35 jobs found

City/State Virginia Beach, VA Work Shift First (Days) Overview: Sentara is hiring for a Senior Cyber Security Microsoft Ecosystem Engineer! This position is fully remote. Overview We're seeking a highly skilled Senior Security Engineer with deep knowledge and expertise in Microsoft technologies, policies, and licensing, to lead the design, implementation, and management of enterprise-grade security solutions. This role is critical to ensuring the confidentiality, integrity, and availability of our Microsoft-based infrastructure. This includes Microsoft Office 365, Purview, Azure, Intune, and Windows endpoints. You'll work with cross-functional teams (Infrastructure, IAM, GRC, cloud architects, Enterprise Privacy and Compliance teams, Communications) to proactively identify risks, implement controls, and respond to evolving threats. Primary Responsibilities: Design, recommend, implement and troubleshoot security controls across Microsoft 365, Purview, DSPM, Azure, Intune, EDR/Defender suite, Power Platform and Windows Server environments Review and recommend security policies using Microsoft Entra ID, Conditional Access, Purview, DSPM, Defender suite, and Power Platform Review current security controls and architectures and make recommendations for control replacements using Microsoft's ecosystem for on-prem, hybrid, and cloud environments Design, implement, and enforce sensitivity labels, encryption, data retention, and DLP policies across M365 ecosystem Design and maintain end-to-end architecture integrations between security tools and adjacent platforms (CASB, SOAR, SIEM, ServiceNow, CMDB, email gateways, and threat intel platforms) Monitor and analyze security logs to support incident response, forensics, and investigation activities Monitor and optimize system health, connector fidelity, data quality, and agent deployment success across thousands of assets Work with cross functional teams to perform threat modeling, vulnerability assessments, and incident response for Microsoft platforms Collaborate with compliance teams to meet regulatory requirements (e.g., NIST, ISO 27001, HIPAA) and support audit activities and deliverables Support maturity modeling, executive dashboards, and architectural blueprints to track progress across tooling ecosystems Develop and maintain operational documentation and reports to support monthly trend analysis as well as project components Lead implementation and deployment efforts across the enterprise involving technical and leadership teams Provide technical mentorship and training to engineers and contribute to security architecture and infrastructure reviews Stay current with industry trends Microsoft's evolving security landscape and align technical and process improvement recommendations with organizational goals Education 5+ years of relevant experience with a degree (Required) 7+ years of relevant experience without a degree (Required) Certification/Licensure No specific certification or licensure requirements Experience Required: 5+ years of experience in cybersecurity, with a focus on Microsoft technologies and licensing Deep knowledge of Microsoft 365 security features, Purview, DSPM, Azure, Intune, and Defender suite Experience with PowerShell scripting and automation for security tasks Familiarity with Zero Trust architecture and identity-based access controls Strong understanding of data security, threat detection, incident response, and vulnerability management Excellent communication and documentation skills Preferred: Microsoft Certified: Cybersecurity Architect Expert or equivalent Experience with Microsoft Sentinel, Purview, and compliance center tools Experience in hybrid cloud environments and enterprise-scale deployments Experience with healthcare or regulated industry environments (HIPAA, HICP, NIST). Familiarity with architectural review boards, solution design documentation, and capability roadmaps. Talroo-IT We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay range for full-time employment is $126,152.00 - $198,161.60 annually. Additional compensation may be available for this role, such as shift differentials, standby/on-call pay, overtime, shift premiums, extra-shift incentives, or bonus opportunities. Compensation within the range may vary based on qualifications, experience, location, market conditions, and business needs. Note: If an annual salary is posted, it is based on a full-time colleague working 2,080 hours annually. Benefits: Caring For Your Family and Your Career • Medical, Dental, Vision plans • Adoption, Fertility and Surrogacy Reimbursement up to $10,000 • Paid Time Off and Sick Leave • Paid Parental & Family Caregiver Leave • Emergency Backup Care • Long-Term, Short-Term Disability, and Critical Illness plans • Life Insurance • 401k/403B with Employer Match • Tuition Assistance - $5,250/year and discounted educational opportunities through Guild Education • Student Debt Pay Down - $10,000 •Pet Insurance •Legal Resources Plan •Colleagues have the opportunity to earn an annual discretionary bonus ifestablished system and employee eligibility criteria is met. Sentara Independence provides quality outpatient services to the surrounding community. The facility includes an ambulance-accessible emergency room that is supported by board-certified physicians. Sentara Independence houses state-of-the-art medical equipment and highly-skilled physicians and staff. Sentara Independence is now an extension of the quality services at Sentara Virginia Beach General Hospital including advanced imaging and physical therapy. Sentara Health is an equal opportunity employer and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves. In support of our mission "to improve health every day," this is a tobacco-free environment. For positions that are available as remote work, Sentara Health employs associates in the following states: Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.

Job Description An exciting career awaits you At MPC, we're committed to being a great place to work - one that welcomes new ideas, encourages diverse perspectives, develops our people, and fosters a collaborative team environment. Position Summary The GRC Automation & Continuous Controls Monitoring (CCM) Senior Cybersecurity Engineer is a strategic and technical role, responsible or helping turn GRC into a trust engine for the business: reducing audit friction, improving business risk exposure visibility, accelerating evidence readiness, and enabling stronger operational confidence. The role serves as the technical focal for GRC automation, developing automated evidence collection, control testing, risk intelligence, and AI-enabled governance capabilities across cloud, on-premises, identity, operational technology (OT), and security platforms. The role collaborates closely with Cyber Fusion, Enterprise Architecture, and Cyber Engineering, to design and build deterministic control-testing logic where deterministic approaches are enough; and AI agents and LLM-backed workflows where reasoning, summarization, or judgment is required, such as evidence-to-control mapping, attestation drafting, drift detection, and audit-package assembly. This position belongs to a family of jobs with increasing responsibility, competency, and skill level. Actual position title and pay grade will be based on the selected candidate's experience and qualifications. Key Responsibilities Conducts detailed analyses on changes to cybersecurity solutions and its relationship to internal and external systems to assess control effectiveness and cybersecurity risk. Resolves complex multi-functional technical issues. Leverages cybersecurity assessments, standards, control testing methodologies, and compliance frameworks to ensure compliance across security systems. Improves the efficiency and effectiveness of Security solutions, governance processes, automated controls, and monitoring capabilities. Analyzes existing processes and procedures and leads efforts for implementing improvements, automation opportunities, or remediation activities. Responsible for development and submission of Standard Operating Procedures. Analyzes business impacting events, performs initial investigation, and evaluates control performance, exceptions, and risk indicators through continuous monitoring activities. Investigates and analyzes the nature and scope of cyber incidents, control failures, and compliance exceptions. Assists in the development of risk mitigation and remediation plans to ensure regulatory and internal compliance. compliance. Leads implementation of global security initiatives, policies, compliance requirements, and continuous control monitoring practices. Collects, validates, and reports security metrics, control performance results, and remediation efforts associated with them. Manages cyber security-related consulting, guidance, and support to customers and stakeholders. Translates security principles to assist configuration teams with incorporating security and compliance requirements into build and configuration processes. Monitors emerging IT/OT, cybersecurity, automation, and artificial intelligence technologies as well as their impact on the security, risk, and compliance landscape. Education and Experience Bachelor's Degree in Information Technology, related field or equivalent experience. 5+ years of relevant experience required Experience designing, implementing, and scaling GRC, CCM, or compliance automation solutions within a regulated environment required Experience in Python or comparable automation technologies, proficient in developing, integrating, and supporting automated workflows and REST API-based data integrations across multiple enterprise systems required. Hands-on experience integrating security-control data sources into a GRC / CCM evidence pipeline for continuous control testing required. This includes normalizing API, telemetry, configuration, vulnerability, identity, ticketing, and assessment data into control-level evidence, exception logic, ownership, frequency, and audit-ready records across at least three domains such as CNAPP / CSPM, SIEM / security data lake / XDR, CTEM / VM / ASPM, DSPM, ITSM, IAM, GRC / CCM, or AI/agent governance required. Experience building LLM-backed agentic workflows on Azure AI Foundry, GitHub, or open-source frameworks preferred. Familiarity with NIST AI RMF, the OWASP LLM Top 10, or comparable AI risk frameworks preferred. Skills Adaptability - Maintaining effectiveness when experiencing major changes in work responsibilities or environment (e.g., people, processes, structure, or culture); adjusting effectively to change by exploring the benefits, trying new approaches, and collaborating with others to make the change successful. AI Fundamentals - Understanding of core AI concepts and methods, ability to apply AI to job-relevant use cases and capacity to contribute to organizational AI reimagination. Change Management - Change Management refers to a systematic approach for defining and implementing procedures and/or technologies to deal with changes in the environment. It can mean adapting to change, controlling change and/or effecting change. Authentic Communicator - Expresses ideas and information, both verbally and in writing, clearly and credibly. Listens to understand and fosters constructive dialogue. Cybersecurity Risk Management - The process of developing cyber risk assessment and treatment techniques that can effectively pre-empt and identify significant security loopholes and weaknesses, demonstrating the business risks associated with these loopholes and providing risk treatment and prioritization strategies to effectively address the cyber-related risks, threats and vulnerabilities, ensuring appropriate levels of protection, confidentiality, integrity and privacy in alignment with the security framework. General Programming - Applies a computer language to communicate with computers using a set of instructions and to automate the execution of tasks. Intrusion Detection - The use of security analytics, including the outputs from intelligence analysis, predictive research and root cause analysis in order to search for and detect potential breaches or identify recognized indicators and warnings. Also, monitoring and collating external vulnerability reports for organizational relevance, ensuring that relevant vulnerabilities are rectified through formal change processes. Penetration Testing - The practice of testing a computer system, network or web application to find security vulnerabilities that an attacker could exploit. Penetration testing can be automated with software applications or performed manually. Relationship Management - Relationship Management is the conscious aim to develop and manage long-term and/or trusting relationships with internal or external customers, distributors, suppliers, or other parties in an environment which can include marketing, selling, servicing and other areas where a relationship is crucial to on-going success. At a senior level, it includes C-level relationships with senior management. Security Controls - Manages and maintains an information system that focuses on the management of risk and the management of information systems security. Security Governance - The process of developing and disseminating corporate security policies, frameworks and guidelines to ensure that day-to-day business operations are guarded and well protected against risks, threats and vulnerabilities. Security Information & Event Management (SIEM) - A set of tools and services offering real-time visibility across an organization's information security systems, and event log management that consolidates data from numerous sources. Security Policy Management - The process of identifying, implementing, and managing the rules and procedures that all individuals must follow when accessing and using an organization's IT assets and resources. Threat Analysis - Monitor intelligence-gathering and anticipate potential threats to an IT/OT systems proactively. This involves the pre-emptive analysis of potential perpetrators, anomalous activities and evidence-based knowledge and inferences on perpetrators' motivations and tactics. Threat Hunting - Searches through networks, endpoints, and datasets to detect and isolate cyber threats that evade existing security solutions. Vulnerability Management - The process of defining, identifying, classifying and prioritizing vulnerabilities in computer systems, applications and network infrastructures and providing the organization with the necessary knowledge, awareness and risk background to understand the threats to its business MINIMUM QUALIFICATIONS: Bachelor's Degree in Information Technology, related field or equivalent experience. Professional certification, e.g. Security+, Network+, OSCP, GIAC, CEH preferred. 5+ years of relevant experience required As an energy industry leader, our career opportunities fuel personal and professional growth. Location: San Antonio, Texas Additional locations: Findlay, Ohio, Houston, Texas Job Requisition ID: Location Address: 19100 Ridgewood Pkwy Education: Employee Group: Full time Employee Subgroup: . click apply for full job details

Job Description: We are seeking an experienced Information Security Engineer with strong Microsoft Windows infrastructure expertise to support the delivery of air traffic control systems to our customers. This role will focus on the implementation of Windows-based platforms to provide a secure environment for other Saab software to run in. The ideal candidate will have hands-on experience with Windows Deployment Service, Active Directory, Group Policy management, network design, and hardware/software integration. This position plays a key role in implementing and deploying air traffic control systems for customers, ensuring Windows environments are configured to support our software while meeting safety and security regulations. This role requires both an independent drive to troubleshoot implementation and the ability to work collaboratively with teammates to integrate various system components. Key Responsibilities Architecture Design: Develop, document, and maintain comprehensive security architectures, network designs, and cloud infrastructures Risk & Vulnerability Management: Evaluate deliverable systems to identify weaknesses, perform security reviews, and execute ethical hacks or penetration tests. Leadership & Guidance: Lead information technology analysts, security engineers, and deployment teams to coordinate effective security protocols and align projects with security guidelines Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards within customer environments. Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments. Implement and maintain Active Directory security configurations, including user/group management, OU structures, and policy enforcement. Design and implement role-based access control (RBAC) and least-privilege access models. Deploy, configure, and manage endpoint protection and antivirus solutions. Apply system hardening practices aligned with industry security frameworks and best practices. Perform security assessments of Windows environments and implement remediation actions. Assist in creating secure configurations, patch processes, and compliance with security policies. Document system configurations, security controls, and deployment procedures for customer environments. Provide technical guidance and knowledge transfer to customer stakeholders when appropriate. Compensation Range: $101,600 - $132,000 The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training. Skills and Experience: Required Qualifications Bachelor's degree in Systems Engineering, Computer Science, Information Technology, Information Security, or a related field (or equivalent experience). 6+ years of experience administering and securing Microsoft Windows environments. Strong hands-on experience with PowerShell scripting and automation. Proven experience creating and managing Windows domains, including development of Group Policy Objects and Active Directory structures. Experience integrating third-party software into Windows environments. Hands-on experience with Windows Deployment Services. Solid understanding of Windows security architecture and system hardening techniques. Preferred Qualifications Experience with PXE boot and BIOS configuration. Experience implementing role-based access control and identity management practices. Experience performing security assessments and remediation. Familiarity with security monitoring tools and SIEM platforms. Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001. Relevant certifications such as: CompTIA Security+ CISSP Microsoft security or identity certifications GIAC certifications Key Skills Hardware/operating system/software integration Customer-facing technical delivery and documentation Windows security architecture Active Directory administration Group Policy design and implementation Endpoint security and antivirus management Identity and access management (IAM) System hardening and vulnerability remediation Security assessments and remediation Desired Tool Experience Experience with the following tools and applications is highly desirable. Microsoft Hyper-V Virtualization Splunk PDQ RSA Authentication Manager Citizenship Requirements: Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. Drug-Free Workplaces: Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces. As a condition of employment, candidates will be required to pass a pre-employment drug screen. Benefits: Saab provides an excellent working environment offering professional growth opportunities, competitive wages, work-life balance, a business casual atmosphere and comprehensive benefits. Highlights include: Medical, vision, and dental insurance for employees and dependents Generous paid time off, including 8 designated holidays 401(k) with employer contributions Tuition assistance and student loan assistance Wellness and employee assistance resources Employee stock purchase opportunities Short-term and long-term disability coverage About Us: Saab is a leading defense and security company with an enduring purpose, to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. In the U.S., Saab delivers advanced technology and systems, supporting the U.S. Armed Forces and the Federal Aviation Administration, as well as international and commercial partners. Headquartered in Syracuse, New York, the company has business units and local employees in ten U.S. locations. Saab is a company where we see diversity as an asset and offer unlimited opportunities for advancing in your career. We are also a company that respects each person's needs and encourage employees to lead a balanced, rewarding life beyond work. Saab values diversity and is an Affirmative Action employer for protected veterans and individuals with disabilities. Saab is an Equal Employment Opportunity employer, all qualified individuals are encouraged to apply and will be considered for employment without regard to race, color, religion, national origin, sex (including pregnancy), sexual orientation, gender identity, age, veteran, disability status, or any other federal, state, or locally protected category.

Edward Jones seeks a Senior Security Engineer to safeguard critical financial systems and client data. In this role, you will design and implement secure architectures, harden cloud and on prem environments, and lead threat modeling for key platforms. You will evaluate and deploy security tools, manage SIEM alerts, and drive incident response and root cause analysis. Partnering with infrastructure, development, and compliance teams, you will ensure regulatory alignment, embed security by design, and mentor junior engineers while supporting a culture of integrity, collaboration, and continuous improvement. Responsibilities Design and implement secure architectures for cloud and on prem systems Harden servers, networks, and applications to protect client and firm data Lead threat modeling and security risk assessments for critical platforms Administer and optimize security tools, including SIEM, EDR, and IAM solutions Monitor, triage, and respond to security alerts and incidents Conduct root cause analysis and drive remediation and prevention efforts Ensure alignment with financial regulations and internal security policies Collaborate with infrastructure, development, and compliance teams on secure solutions Develop and maintain security standards, runbooks, and technical documentation Mentor junior security staff and champion security best practices across teams Required Skills Network security engineering Cloud security (AWS/Azure/GCP) SIEM configuration and tuning Endpoint detection and response (EDR) Identity and access management (IAM) Threat modeling and risk assessment Incident response and forensics Vulnerability management and remediation Secure configuration and hardening (servers, networks, applications) Scripting/automation (Python, Power Shell, or similar)

This job posting is anticipated to remain open for 30 days, from 14-Sep-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We are seeking a highly technical, hands-on Senior Non-Human Identity Engineer to lead the engineering, automation, onboarding, remediation, and operational management of non-human identities across the enterprise. This role is focused on the implementation and day-to-day engineering of machine identities, service accounts, workload identities, API credentials, certificates, secrets, and privileged application accounts supporting cloud, on-premises, and hybrid environments. This is not an architecture-only or governance-only position. The successful candidate will be expected to personally build solutions, write automation, troubleshoot authentication issues, onboard applications, integrate platforms, and drive remediation efforts. The engineer will work closely with application teams, DevOps, cloud engineering, cybersecurity, and infrastructure teams to ensure non-human identities are properly secured, monitored, and managed throughout their lifecycle. The ideal candidate combines deep IAM expertise with strong scripting, automation, cloud, and troubleshooting skills, and is comfortable operating in a fast-paced enterprise environment where hands-on execution is critical. What You'll Do: Engineer, implement, and support enterprise non-human identity solutions across cloud, on-premises, and hybrid environments. Develop and maintain automated provisioning, credential rotation, secret management, certificate lifecycle management, and deprovisioning processes. Perform onboarding and migration of service accounts, managed identities, workload identities, application accounts, and machine credentials into enterprise identity management platforms. Configure, deploy, and support privileged access controls for non-human identities using PAM and secrets management technologies. Work directly with development, application, and infrastructure teams to eliminate hardcoded credentials and replace legacy authentication methods with modern identity solutions. Design, build, and maintain automation using PowerShell, Python, REST APIs, Terraform, and other scripting or orchestration technologies. Integrate identity controls into CI/CD pipelines and DevSecOps workflows. Troubleshoot and resolve authentication, authorization, federation, certificate, token, and credential-related issues across enterprise applications. Support large-scale remediation initiatives involving dormant service accounts, excessive permissions, unmanaged secrets, and identity-related security vulnerabilities. Configure and administer identity platforms, including directory services, cloud identity providers, PAM solutions, certificate authorities, and secrets vaults. Monitor non-human identity activity and investigate suspicious authentication events, credential misuse, or policy violations. Conduct access reviews and entitlement analysis to ensure least-privilege principles are maintained. Create operational runbooks, implementation guides, engineering standards, and technical documentation. Partner with Security Operations and Incident Response teams during investigations involving machine identities and application credentials. Participate in after-hours support activities, major incident response, and maintenance activities when required. What Experience You'll Need: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or equivalent experience. 7+ years of hands-on experience in Identity and Access Management, Cybersecurity Engineering, Infrastructure Engineering, or Cloud Security. 5+ years of direct experience managing non-human identities, service accounts, application identities, workload identities, or machine authentication technologies. Strong hands-on experience administering Microsoft Entra ID, Active Directory, or similar identity platforms. Experience implementing and supporting secrets management, credential vaulting, and privileged access solutions. Strong scripting and automation skills using PowerShell, Python, Bash, or similar technologies. Experience working with OAuth 2.0, OpenID Connect, SAML, Kerberos, LDAP, certificates, and PKI technologies. Experience supporting Azure, AWS, Google Cloud, or multi-cloud environments. Ability to analyze logs, troubleshoot authentication failures, and resolve complex identity-related issues. Experience working within enterprise change management, incident management, and operational support processes. Strong verbal and written communication skills with the ability to collaborate across technical teams. What Could Set You Apart: Hands-on experience with CyberArk, HashiCorp Vault, Delinea, BeyondTrust, SailPoint, Microsoft Entra Workload Identities, or similar platforms. Experience managing certificate lifecycles and public/private key infrastructure. Experience securing Kubernetes, containers, microservices, and cloud-native applications. Familiarity with Infrastructure as Code technologies such as Terraform, Bicep, ARM, or CloudFormation. Experience with SIEM platforms and identity security monitoring. CISSP, CISM, Security+, Microsoft Identity and Access Administrator, CyberArk Defender/Sentry, or related certifications. Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. a text-decoration: none; color: ; tr th, tr td border: 1px solid ; tr th background-color: ; At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page . Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act. Edward Jones is prohibited from hiring individuals with certain specified criminal history as set forth in Section 3(a)(39) and 15(b)(4) and Rule 17a-3(a)(12) of the Securities and Exchange Act of 1934, and conducts background reviews consistent with FINRA Rule 3110(e). A copy of a notice regarding the provisions of the Los Angeles County Fair Chance Ordinance is available at: dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf .

Job Description Job Description Job Description TES Consultants is seeking an Intermediate AV/VTC Specialist to provide hands-on audiovisual and video teleconferencing support for a federal agency client in the National Capital Region. Working alongside the senior specialist and production engineer, you will keep conference rooms, collaboration spaces and meeting technology running for a headquarters population and its field offices. Day to day, you will take AV and VTC tickets from across the agency, set up and support scheduled meetings and events, troubleshoot audio, video, and connectivity faults, and perform preventive maintenance on room systems. You will work across Cisco and Poly room platforms with Microsoft Teams, Zoom, Cisco Webex, and Poly RealPresence. , Required Skills • A minimum of six (6) years of experience supporting audiovisual and video teleconferencing systems in an enterprise or comparable environment. • Setting up, operating, and troubleshooting VTC endpoints, room systems, displays, microphones, and cameras. • Supporting virtual and hybrid meetings across Microsoft Teams, Zoom, and comparable collaboration platforms. • First-line diagnosis of audio quality, video transmission, network connectivity, and hardware issues, with escalation when a fault exceeds your scope. • Routine preventive maintenance, inspections, and firmware updates on AV equipment. • Recording work in a ticketing system with enough detail that another technician can pick it up. • Ability to pass a full-field five-year employment background investigation (SF-85P, Questionnaire for Public Trust Positions) prior to starting work. • Authorized to work in the United States; all work performed within the United States. • Professional written and verbal communication, and a customer-service manner suitable for supporting executives and senior officials. Education. • Bachelor's degree required (see Required Skills). • Technical school or military training in audiovisual, broadcast, electronics, or IT is valued in addition. Certifications. • AVIXA CTS - preferred. • CompTIA A+ or Network+. • Manufacturer training or certification from Cisco, Poly, Crestron, Extron, or Biamp. • Microsoft Teams Rooms certification. , About The Enterprise Security Consultants, LLC TES Consultants is an SBA 8(a) certified Woman-Owned Small Business (WOSB) specializing in advanced cybersecurity and IT solutions. We leverage extensive industry experience and technical expertise to deliver automated, innovative, and impactful strategies for our DoD, Federal Civilian and Private sector clients.

Job Description Job Description Business Technology Integrators (BTI) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) with more than 25 years of experience delivering innovative and reliable IT and engineering solutions to the Federal Government. BTI supports mission-critical programs across defense and civilian agencies, with core expertise in cybersecurity, program management, enterprise IT, and technical oversight services. Position Overview The Intermediate AV/VTC Specialist will provide audiovisual, video teleconferencing, collaboration-platform, and multimedia production support for the Equal Employment Opportunity Commission. This position supports the configuration, operation, maintenance, and troubleshooting of AV/VTC systems within a distributed enterprise environment similar in size and complexity to the EEOC. The ideal candidate will have at least six years of relevant experience supporting audiovisual technologies, video production equipment, conferencing platforms, and integrated multimedia systems. The specialist will support live meetings, virtual conferences, presentations, broadcasts, and other mission-related events while ensuring high-quality audio, video, and collaboration services. Key Responsibilities Configure, operate, maintain, and troubleshoot audiovisual, video teleconferencing, and multimedia production equipment. Provide technical and operational support for Microsoft Teams, Zoom, Poly RealPresence, and Cisco video conferencing systems and endpoints. Set up and support virtual meetings, hybrid meetings, executive conferences, presentations, live events, and video teleconferences. Perform pre-event system checks and confirm that cameras, microphones, displays, speakers, conferencing platforms, and network connections are operating correctly. Monitor live meetings and events, quickly identifying and resolving audio, video, connectivity, or equipment issues. Provide video editing and post-production services for recorded meetings, training materials, presentations, and organizational communications. Operate video switchers, professional cameras, recording equipment, and related production technologies. Support camera placement, framing, lighting, recording, and live video production activities. Develop and edit graphics, animations, motion graphics, presentation materials, and other visual media. Perform audio mixing and configure microphones, speakers, amplifiers, and other sound-reinforcement equipment. Configure and support digital signal processing systems used for audio routing, optimization, and control. Operate and maintain AV control systems, projection systems, video walls, digital displays, and LED display technologies. Diagnose and resolve hardware, software, signal-routing, audio-quality, video-quality, and platform-integration issues. Perform preventive maintenance, firmware updates, equipment testing, and routine system inspections. Coordinate with IT, networking, facilities, communications, and event-support personnel to ensure reliable service delivery. Assist end users, presenters, executives, and meeting organizers with the proper use of AV/VTC systems. Maintain equipment inventories, system configurations, maintenance records, technical documentation, and standard operating procedures. Escalate complex technical issues to senior AV/VTC personnel, vendors, or appropriate support teams. Follow EEOC security, accessibility, operational, and information-technology policies and procedures. Minimum Qualifications A minimum of six years of experience providing AV/VTC support in an enterprise or federal environment similar in size, scope, and complexity to the EEOC. Demonstrated experience configuring, operating, maintaining, and troubleshooting AV and multimedia production equipment. Hands-on experience supporting Microsoft Teams, Zoom, Poly RealPresence, and Cisco video conferencing technologies. Experience with video editing, post-production, video switching, and camera operations. Experience with graphic design, animation, and motion-graphics development. Knowledge of professional audio mixing, microphone systems, signal routing, and sound-reinforcement technologies. Experience with digital signal processing, AV control systems, projection systems, video displays, and LED display technologies. Ability to support live, virtual, and hybrid meetings in a time-sensitive environment. Strong troubleshooting, customer-service, organization, and communication skills. Ability to communicate technical information clearly to both technical and nontechnical users. Ability to work independently and collaboratively with IT teams, government personnel, vendors, and other stakeholders. Ability to lift, move, install, and position AV equipment as required. Preferred Qualifications Associate's or bachelor's degree in Audiovisual Technology, Broadcast Production, Communications, Information Technology, Multimedia Production, or a related discipline. Experience supporting a federal government agency or a geographically distributed organization. Experience with enterprise conference rooms, executive briefing rooms, training rooms, auditoriums, and live-event environments. AVIXA Certified Technology Specialist certification, such as CTS, CTS-I, or CTS-D. Manufacturer certifications involving Poly, Cisco, Crestron, Extron, QSC, Biamp, or similar AV technologies. Familiarity with Section 508 accessibility requirements and federal information-security standards. Core Competencies AV/VTC system operation and troubleshooting Microsoft Teams, Zoom, Poly, and Cisco support Live and hybrid meeting support Video editing and post-production Video switching and camera operation Graphic design and motion graphics Professional audio mixing Digital signal processing AV control and projection systems LED and digital display technologies Preventive maintenance and documentation Customer and executive-level support Choose a Description from the Library LocationCountry - Multiple Countries -AfghanistanAland IslandsAlbaniaAlbertaAlgeriaAndorraAngolaAnguillaAntarcticaAntigua and BarbudaArgentinaArmeniaArubaAustraliaAustriaAzerbaijanBahamasBahrainBangladeshBarbadosBelarusBelgiumBelizeBeninBermudaBhutanBoliviaBosnia and HerzegovinaBotswanaBouvet IslandBrazilBritish ColumbiaBritish Indian Ocean TerritoryBrunei DarussalamBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCayman IslandsCentral African RepublicChadChileChinaChristmas IslandCocos (Keeling) IslandsColombiaComorosCongoCongo, The Democratic Republic of theCook IslandsCosta RicaCôte d' IvoireCroatiaCubaCyprusCzech RepublicDenmarkDjiboutiDominicaDominican RepublicEcuadorEgyptEl SalvadorEquatorial GuineaEritreaEstoniaEthiopiaFalkland Islands (Malvinas)Faroe IslandsFederated States Of MicronesiaFijiFinlandFranceFrench GuianaFrench PolynesiaFrench Southern TerritoriesGabonGambiaGeorgiaGermanyGhanaGibraltarGreat BritainGreeceGreenlandGrenadaGuadeloupeGuamGuatemalaGuernseyGuineaGuinea - BissauGuyanaHaitiHeard Island and McDonald IslandsHoly See (Vatican City State)HondurasHong KongHungaryIcelandIndiaIndonesiaIran, Islamic Republic ofIraqIrelandIsle of ManIsraelItalyJamaicaJapanJerseyJordanKazakhstanKenyaKiribatiKorea, Democratic People's Republic ofKosovoKuwaitKyrgyzstanLao People's Democratic RepublicLatviaLebanonLesothoLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacaoMacedonia, Republic ofMadagascarMalawiMalaysiaMaldivesMaliMaltaManitobaMarshall IslandsMartiniqueMauritaniaMauritiusMayotteMexicoMoldovaMonacoMongoliaMontenegroMontserratMoroccoMozambiqueMyanmarNamibiaNauruNepalNetherlandsNetherlands AntillesNew BrunswickNew CaledoniaNew ZealandNewfoundland and LabradorNicaraguaNigerNigeriaNiueNorfolk IslandNorthern Mariana IslandsNorthwest TerritoriesNorwayNova ScotiaNunavutOmanOntarioPakistanPalauPalestinian Territory, OccupiedPanamaPapua New GuineaParaguayPeruPhilippinesPitcairnPolandPortugalPrince Edward IslandPuerto RicoQatarQuebecReunionRomaniaRussian FederationRwandaSaint BarthélemySaint HelenaSaint Kitts and NevisSaint LuciaSaint Martin (French part)Saint Pierre and MiquelonSaint Vincent and the GrenadinesSamoaSan MarinoSao Tome and PrincipeSaskatchewanSaudi ArabiaSenegalSerbiaSeychellesSierra LeoneSingaporeSlovakiaSloveniaSolomon IslandsSomaliaSouth AfricaSouth Georgia and the South Sandwich IslandsSouth KoreaSouth SudanSpainSri LankaSudanSurinameSvalbard and Jan MayenSwazilandSwedenSwitzerlandSyrian Arab RepublicTaiwanTajikistanTanzania, United Republic ofThailandTimor- LesteTogoTokelauTongaTrinidad and TobagoTunisiaTurkeyTurkmenistanTurks and Caicos IslandsTuvaluUgandaUkraineUnited Arab EmiratesUnited KingdomUnited StatesUnited States Minor Outlying IslandsUruguayUzbekistanVanuatuVenezuelaViet NamVirgin IslandsWallis and FutunaWestern SaharaYemenYukonZambiaZimbabwe Street Address Powered by JazzHR ktfBlmglPp

Job Description Job Description DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations. At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs. Title: Information Systems Security III Clearance: Secret Location: VA Beach/Dam Neck (on-site) Position Summary DVS is seeking a senior-level Specialist, Information System Security III to provide advanced ISSE/ISSO and RMF engineering support for Department of the Navy information systems. This position leads and performs complex A&A, continuous monitoring, security assessment, vulnerability management, and risk-reduction activities and provides cybersecurity guidance for mission-critical Navy radar and data-distribution systems. Key Responsibilities Perform and support all phases of the RMF lifecycle and Navy A&A activities. Develop, maintain, review, and update comprehensive RMF authorization packages in eMASS. Perform STIG assessments using SCAP benchmarks and EvaluateSTIG. Conduct vulnerability assessments using ACAS and analyze findings for operational and cybersecurity risk. Develop, manage, and track POA&Ms and corrective actions. Develop and maintain SSPs, SARs, SCTMs, and related authorization artifacts. Complete and support RMF Step 5 authorization activities in the ISSE capacity. Assess security control implementation and identify control deficiencies. Communicate risk-reduction recommendations to Government and technical stakeholders. Provide senior cybersecurity engineering guidance for system architecture, configuration, boundary protection, and proposed technical changes. Coordinate ATO, IATT, IATO, authorization renewal, annual review, and continuous monitoring activities. Support cybersecurity audits, inspections, assessments, and Government data calls. Coordinate with system owners, engineers, administrators, laboratory personnel, and cybersecurity stakeholders to resolve authorization and compliance issues. Minimum Qualifications Degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer/Electrical/Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline. Qualifying bachelor's degree plus 10 years of experience Qualifying master's degree plus 8 years of experience High school diploma/GED plus 15 years of experience Demonstrated experience with STIG assessments, SCAP benchmarks/EvaluateSTIG, ACAS, eMASS, POA&M development, RMF Step 5 authorizations in an ISSE capacity, and communicating risk-reduction recommendations to stakeholders. Certifications: IAM level III : CISM, CISSP, GSLC, CCISO. SECRET Clearance Required. If you thrive on solving complex problems and building meaningful connections, we'd love to hear from you. Join our team and make an impact today! Physical and Mental Qualifications: Maintain focus and awareness throughout scheduled working hours. Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard. Lift and move objects weighing up to 15 pounds as needed. Exhibit excellent verbal and written communication skills, with a strong command of the English language. Demonstrate the ability to work independently while also collaborating effectively as part of a team. Quickly learn and retain routine tasks and processes. Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities. Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request. Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS). DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.

While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. As our Senior Application Security Engineer, you will be the primary owner and driver of our application security program. Youll work hands on with engineering teams to embed secure development practices, improve tooling and automation, and guide security considerations for new features, architectures, and services. This is a high impact role where youll shape the future of AppSec at a company that values security as a core part of product quality. What Youll Do Application Security Ownership Lead and evolve the companys application security strategy, roadmap, and day to day operations. Serve as the primary AppSec partner for numerous dev teams working on Ruby on Rails web apps, React Native mobile apps, and various other projects including Python and Go. Provide security guidance during design, development, and code review for new features and projects. Drive adoption of secure coding practices and threat modeling across engineering teams. Tooling & Automation Manage and optimize existing AppSec tooling, including: GitHub Advanced Security (SAST, SCA, Secret Scanning) Invicti (DAST) Hadrian (ASM) AppDome (mobile application security) Cloudflare WAF Improve automation and integration of security tools into CI/CD pipelines. Identify and implement additional tools or processes to strengthen the security posture. Secure SDLC & Developer Enablement Build and maintain secure development standards, playbooks, and training materials. Partner with engineering teams during sprint planning and feature design to proactively address risks. Conduct security reviews, code assessments, and vulnerability triage with development teams. Cloud & DevOps Collaboration Work with DevOps to ensure secure AWS infrastructure deployments and configurations. Contribute to hardening efforts across ECS, IAM, networking, and supporting cloud services. Assist in designing and maintaining secure CI/CD workflows. Incident & Vulnerability Management Lead or support investigation and remediation of application level vulnerabilities. Monitor, prioritize, and track findings from SAST/DAST/ASM tools. Collaborate with engineering to ensure timely and effective remediation. What Were Looking For Required Skills & Experience 3 7+ years of experience in Application Security, Product Security, or related engineering roles. Strong understanding of secure coding practices, common vulnerabilities (OWASP Top 10), and modern SDLC. Experience working with cloud native applications, ideally in AWS. Understanding of SSL certificates & cryptographic key management Hands on experience with SAST, DAST, WAFs, and/or mobile application security tools. Ability to partner effectively with developers and influence secure design decisions. Familiarity with GitHub based workflows and CI/CD pipelines. Nice to Have Development experience with Ruby on Rails or similar dynamic languages. Knowledge of AWS ECS/EKS, container security, secrets management and infrastructure as code (CloudFormation, Terraform). Experience building or maturing an AppSec program from early stages. SOAR Automation & Scripting experience Experience working in a PCI compliant environment working with annual reporting needs

Job Description Job Description Diamond Foundry Inc. is solving the thermal limitation at the foundation of today's most exciting tech industries AI & cloud compute, electric-car power electronics, and 5G/6G wireless. We have managed to produce the world's first single-crystal diamond wafers and are now on a mission to put a diamond behind every chip. We are the rare unicorn that has grown fast and profitably. We received $515m in funding and are executing a multi-$B expansion plan for one of the greenest forms of tech manufacturing: converting greenhouse gas into diamond wafers using zero-emission energy. We are looking for a software & systems engineer to develop and troubleshoot applications for our manufacturing line. We have a spectrum of custom-built and off-the-shelf equipment that we want to interact with in a unique way to optimize data collection, operator input, and overall system efficiency. You'll be working with an experienced team of mechanical, electrical, and process engineers, both assisting senior engineers and taking responsibility for your own engineering projects. Your goal will be to achieve maximum productivity for our production line through improving data collection methods, programming devices, automating workflows, and communicating with different types of devices using various communication protocols. Responsibilities Work with the automation control team to design, upgrade, automate, and troubleshoot in-house and third-party systems including: inspection tools, CNC lasers, parts handlers, and CVD reactors. Optimize control logic to enhance equipment performance and minimize operator interaction time Collaborate with end users to translate feature requests into actionable software design. Build algorithms and models to foster data-driven decision making Train technicians on correct procedures and work with them to implement requested changes. Organize and maintain documentation so others are able to understand and use it Write technical documentation for the design and use of equipment Source system components from software vendors where appropriate Requirements Bachelor's degree in electrical engineering, computer engineering, or similar engineering discipline (Master's degree preferred) with 2+ years of experience in software engineering or computer science Proficiency in Python is required, knowledge of programming languages and fieldbus protocols such as the following: C++/C, PLC programming, TCP/IP, MQTT, IIoT, Modbus, RS232, SCADA, Motion Control. Understanding of version control systems (Git) and knowledge of SQL basics. Experience with electrical, software, and/or mechanical systems. Familiarity with manufacturing processes or quality control systems Strong communication and data presentation skills, with the ability to effectively communicate data through text, graphics, and images to audiences of all experience levels. Experience with data visualization tools or with HMI (Human Machine Interface) development. Familiarity with computer vision systems and image processing, and experience with industrial automation environments, understanding of industrial networking protocols The position is eligible for company shares. Actual compensation may be higher or lower in the range based on various factors, including, but not limited to a candidate's job duties, experience, and expertise. We will also consider higher level candidates and salary will be adjusted accordingly. Diamond Foundry believes in supporting our employees from the workplace to their personal and home life. We provide eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. Perks include employee discounts to VRAI. Our benefits begin as early as your first day of employment. Medical and vision coverage are retroactive to your start date, while dental and voluntary benefits take effect once you've completed your enrollment. Diamond Foundry is an Equal Opportunity Employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor under federal, state or local law. Diamond Foundry Inc. is committed to operating in full compliance with all applicable state and federal laws. Our commitment extends to ensuring that our manufacturing and engineering departments adhere to the highest standards of legal and regulatory compliance. Additionally, these departments may have specific physical requirements to ensure the safety and efficiency of our operations. We prioritize the well-being of our employees and strive to create a work environment that promotes both legal compliance and the optimal functioning of our manufacturing and engineering processes. Manufacturing and Engineering Departments Physical Requirements: -Use appropriate PPE and follow all safety policies, practices, and procedures. -This position will often: Sit, stand for long periods, walk, grasp, reach with hands and arms, lift below and above shoulders, bend, twist at the waist, climb, balance, stoop, squat, kneel, crawl, talk, hear, see, use fine finger manipulation, and complete repetitive motions. -Some tasks may require the use of ladders or stairs -Some tasks may require driving or the use of foot controls -Lift/carry and push/pull up to 50 pound This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Job Description Description: Job Title: Security Control Assessor Location: On Site in Arlington, VA Department: Cyber Security Services Reports To: Management FLSA Status: Full Time/Non-exempt Job Purpose: The security control assessor (SCAs) supports a critical, objective role to evaluate the effectiveness of implemented controls in mitigating security risks. The SCA will support a critical mission within the intelligence community. In the role as a SCA, you are expected to use automated scanning tools, manual techniques, and specialized testing methodologies to identify weaknesses and vulnerabilities. The SCA is expected to be a collaborative member of the RMF program of the organization, to provide intelligent input to system security architectures in order to align with RMF principles and guidelines. This includes ensuring to guide the RMF process so that security controls are integrated seamlessly into system designs to provide comprehensive protection against threats and vulnerabilities. Duties & Responsibilities: The SCA's specific duties include: Advise the Information System Owner (ISO) concerning the impact levels for Confidentiality, Integrity, and Availability for the information on systems. Ensure security assessments are completed for each IS. Initiate a POA&M with identified weaknesses and suspense dates for each IS based on findings and recommendations from the SAR. Evaluate security assessment documentation and provide written recommendations for security authorization to the CISO and AO. Assess proposed changes to Information Systems, their environment of operation, and mission needs that could affect system authorization. Serve as a cybersecurity technical advisor to the CISO and AO under their purview. Be integral to the development of the monitoring strategy. The system-level continuous monitoring strategy must conform to all applicable published DoD enterprise-level or DoD Component-level continuous monitoring strategies. Determine and document in the SAR a risk level for every noncompliant security control in the system baseline. Determine and document in the SAR an aggregate level of risk to the system and identify the key drivers for the assessment. The SCA's risk assessment considers threats, vulnerabilities, and potential impacts as well as existing and planned risk mitigation. Develop the continuous monitoring plan specific to the information system. The SCA is responsible for the RMF deliverables associated with Step 4 of DOD and IC RMF Policies for assigned systems. This includes, but is not limited to: Security Assessment Plans tailored to specific systems control requirements Security control assessment input, which includes narratives for the review of controls and artifacts Security Assessment Reports ATO recommendations or ATO with Condition Memorandums Conduct initial remediation actions once a security assessment has been completed to ensure proper hand off to the ISSM and ISSOs. Assessment of selected controls IAW continuous monitoring strategy The SCA is expected to have additional duties as assigned in support of corporate cyber security services. Additional details are reviewed in accordance with company policies. Requirements: Required Skills & Experience: Strong knowledge of Risk Management Framework (RMF) 800-37 and continuous monitoring 800-137 Expert knowledge and hands-on experience with FISMA Systems, NIST 800-series guidelines, FIPS, Security Assessment & Authorization (SA&A) requirements and processes, Continuous Monitoring Framework experience and its tools, Plan of Action & Milestones (POA&M) policies, and vulnerability/patch management, risk management, project management, proficient with Microsoft products - Word, Excel, PowerPoint. Proficient with vulnerability and scanning tools and well-versed in interpreting risk posture resulting from assessment reports. Experience in project management and tracking, and the Microsoft suite of office products Experience of assessing cloud-based security authorizations (FedRamp, AWS & Azure) as well as the NIST control responsibilities Experience with SAP/JSIG Expert with documenting and or reviewing of security materials such as; system security plans (SSP), Security Assessment Report (SAR), and Security Assessment Plan (SAP), and other documents per NIST 800 guidelines. Experience supporting cloud-based security authorizations (FedRamp, AWS, & Azure) Experience creating Security Assessment Plans, Security Assessment Reports, and Executive-level briefings Qualifications: Bachelor's Degree in Computer Science or a related technical discipline Master's Degree preferred. Minimum 6-10 years of experience. Must currently possess an active TS/SCI with the ability to obtain and maintain a CI polygraph. DOD 8140 IAM Level II (CAP, CASP, CISM, CISSP, GSLC, CCISO) is required Systems Security Engineering background preferred. Effective communication skills to collaborate with cross-functional teams and stakeholders on implementing security measures organization-wide. Strong analytical skills for identifying system vulnerabilities and documenting control remediation recommendations through collaboration on System Impact Analysis and Documented Risk Acceptance. Detail-oriented with the ability to manage multiple tasks and prioritize effectively. Comprehensive knowledge of RMF activities at a senior level (ability to articulate to Executive audiences preferred). Familiarity with federal regulatory requirements, contractual obligations, and industry standards related to information security. Evaluate adherence to standards such as Privacy, GDPR, and HIPAA Other: This is typical office or administrative work, and there is no exposure to adverse environmental conditions. This position requires sedentary work. Sedentary work is defined as: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.