliance Engineer Manage internal and external data regulatory Security Compliance efforts Implement and monitor standards such as NIST 800 series, ISO 27000 series, GDPR, etc Act as a subject matter expert for applicable regulations such as ISO, SOC, HIPAA, PCI,FedRAMP/FISMA Develop, implement, maintain and oversee security policies 20 Information Security Compliance Auditor Cybersecurity Compliance Engineer Information Assurance Compliance Analyst Plan, execute and lead security compliance audits Collaborate with various departments to improve security compliance, to manage riskand to bolster security effectiveness Evaluate the efficiency, effectiveness and compliance of operation processes withcorporate security policies and related government regulations 15 Corporate Security – Governance, Risk, &Compliance officer Security Compliance Consultant Test, evaluate and verify hardware & software products to determine governance andcompliance with defined security specifications Drive in the support of standards such as NIST internally and with the customers.Overseeing the Trading Partner Manager platform to identify any security breachesCyber Governance, Risk & Compliance OfficerCyber Governance and Risk AnalystCybersecurity Audit leadInformation Security Risk & Compliance OfficerNote : DR

SANS GIAC Information Security Professional EC Council Certified Ethical Hacker (CEH) EC Council Computer Hacking Forensic Investigator EC Council Certified Network Defender GIAC Certified Intrusion Analyst CompTIA Advanced Security Practitioner (CASP ) Cisco Certified Network Professional Security ISC²