12 jobs found

Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the choice for the military community and their families. Embrace a fulfilling career at USAA, where our core values - honesty, integrity, loyalty and service - define how we treat each other and our members. Be part of what truly makes us special and impactful. We are proud to support active-duty military spouses. USAA roles may offer remote or hybrid flexibility for active-duty military spouses consistent with applicable policy and business needs. The Opportunity We are seeking two dedicated Infrastructure Engineer Seniors for one of the most visible and strategically important technology environments at USAA. On the Executive Technology Support team, you'll engineer, operate, and continuously improve the systems, endpoints, mobility, identity, conferencing, and AV infrastructure that USAA's executives depend on every day - including the Chairman, CEO, executive officers, and their support staff. This is a hands-on infrastructure engineering role with an executive-facing service edge. You'll design and automate the executive computing environment, resolve the hardest end-to-end incidents across endpoint, network, identity, and collaboration platforms, and drive engineering fixes back into the underlying systems so problems don't repeat. You'll build the standards, playbooks, telemetry, and infrastructure-as-code that turn white-glove support from heroics into a repeatable, engineered service - and you'll be the trusted technology partner senior leaders count on during high-visibility business moments, meetings, travel, and leadership transitions. If you want your infrastructure engineering work to be directly felt at the very top of the enterprise every single day, this is your opportunity. We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position will be based in San Antonio; TX. Relocation assistance is not available for this position. What you'll do: Independently designs scalable IT system infrastructure, provides oversight and priority for system change - reserves execution for complex implementations, and automates service delivery and maintenance tasks; provides direction and priority for monitoring and tooling activities. Independently resolves highly complex technology production issues and leads troubleshooting of end-to-end solutions that span across multiple systems. Leads analysis of end-to-end system failures to identify opportunities across multiple systems. Makes recommendations to business leaders on best solutions. Independently experiments with new patterns and technologies. Helps establish and improve engineering best practices, concepts, and patterns with peers and the business. Understands the customer and proactively identifies innovative solutions and ideas for the product/business. Mentors' engineers, coach engineers on design, development, and maintenance of systems. Develop software defined infrastructure in code in CI/CD Pipelines. Ensures risks associated with business activities are effectively identified, measured. What You Have: Bachelor's degree; OR 4 years of relevant education and/or experience. 6 years of infrastructure experience demonstrating depth of technical understanding within a specific discipline(s)/technology(s) - to include 2 years' experience in a Systems Operations or end-user computing environment supporting complex deployment and infrastructure management activities, or applicable IT experience such as IT Management, Software Development, Data Engineering, or Agile Product/Release Management. 4 years of experience creating, modifying, and maintaining infrastructure and individual system components across endpoint, mobility, identity/access, conferencing/AV, or collaboration platforms. Advanced troubleshooting depth across end-to-end technology stacks - including endpoint (Windows and/or macOS), mobility (iOS/Android/MDM), identity and access (SSO, MFA, conditional access), enterprise networking and remote access, and collaboration tools (Microsoft 365, Teams, Zoom). Experience providing executive-level support for mobile devices, including iOS/iPadOS, Android, Microsoft Intune (or equivalent MDM), mobile email, and collaboration platforms. Demonstrated experience working with cloud technologies and tools. Experience automating service delivery and maintenance through scripting and/or infrastructure-as-code (PowerShell, Bash, Python, Terraform, Ansible, or equivalent). Experience owning complex, cross-team escalations end-to-end and driving root-cause remediation back into the underlying platforms. Advanced level of business acumen in the areas of business operations, risk management, industry practices, and emerging trends. Demonstrated ability to operate with professionalism, discretion, confidentiality, and sound judgment in high-visibility and time-sensitive situations. Strong oral and written communication skills, including the ability to explain complex technical topics clearly to non-technical and executive audiences. What Sets You Apart: Experience supporting senior leaders, executives, boards, or other high-touch customer groups in a large enterprise, financial services, or similarly regulated environment. Engineering depth in at least two of: macOS management (Jamf or equivalent), Windows endpoint management (Intune, SCCM), iOS/Android MDM, identity and access engineering, enterprise networking and remote access, or executive conference room and AV design (Zoom Rooms, Microsoft Teams Rooms, Crestron / Poly / Cisco). Experience engineering, instrumenting, and continuously improving executive computing environments - including telemetry and digital experience monitoring (e.g., Nexthink, ControlUp, Splunk, or similar) and using that telemetry to drive proactive fixes. Experience embedding automation and infrastructure-as-code into a support / end-user computing function to eliminate manual toil. Experience applying AI-assisted support, agentic tooling, or generative AI responsibly inside an enterprise support context. Experience managing complex escalations that require coordination across endpoint, identity, networking, collaboration, security, and vendor teams. Experience partnering with Cybersecurity on executive threat protection, endpoint hardening, and privileged access patterns. Experience partnering with Executive Protection, Corporate Communications, Executive Administration, Facilities, and Physical Security to deliver an integrated executive experience. Experience building or improving support procedures, playbooks, readiness checks, or operational standards; and mentoring peers or serving as an escalation point for junior engineers. Experience designing and running 24x7 on-call, follow-the-executive, and travel-support coverage models. Relevant certifications, including: CompTIA A+ Apple Device Support (ACSP - Apple Certified Support Professional) InfoComm CTS (Certified Technology Specialist) ITIL v4 Foundation, Microsoft 365 Certified: Endpoint Administrator, or equivalent (a plus Compensation range: The salary range for this position is: $114,080- $218,030. USAA does not provide visa sponsorship for this role. Please do not apply for this role if at any time (now or in the future) you will need immigration support (i.e., H-1B, TN, STEM OPT Training Plans, etc.). Compensation: USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market data of the position. The actual salary for this role may vary by location. Employees may be eligible for pay incentives based on overall corporate and individual performance and at the discretion of the USAA Board of Directors. The above description reflects the details considered necessary to describe the principal functions of the job and should not be construed as a detailed description of all the work requirements that may be performed in the job. Benefits: At USAA our employees enjoy best-in-class benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), pension, life insurance, parental benefits, adoption assistance, paid time off program with paid holidays plus 16 paid volunteer hours, and various wellness programs. Additionally, our career path planning and continuing education assists employees with their professional goals. For more details on our outstanding benefits, visit our benefits page on Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting. USAA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Job Description What You Will Do The Cybersecurity Analyst III at EXOS CYBER is the senior technical escalation point of the SOC ? the final analyst-tier authority on the hardest, most ambiguous investigations before a case moves into engineering. When Tier 2 has driven an alert as far as standard playbooks and queries allow and still doesn't have a confident answer, it comes to you. You own confirmed, significant incidents end to end across our client environments. You will support day-to-day security operations for our clients with a primary focus on advanced detection, incident response, and threat hunting, working alongside our Cybersecurity Engineers, and Team Lead. Beyond the queue, you set the bar for investigation quality across the SOC. You QA escalations, mentor and develop Tier 1 and Tier 2, build out the investigation curriculum, and partner with engineering on detection strategy at the program level, not just one noisy rule at a time. This is a hands-on, deeply technical role designed for analysts with 5+ years of experience (or 2+ years past Tier 2) who are ready to operate as the senior individual contributor in a real-world MSSP detection-and-response practice spanning across a diverse client environments. Serve as the Tier 3 technical escalation point in the SOC. Take the incidents that Tier 2 cannot fully resolve, drive them to a definitive answer, and hand only genuinely engineering-scoped or architecture-level problems to the Cybersecurity Engineers and Team Lead with a clear, evidence-backed recommendation and a proposed course of action. Lead confirmed true-positive incidents end to end across client environments including but not limited to ransomware, business email compromise, account takeover, lateral movement, and data exfiltration including scoping and impact assessment, containment orchestration via SentinelOne, account isolation and credential rotation in Entra ID, eradication and recovery guidance, evidence preservation, root-cause analysis, and client communication through resolution. Own and run the proactive threat hunting program: develop hypothesis-driven hunts across the client base using various queries, EDR telemetry, and indicators from CTI feeds; document findings; and feed confirmed patterns back into detection engineering as durable, reusable detections. Perform host, memory, and network forensics (Velociraptor, endpoint and identity artifacts, timeline reconstruction) to establish what happened, when, and how far it went, and to support breach-notification and legal/insurance coordination when an incident warrants it. Conduct phishing triage and support email-based threat investigations, including user impact assessment and remediation steps. Partner with the Cybersecurity Engineers and AI Automation Engineer on detection strategy at the program level coverage and gap analysis against MITRE ATT&CK, detection content design, and false-positive reduction across the fleet rather than one-off alert tuning. Apply offensive and adversary-emulation knowledge to inform detection coverage, and support purple team and adversary-emulation exercises by translating attacker TTPs into detections and validating that controls fire as expected. Analyze endpoint, identity, and network telemetry to identify suspicious activity, lateral movement, and persistence, and lead phishing and email-based threat investigations through full user-impact assessment and remediation. Set and enforce investigation quality standards: QA Tier 1 and Tier 2 escalations and case documentation, run walk-throughs of significant investigations, give kind and direct feedback, and own the Tier 1/Tier 2 onboarding and skills-development curri Author the analytical narrative for the most complex client deliverables, post-incident reports, after-action reviews, and the senior-analyst portion of monthly client reporting covering what we saw, what it means, and what we recommend, in language a client technical stakeholder can act on. Drive SOC operational maturity by shaping runbook and playbook architecture, investigation checklists, and repeatable workflows, and by mentoring the team toward consistent, defensible outcomes Our Company In 2009 EXOS established itself as an IT consulting and staff augmentation firm. We specialize in focusing on what the client needs and adapting to how our client works. Our number one goal is to deliver the RIGHT solution, with the RIGHT resource, for the RIGHT price at the RIGHT time. The Company has three areas of focus: Professional Services and Consulting: As a full-service IT consulting firm, we offer a wide array of services to adapt to our clients' businesses. No matter what is needed, we have a solution that fits. Whether it be custom application development or providing highly specialized IT resources to run a project, we assist our clients to ensure their IT initiatives cross the finish line. Staffing: Our solutions foster stronger relationships with customers, suppliers, and partners, which greatly improve our clients' productivity, while reducing overall IT costs. Managed Services: We realize our clients don't have the time to worry about the most important tools that its people use technology. We take care of our client's network and service its system. Our Values We are Empowering At EXOS we empower our clients by providing them with essential strategic IT guidance, reliable service, and the talent necessary to achieve their business goals. We empower our team by living a culture of collaboration, trust, and learning, creating growth opportunities, and charting a clear career path for all our team members. We are Connected At EXOS we are connected to our clients and their purpose. We are not just a talent and technology partner; we are an extension of your business. We seek to understand where leadership is driving the company, and we connect across all aspects of the business necessary to make that goal a reality. We are connected to the communities we serve and invested in organizations that make them great places to live. As the EXOS team, we are connected through our common commitment to our cultural imperatives: the 'Three Ps' ? Be Positive, Be Productive and Be Progressive in the since that we are always challenging each other to learn and grow. We are Trusted For more than fifteen years EXOS has been a trusted partner in providing Talent, IT and Cybersecurity solutions for our clients. Whether it's servicing large-scale enterprise clients or start up professional firms, our team is there to help solve pain points and provide strategic direction. The trust we have with one another as a team is earned. We live a culture of accountability with a goal of excellence. We are invested in one another's success, personally and professionally. We are a trust first, learn together and celebrate collectively team. Must Haves 5+ years of experience in a SOC, incident response, MSSP, or security operations role, or 2+ years past a Tier 2 / Analyst II role in a comparable environment. Demonstrated ability to independently lead complex investigations and confirmed incidents to resolution across endpoint, identity, email, and network telemetry ? not just triage and escalate. Advanced command of an EDR (SentinelOne, CrowdStrike, or Defender for Endpoint) and a SIEM (Blumira, Sentinel, Splunk, or QRadar) at the query, pivot, and detection-authoring level. Practical host and network forensics and evidence-preservation experience, including timeline reconstruction across Windows event logs, Active Directory, Entra ID, firewall, VPN, DNS, and email security logs. Hands-on proactive threat hunting experience: building and executing hypothesis-driven hunts and converting findings into detections. Proficient scripting in PowerShell and/or Python for investigation, log parsing, and automation. Working fluency with the MITRE ATT&CK framework for both investigation and detection-coverage mapping. Strong command of the incident response lifecycle, escalation criteria, and chain-of-custody / evidence-handling practices. Ability to lead under pressure in a multi-client environment, prioritize across simultaneous active incidents, and maintain quality and clear documentation throughout. Excellent written communication, with the ability to produce client-ready incident summaries, post-incident reports, and analytical narratives, and to mentor junior analysts effectively. Solid fundamentals in TCP/IP, DNS, HTTP/S, Windows and Linux internals, and identity and access management. Relevant certifications such as CompTIA CySA+, GIAC GCIH/GCIA/GCFA, BTL2, or equivalent demonstrated experience. Plus Haves Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline. Equivalent military training or certifications considered. Advanced certifications such as GIAC GCIA, GCFA, GCFE, GNFA, GCTI, GREM, or BTL2; offensive-informed credentials (OSCP, CRTO) a strong plus given the role's detection and purple-team-support scope. Prior MSSP experience in a multi-tenant model, including a multi-tenant PSA/ticketing platform (ConnectWise, Autotask, ServiceNow, or similar). Detection engineering experience: Sigma rules, KQL, and SentinelOne / Blumira query syntax, plus comfort building detections from hunt findings. Experience with SOAR or rules-based automation and operationalizing playbooks alongside an AI Automation Engineer. . click apply for full job details

Job Description About CLS: CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars' worth of currency flows through our systems each day. Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world's most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use. CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle - whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market. Job information: Functional title - Cyber & Network Security Engineer Department - CISO Corporate level - Vice President Report to - Cyber & Network Security Engineering Lead Location - Iselin, New Jersey. On Site 2 days per week. Expected full-time salary range between $170,000 - $190,000 + variable compensation + 401(k) match + benefits. Note: Disclosure as required by NY Pay Transparency Law of the expected salary compensation range for this role. What you will be doing: The Vice President (VP), Security Engineering is a senior technical engineering role responsible for leading the deployment, automation, and operational support of enterprise security platforms and controls. Ideally the candidate will have AWS cloud infrastructure security tooling integration, security automation experience. This role requires a hands-on engineer who can build and deploy AWS-based environments to evaluate, test, and design and operationalize new security technologies and engineer off the shelf security tools. They will lead and mentor the junior engineers. Curiosity to learn, get stuck in and get things delivered. Key Responsibilities: Security Engineering & Tool Deployment Design, build and configuring and maintain enterprise security platforms and services. Have experience with some or all the following products Splunk Enterprise / Splunk Cloud Forcepoint Web Security Forcepoint Email Security & DLP Zscaler DLP and Internet Access Microsoft Purview DLP Qualys VMDR Crowdstrike Faclon Additional threat detection, monitoring, and data protection technologies. Troubleshoot platform, infrastructure, and integration issues across security ecosystems. Work with infrastructure engineering on infrastructure deliverables ensuring that security is engineered into their solutions. Provide senior leadership and guidance to the wider engineering community. AWS Infrastructure Engineering Help build and manage AWS environments used for proof-of-concepts, product evaluation, security testing, and production deployments. Develop repeatable Infrastructure-as-Code (IaC) capabilities for rapid deployment of security tooling. Engineer secure cloud architectures incorporating: EC2 VPCs Security Groups IAM Route53 S3 Lambda CloudWatch GuardDuty AWS Organizations Support secure cloud adoption initiatives and platform modernization programs. Security Automation & Development Develop automation solutions using Python to reduce operational overhead and improve security effectiveness. Create and maintain scripts, APIs, orchestration workflows, and automation frameworks for: Security tool deployment Configuration management Monitoring and alerting Compliance validation Asset discovery Data collection and reporting Integrate security tooling with enterprise workflows and operational platforms. Security Monitoring & Detection Engineering Design and implement security monitoring use cases. On board new log sources. Develop Splunk searches, correlation rules, dashboards, and reporting capabilities. Improve threat detection coverage through security telemetry integration and log onboarding. Partner with Cyber Defense teams to improve detection engineering and incident response capabilities. Data Protection Engineering Deploy and manage enterprise Data Loss Prevention (DLP) solutions. Configure and optimize: Forcepoint DLP Microsoft Purview DLP Zscaler DLP Work with data owners and security architects to implement controls protecting sensitive information. Technical Leadership Collaborate closely senior engineers and architects to deliver secure-by-design solutions. Support security technology roadmaps and strategic initiatives. Experience 5+ years of experience in Security Engineering, Cloud Security Engineering, or Infrastructure Security. Experience mentoring and leading junior engineers. Experience working across engineering and architecture groups to deliver solutions that are secure from the ground up. Experience building and deploying AWS environments from the ground up. Hands-on experience onboarding, configuring, and operating enterprise security platforms. Strong experience automating security operations using Python. Experience supporting security technology evaluations, proof-of-concepts, and production rollouts. Technical Skills: Cloud & Infrastructure AWS (preferred) Infrastructure-as-Code concepts Linux and Windows administration Networking fundamentals (TCP/IP, DNS, HTTP/S, Routing, Proxies) Security Technologies (all not essential but desirable) Splunk Forcepoint Web Security Forcepoint DLP Forcepoint Email Security Zscaler DLP Microsoft Purview DLP Qualys VMDR SIEM, Endpoint Detection & Response (EDR), DLP, and Vulnerability Management technologies Ansible SCCM Development & Automation SPL Python REST APIs Automation frameworks Scripting and orchestration CI/CD concepts Desirable Qualifications AWS Solutions Architect, Security Specialty, or equivalent certification. Splunk Power User, Admin, or Architect certification. CrowdStrike Certified Falcon Administrator. Experience with Terraform or CloudFormation. Key Competencies Troubleshooting and problem-solving skills. Strong engineering mindset with a passion for automation. Strong desire to learn new technologies. Success Measures Engineering and onboarding of security technologies. Increased automation and reduction in manual operational effort. Improved security monitoring and detection capabilities. Stable, scalable, and secure AWS-hosted security infrastructure. Successful delivery of security engineering initiatives aligned with business and security objectives. What we're looking for: Experience in security engineering / cyber engineering in complex, regulated environments (markets technology / investment banking / FMI strongly preferred). Proven delivery of large-scale security platforms end-to-end (design build run), including multi-system integration. Engineering mindset: able to go deep on architecture, automation, telemetry, and operational resilience. Strategic thinker with the ability to translate vision into execution. Strong communicator and collaborative who can work across the organization. Data-driven and outcome-focused, with a bias toward measurable security improvements. Comfortable operating in fast-paced, evolving environments. Professional qualifications / certifications: Experience in security engineering (5+ years) Experience in: Working in highly regulated operations and complex organizational structures. Reporting to senior leadership supporting executive level decision-making and prioritization. Engaging in complex governance, contributing to multi-layered committees or forums. Understand, interpret and apply regulatory requirements, compliance and industry standards. Our commitment to employees: We are a small company with a big mandate, so every person is essential to our success. We are also committed to employing and retaining the most talented and dedicated people. What makes us interesting goes beyond our competitive salaries and great benefits. Our work environment is designed around quality outcomes, not output. The FX market would cease to function without our services, and we take pride in being responsible for keeping it running smoothly. We are different from other financial institutions in that we have a flatter and more transparent structure, with accessible leadership. You will be seen, heard and empowered to develop your career. We are a purpose-driven organization, with an inclusive culture that focuses on doing what is right. The well-being of our people is as important to us as the resilience of our systems . click apply for full job details

At Credence, we support our clients' mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for war-fighters and secure our nation for a better future. We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success. We have an immediate need for a highly skilled Senior-level DevSecOps Engineer to support federal programs hosted on AWS GovCloud. This role requires expertise in DevSecOps best practices, cloud automation, security compliance, and continuous integration/continuous deployment (CI/CD) to enhance the security, scalability, and efficiency of mission-critical applications. Core Responsibilities Technical Leadership & Team Management: Lead, mentor, and manage a team of approximately five DevSecOps engineers, providing technical direction, prioritizing work, conducting code and architecture reviews, and fostering a collaborative, high-performing "one team" culture while remaining an active hands-on contributor. Hands-On Engineering: Serve as the technical lead for complex infrastructure, automation, and deployment efforts by designing solutions, troubleshooting production issues, developing infrastructure and pipeline code, and supporting implementation across the DevSecOps toolchain. Operational Support & On-Call: Provide operational leadership during production incidents, outages, and high-priority events. Participate in an on-call rotation as required, ensuring timely incident response, root cause analysis, and restoration of services while driving continuous improvements to system reliability and operational maturity. AWS GovCloud Architecture & Management: Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments for DoD and Civilian agency applications. DevSecOps Pipeline Development: Build and optimize CI/CD pipelines using tools like GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform to automate deployments and security compliance. Security & Compliance: Ensure adherence to Federal cybersecurity frameworks (e.g., NIST 800-171, NIST 800-53, RMF, FedRAMP, Zero Trust). Implement STIGs, security baselines, and automated security scanning (SAST/DAST). Infrastructure as Code (IaC): Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible. Containerization & Orchestration: Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud, leveraging services like Amazon EKS, ECS, and Fargate. Monitoring & Incident Response: Implement AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK for proactive monitoring, logging, and compliance reporting. Automation & Scripting: Develop automation scripts using Python, Bash, or PowerShell to improve deployment efficiency and security enforcement. Collaboration & Knowledge Sharing: Work closely with software developers, cybersecurity teams, and cloud engineers to integrate security and automation into the software development lifecycle (SDLC). Requirements US citizenship with the ability to obtain a successful DoD Secret security clearance required Security+, AWS Certified Security 7+ years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles. Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks. Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar). Hands-on experience with Infrastructure as Code (IaC) using Terraform, CloudFormation, and Ansible. Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate). Strong understanding of AWS security services (AWS IAM, GuardDuty, Security Hub,AWS KMS, AWS WAF, AWS Config, AWS Secrets Manager). Knowledge of federal cybersecurity frameworks (RMF, NIST 800-171/53, STIGs, ZeroTrust). Experience implementing automated security testing (SAST, DAST, vulnerability scanning, SBOM management). Proficiency in scripting (Python, Bash, PowerShell) for automation and security enforcement. Salary Range: $150,000 - $180,000 annually. Actual compensation will be determined based on the selected candidate's experience, education, certifications, skills, and overall qualifications. Please join us, as together we build a better world one mission at a time powered by Technology and its People!

Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training

Job Description Job Description Company Description TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs. Job Description TechSur is seeking a Senior Security Specialist with governance, risk, and compliance (GRC) expertise to lead Authority to Operate (ATO) work for a federal customer's new cloud services. You will guide customer cloud environments on AWS, Azure, Google Cloud, and Oracle Cloud through the NIST Risk Management Framework, from control mapping and System Security Plans to third-party assessment and continuous monitoring. You will work with cloud engineers, customer security teams, and Authorizing Officials. You will make sure every landing zone, pipeline, and shared service is built to meet NIST SP 800-53 Rev 5, FedRAMP, and customer security requirements, and that it stays compliant once in production. Key Responsibilities Lead ATO preparation for cloud services under NIST SP 800-37 (RMF), NIST SP 800-53 Rev 5, and FedRAMP Moderate/High processes. Develop and maintain System Security Plans, control implementation statements, Customer Responsibility Matrices, and CSP control-inheritance documentation. Coordinate with a Third-Party Assessment Organization (3PAO): support Security Assessment Plans and Reports (SAP/SAR), gather evidence, facilitate interviews, and respond to findings. Manage Plans of Action and Milestones (POA&Ms): track gaps, owners, and remediation dates in ServiceNow and help engineering teams close findings. Run continuous monitoring with CSP-native and third-party tools (AWS Security Hub, Microsoft Defender for Cloud, GCP Security Command Center, OCI Cloud Guard, Prisma Cloud) and produce monthly compliance reports. Prioritize vulnerabilities using CVSS, exploitability, and customer risk ratings. Review architectures, IaC templates, and CI/CD pipelines for alignment with Zero Trust (NIST SP 800-207), CIS Benchmarks, and customer security standards. Help develop incident response playbooks mapped to MITRE ATT&CK and take part in tabletop exercises. Brief customer security leadership and present security posture at monthly Security & Compliance reviews. Qualifications Required Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. At least 9 years of information security experience, including implementing and managing security controls and leading ATO efforts. Deep working knowledge of the NIST RMF (SP 800-37) and NIST SP 800-53 Rev 5 control families. Hands-on experience writing SSPs and managing SAP/SAR and POA&M processes with a 3PAO or agency assessor. Experience performing continuous security assessments and monitoring in cloud environments. Strong technical writing skills and the ability to brief senior government stakeholders. Ability to obtain and maintain the background investigation required by the federal customer. Preferred Qualifications CISSP, CISM, CGRC (formerly CAP), CRISC, or CCSP certification. Experience with FedRAMP Moderate or High authorizations for multi-cloud environments. Experience with OSCAL-based security documentation and GRC platforms (e.g., ServiceNow IRM/GRC, Xacta, eMASS). Familiarity with agency-specific security frameworks built on NIST SP 800-53. Experience with CSPM tools and Splunk-based security monitoring. Prior support of a civilian federal agency. Additional Information All your information will be kept confidential according to EEO guidelines.

GovCIO LLC seeks a Senior AJOC Support Engineer to provide mission-critical support for federal IT operations. In this role, you will monitor and maintain AJOC environments, manage incidents and outages, and ensure high availability, security, and performance of government systems. You'll troubleshoot complex infrastructure and application issues, implement runbooks and automation, and collaborate with engineers, cybersecurity, and program teams. Working in a mission-driven, fast-paced environment, you'll help modernize federal IT while mentoring junior staff and continuously improving tools and processes. Responsibilities Monitor and support AJOC environments to ensure availability, performance, and security for federal customers. Respond to, triage, and resolve incidents, outages, and service requests within defined SLAs. Troubleshoot complex infrastructure, application, and network issues across Linux/Windows and cloud environments. Develop, maintain, and improve runbooks, standard operating procedures, and documentation. Implement automation and monitoring improvements to enhance reliability and reduce manual effort. Collaborate with engineering, cybersecurity, and program teams on root cause analysis and long-term fixes. Support compliance with federal security policies and change management processes. Mentor junior support engineers and contribute to a culture of continuous learning and improvement. Required Skills AJOC operations support Incident and problem management Linux/Windows server administration Network monitoring tools (e.g., Splunk, Solar Winds) Scripting/automation (Python, Power Shell, or Bash) Cloud platforms (AWS, Azure, or Gov Cloud) ITIL-based service management Security and compliance in federal environments Root cause analysis and troubleshooting Technical documentation and runbook creation

GovCIO LLC seeks a Senior CSOC Support Engineer to bolster cybersecurity operations for federal customers. In this role, you'll support a 24x7 Cyber Security Operations Center by managing and tuning SIEM and security tools, integrating new data sources, and improving alert fidelity. You'll troubleshoot complex issues, guide junior analysts, and collaborate with engineers to refine detection use cases and automation. You'll also document playbooks, liaise with government stakeholders, and help drive continuous improvements that strengthen mission-critical federal networks and systems against evolving cyber threats. Responsibilities Support and enhance tools and workflows for a 24x7 Cyber Security Operations Center (CSOC). Administer, tune, and integrate SIEM and other security platforms to improve alert quality. Troubleshoot complex security tooling and data ingestion issues. Develop and maintain detection content, runbooks, and standard operating procedures. Collaborate with analysts, engineers, and government stakeholders on incident handling and improvements. Mentor junior CSOC staff on tools, processes, and best practices. Monitor system health and performance of security infrastructure. Support automation initiatives to streamline triage and response activities. Required Skills Cybersecurity operations SIEM tools (Splunk/Elastic/etc.) IDS/IPS management Incident detection and triage Linux/Windows administration Network security and TCP/IPSecurity automation and scripting Vulnerability management Ticketing and ITSM tools Documentation and reporting

Job Description Job Description On our expert team, you'll perform work focused on implementing and operating next generation security solutions for government and commercial clients. You'll perform hands-on evaluation, implementation, and operation of leading security cyber defense tools and technologies, and apply in-depth defense strategies to large and complex networks to rapidly identify vulnerabilities and threats, prioritize response actions, and develop effective countermeasures. You'll apply thought leadership in a highly collaborative and innovative work environment to solve complex security challenges. You will lead a team as they engineer solutions to complex challenges for customers using knowledge network engineering, Active Directory, and system administration. In this role, you'll closely impact mission success, protecting data and networks from malicious payloads and actors. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect our nation's most sensitive capabilities. What You'll Work On: Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise. Requirements Experience with the deployment or daily maintenance of Forescout CounterACT appliances 5+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades Experience architecting and designing IP networks, including developing and documenting network topologies Experience with network engineering, including physical or logical such as installation and activation of ports, configuration of switches, and LANS, VLANS, and network FW, or appliances or network administration services such as Active Directory, Guests LANS, and domain management Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 10+ years of experience supporting IT projects and activities, Bachelor's degree and 8+ years of experience supporting IT projects and activities, or Master's degree and 6+ years of experience supporting IT projects and activities DoD 8570 IAT Level II Certification such as Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date Nice If You Have: Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems Ability to install and deploy Forescout in a customer environment Ability to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation Ability to be a self-starter, work without considerable direction, and work with a team Possession of excellent verbal and written communication skills, including for coordinating efforts and establishing customer relations Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance Candidate AI Usage Policy AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Job Description Job Description On our expert team, you'll perform work focused on implementing and operating next generation security solutions for government and commercial clients. You'll perform hands-on evaluation, implementation, and operation of leading security cyber defense tools and technologies, and apply in-depth defense strategies to large and complex networks to rapidly identify vulnerabilities and threats, prioritize response actions, and develop effective countermeasures. You'll apply thought leadership in a highly collaborative and innovative work environment to solve complex security challenges. You will lead a team as they engineer solutions to complex challenges for customers using knowledge network engineering, Active Directory, and system administration. In this role, you'll closely impact mission success, protecting data and networks from malicious payloads and actors. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect our nation's most sensitive capabilities. What You'll Work On: Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise. Requirements Experience with the deployment or daily maintenance of Forescout CounterACT appliances 5+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades Experience architecting and designing IP networks, including developing and documenting network topologies Experience with network engineering, including physical or logical such as installation and activation of ports, configuration of switches, and LANS, VLANS, and network FW, or appliances or network administration services such as Active Directory, Guests LANS, and domain management Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 10+ years of experience supporting IT projects and activities, Bachelor's degree and 8+ years of experience supporting IT projects and activities, or Master's degree and 6+ years of experience supporting IT projects and activities DoD 8570 IAT Level II Certification such as Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date Nice If You Have: Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems Ability to install and deploy Forescout in a customer environment Ability to integrate cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation Ability to be a self-starter, work without considerable direction, and work with a team Possession of excellent verbal and written communication skills, including for coordinating efforts and establishing customer relations Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance Candidate AI Usage Policy AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Job Description Job Description Description: OCH Technologies is seeking an NCO Technical Lead responsible for leading the day-to-day operational cybersecurity and threat intelligence functions supporting the FAA's National Cybersecurity Operations mission. The lead will run the operational side: monitor threat intelligence feeds, coordinate incident response, analyze emerging threats against NAS infrastructure, and provide technical guidance to the broader cybersecurity team. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. Location Hybrid - Air Traffic Control System Command Center (ATCSCC) Washington, DC OR Leesburg, VA This position has the potential to travel up to 20%. Core Responsibilities & Duties Provide day-to-day technical oversight, coordination, and guidance to contractor personnel performing operational cybersecurity and threat intelligence functions. Lead all activities supporting the National Cybersecurity Operations (NCO) mission including threat intelligence collection and analysis, threat hunting, and incident response coordination. Monitor and analyze cyber threat intelligence relevant to FAA and NAS systems. Produce actionable intelligence products that inform assessment priorities and defensive posture decisions. Coordinate incident response activities when potential security events are identified. Ensure response actions follow established procedures and are documented. Attend all Program Management Reviews with the Program Manager and report on NCO operational support activities, threat intelligence findings, deliverables, and technical issues. Maintain awareness of emerging cyber threats targeting critical infrastructure, aviation systems, and government networks. Brief FAA leadership on threat trends and recommended defensive actions. Collaborate with the Security Assessment Lead and Penetration Testing Lead to ensure assessment and testing priorities reflect the current threat landscape. Develop and maintain standard operating procedures for NCO functions including escalation criteria, reporting templates, and coordination protocols. Manage and oversee contractor staff performing NCO functions. Ensure personnel maintain required qualifications and training. Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role. Requirements: Minimum Qualifications Education Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics from an accredited institution Experience At least fifteen (15)+ years of cybersecurity experience with at least 5 years of management and supervisory responsibility over operational cybersecurity, threat intelligence teams, or SOC/CIRT functions. At least 2 years of relevant experience must be recent (performed within the last 3 years). Demonstrated experience leading incident response and threat intelligence operations in a federal or critical infrastructure environment. Strong understanding of cyber threat intelligence frameworks (MITRE ATT&CK, Diamond Model, Cyber Kill Chain) and experience producing actionable intelligence products. Experience with SIEM platforms, threat intelligence platforms, and endpoint detection and response (EDR) tools. Knowledge of network defense monitoring, log analysis, and anomaly detection in complex, multi-segment network environments. Security Clearance Requirement Candidate must have the ability to obtain and maintain a Public Trust Active Secret clearance preferred Certifications Security certification such as CISSP, CISM, or CASP required GCIH (GIAC Certified Incident Handler) or GCTI (GIAC Cyber Threat Intelligence) strongly preferred GCFA, GNFA, or GCIA preferred for forensics/network analysis depth CND, CNDA, GDAT, GDSA, GCED, GCFA are directly relevant Preferred Qualifications Prior experience supporting FAA, DoD, or other critical infrastructure cybersecurity operations. Experience with aviation-specific cyber threats or operational technology (OT/ICS) threat analysis. Familiarity with FAA Security Operations Center (SOC) operations. Experience coordinating with federal threat intelligence sharing organizations (US-CERT, CISA, sector ISACs). Modern threat intelligence platforms (MISP, OpenCTI) for structured threat data management and sharing. SOAR platforms (Cortex XSOAR, Splunk SOAR, Tines) for automated incident response workflows and playbook execution. EDR/XDR tools (CrowdStrike Falcon, SentinelOne, Carbon Black) for endpoint-level detection and response in operational environments. AI/ML-based anomaly detection and threat hunting tools for identifying novel attack patterns across complex, multi-segment network environments. Attack surface management platforms for continuous external exposure monitoring of NAS-connected assets. Other Required Skills and Abilities Understanding of federal cybersecurity policy (FISMA, NIST CSF, CDM program) and how operational cybersecurity functions support broader agency security objectives. Strong written and verbal communication skills. Ability to brief senior leadership on threat landscape and operational status. About Us : At OCH, we are more than just a government contracting firm; we are innovators and leaders in providing cutting-edge IT services and cybersecurity solutions. Driven by a set of fundamental values, we excel in creating secure, efficient, and forward-thinking solutions that empower the government agencies we work with. Our commitment to maintaining the highest standards of integrity, adapting swiftly to new challenges, and focusing on the people we serve ensures that we consistently exceed expectations and lead the industry in innovation and reliability. What Defines Us: Integrity - We act with unwavering honesty, ensuring every decision is rooted ethically. Adaptable - We swiftly adapt to changes, seizing opportunities to innovate and lead. People-Focused - We prioritize relationships, championing growth and mutual success. Accountable - We own our outcomes, striving for excellence through continuous improvement. Collaborative - We cultivate teamwork, harnessing diverse talents to forge groundbreaking solutions. Why Join Us? Step into a role at OCH where your contributions make a tangible impact. Join a team that values creativity and initiative, offering a platform to transform the landscape of government IT services. Here, your work is not just a career-it's a mission. Embrace the opportunity to grow, innovate, and excel alongside industry leaders who are as passionate about technology as they are about making a difference. Plus, we offer a comprehensive benefits package designed to support your wellbeing and work-life balance, including: Paid time off and Holidays Medical, Dental, and Vision Insurance Paid Parental Leave Short-term disability, long-term disability, and life insurance - Employer Paid! 401(k) Additional Voluntary Life Insurance Tuition Reimbursement & More! E-Verify Participation: OCH Technologies, LLC is a participant of E-Verify to verify the identity and employment eligibility of newly hired employees. Veteran's Preference and Accessibility Statement : At OCH Technologies, we deeply respect and appreciate the unique skills and experiences that veterans bring to our team. As a federal contractor, we encourage qualified veterans to apply and provide preference where permitted by law. Your service and dedication are valued here. We are committed to creating a workplace that is open, welcoming, and accessible to everyone. In accordance with the Americans with Disabilities Act (ADA) and Section 503 of the Rehabilitation Act, we provide reasonable accommodations throughout the hiring process to ensure individuals with disabilities can apply without barriers. If you need assistance or an accommodation, please contact us at . OCH Technologies, LLC is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, disability, gender identity, or any other protected characteristic as outlined by federal, state, or local laws.

Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training