7 jobs found

Job Description Network Security Engineer - Senior Cisco Identity Services Engine (ISE) Engineer Location: Washington, DC (Onsite) Type: Full-Time Required Experience 10-15 years of Network/Security Engineering experience. Strong hands-on experience with Cisco ISE 3.x in large enterprise environments. Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments . Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies . Experience with Active Directory integration, Security Groups, and Identity Sources . Strong understanding of PKI and Certificate Management , including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication. Experience with Cisco ISE vulnerability remediation, security patching, and production support . Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis . Experience integrating Cisco ISE with: Cisco Catalyst Meraki Firewalls F5 DNS Splunk/SIEM platforms ServiceNow & Change Management Experience creating and managing ServiceNow Change Requests . Ability to write implementation, validation, rollback, and risk assessment plans. Experience executing: ISE upgrades and patching Certificate renewals DNS changes Policy updates Security group changes New integrations Infrastructure migrations Incident & Support Experience Strong troubleshooting experience across: Endpoint Switch/AP ISE Active Directory Authorization Policy Network Access Experience with major incidents, RCA, and Cisco TAC case management. Ability to diagnose authentication, authorization, certificate, and connectivity issues. Infrastructure & Automation Experience with: Cisco ISE migrations and node deployments High Availability (HA) environments Splunk monitoring and alerting ServiceNow integrations Preferred experience with: Python Ansible Terraform REST APIs CI/CD Automation Preferred Qualifications CCNP Enterprise / CCNP Security or equivalent. Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow. Experience in highly regulated enterprise environments.

Job Description Job Description COMPANY OVERVIEW Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field. We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following: Be Driven - We are fueled by the hunger to learn more and do more. Be Curious - We engage in continuous improvement - never accepting the status quo. Be Humble - We seek honest feedback to strengthen our relationships. Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity. Strive for excellence and consider joining our growing team today! JOB OVERVIEW The Junior Software Engineer provides hands-on development and engineering support to the Splunk Engineering and Maintenance team supporting government agencies. Working under the direction of senior Data, Platform, and Detection Engineers, this role contributes across the full breadth of the SIEM environment: onboarding and normalizing data sources, maintaining platform infrastructure and configurations, developing searches, dashboards, and content, and automating recurring engineering tasks through scripting and code. This is an entry-level, growth-oriented position for an engineer with a software development or cybersecurity foundation who is expected to build depth in Splunk and security operations over time. The Junior Software Engineer collaborates with senior engineers, security analysts, and agency stakeholders, and follows established code review, testing, and change management practices. Essential Functions: Software Development and Automation. Write, test, and maintain scripts and small applications (Python, Bash, PowerShell) that automate recurring Splunk engineering, maintenance, and reporting tasks. Use version control, peer code review, and established branching and deployment practices for all code and configuration changes. Data Engineering Support. Assist with onboarding new log sources, including configuration of inputs, forwarders, parsing rules (props and transforms), source types, and index assignment. Support data quality efforts by validating field extractions, timestamps, event breaking, and Common Information Model (CIM) normalization under senior engineer guidance. Platform Engineering and Maintenance. Support routine maintenance of the Splunk environment, including indexers, search heads, forwarders, deployment servers, and app and patch deployments. Monitor platform health, license usage, ingest volume, and search performance; identify anomalies and assist senior engineers with troubleshooting and remediation. Content Development. Develop and maintain SPL searches, reports, dashboards, and alerts that support security, operational, and mission use cases. Assist Detection Engineers with building, testing, documenting, and deploying detection content through established review and release workflows. Testing, Documentation, and Quality. Test changes in development and test environments prior to production deployment and validate results against expected outcomes. Maintain technical documentation, configuration standards, runbooks, and knowledge articles for the work performed. Operational and Customer Support. Respond to assigned tickets and user requests for Splunk access, search assistance, data questions, and minor configuration changes. Provide data and platform context in support of incident response, audits, and after-action activities as directed. Collaboration and Professional Development. Participate in stand-ups, sprint planning, code reviews, and change management processes with the Splunk Engineering and Maintenance team. Work with senior engineers to translate requirements into technical tasks, and progress toward Splunk certification and technical specialization. QUALIFICATIONS: US Citizen with an active Top Secret Security Clearance. Bachelor's degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical field; equivalent technical training, certifications, or demonstrable experience will be considered. 0-2 years of professional software development, IT engineering, or cybersecurity experience; internship, co-op, apprenticeship, or substantial project work is applicable. Working proficiency in at least one programming or scripting language such as Python, Bash, PowerShell, Java, Go, or JavaScript. Comfort operating in a Linux command-line environment and a foundational understanding of system administration concepts. Familiarity with version control (Git) and standard development workflows including branching, pull requests, and code review. Ability to work with structured and semi-structured data formats such as JSON, XML, CSV, YAML, and syslog, including basic use of regular expressions. Foundational understanding of networking and logging concepts (TCP/IP, DNS, HTTP, authentication events) and how security-relevant events are generated across endpoint, network, and cloud. Foundational cybersecurity knowledge, including core security principles, common attack patterns, and the role of a SIEM in security operations. Willingness and demonstrated ability to learn Splunk and the Splunk Search Processing Language (SPL) quickly. Clear written and verbal communication skills, including the ability to document technical work for other engineers and non-technical stakeholders. Strong problem-solving skills, attention to detail, and the ability to take direction and follow established engineering processes. Ability to obtain and maintain the clearance and suitability requirements for the contract. PREFERRED: Hands-on exposure to Splunk (SPL, dashboards, universal forwarders, apps) or another SIEM such as Elastic, Microsoft Sentinel, QRadar, or Google SecOps. Splunk Core Certified User or Splunk Core Certified Power User, or willingness to obtain within the first year. CompTIA Security+, Network+, or a comparable industry certification. Experience with REST APIs, data parsing and normalization, and data pipeline concepts. Familiarity with cloud platforms (AWS, Azure, or GCP) and their native logging services. Exposure to configuration management or infrastructure-as-code tooling such as Ansible, Terraform, or Puppet. Exposure to CI/CD pipelines, automated testing, and containerization (Docker, Kubernetes). Familiarity with MITRE ATT&CK, detection engineering concepts, and SOC workflows. Experience supporting a federal customer or working in an accredited environment. Interest in growing into a Data, Platform, or Detection Engineering specialization. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS Inside office environment. Working on a computer for long periods of time. May involve long period of sitting at a desk. The work environment is fast-paced and sometimes involves extreme deadline pressures. OTHER DUTIES This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations. If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling . Thank you for your interest in MartinFed. Please Note: All positions at MartinFed are contingent upon passing a background check prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer. Job Posted by ApplicantPro

Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)

Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.

Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required

Job Description Job Description Description: OCH Technologies is seeking an NCO Technical Lead responsible for leading the day-to-day operational cybersecurity and threat intelligence functions supporting the FAA's National Cybersecurity Operations mission. The lead will run the operational side: monitor threat intelligence feeds, coordinate incident response, analyze emerging threats against NAS infrastructure, and provide technical guidance to the broader cybersecurity team. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. Location Hybrid - Air Traffic Control System Command Center (ATCSCC) Washington, DC OR Leesburg, VA This position has the potential to travel up to 20%. Core Responsibilities & Duties Provide day-to-day technical oversight, coordination, and guidance to contractor personnel performing operational cybersecurity and threat intelligence functions. Lead all activities supporting the National Cybersecurity Operations (NCO) mission including threat intelligence collection and analysis, threat hunting, and incident response coordination. Monitor and analyze cyber threat intelligence relevant to FAA and NAS systems. Produce actionable intelligence products that inform assessment priorities and defensive posture decisions. Coordinate incident response activities when potential security events are identified. Ensure response actions follow established procedures and are documented. Attend all Program Management Reviews with the Program Manager and report on NCO operational support activities, threat intelligence findings, deliverables, and technical issues. Maintain awareness of emerging cyber threats targeting critical infrastructure, aviation systems, and government networks. Brief FAA leadership on threat trends and recommended defensive actions. Collaborate with the Security Assessment Lead and Penetration Testing Lead to ensure assessment and testing priorities reflect the current threat landscape. Develop and maintain standard operating procedures for NCO functions including escalation criteria, reporting templates, and coordination protocols. Manage and oversee contractor staff performing NCO functions. Ensure personnel maintain required qualifications and training. Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role. Requirements: Minimum Qualifications Education Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics from an accredited institution Experience At least fifteen (15)+ years of cybersecurity experience with at least 5 years of management and supervisory responsibility over operational cybersecurity, threat intelligence teams, or SOC/CIRT functions. At least 2 years of relevant experience must be recent (performed within the last 3 years). Demonstrated experience leading incident response and threat intelligence operations in a federal or critical infrastructure environment. Strong understanding of cyber threat intelligence frameworks (MITRE ATT&CK, Diamond Model, Cyber Kill Chain) and experience producing actionable intelligence products. Experience with SIEM platforms, threat intelligence platforms, and endpoint detection and response (EDR) tools. Knowledge of network defense monitoring, log analysis, and anomaly detection in complex, multi-segment network environments. Security Clearance Requirement Candidate must have the ability to obtain and maintain a Public Trust Active Secret clearance preferred Certifications Security certification such as CISSP, CISM, or CASP required GCIH (GIAC Certified Incident Handler) or GCTI (GIAC Cyber Threat Intelligence) strongly preferred GCFA, GNFA, or GCIA preferred for forensics/network analysis depth CND, CNDA, GDAT, GDSA, GCED, GCFA are directly relevant Preferred Qualifications Prior experience supporting FAA, DoD, or other critical infrastructure cybersecurity operations. Experience with aviation-specific cyber threats or operational technology (OT/ICS) threat analysis. Familiarity with FAA Security Operations Center (SOC) operations. Experience coordinating with federal threat intelligence sharing organizations (US-CERT, CISA, sector ISACs). Modern threat intelligence platforms (MISP, OpenCTI) for structured threat data management and sharing. SOAR platforms (Cortex XSOAR, Splunk SOAR, Tines) for automated incident response workflows and playbook execution. EDR/XDR tools (CrowdStrike Falcon, SentinelOne, Carbon Black) for endpoint-level detection and response in operational environments. AI/ML-based anomaly detection and threat hunting tools for identifying novel attack patterns across complex, multi-segment network environments. Attack surface management platforms for continuous external exposure monitoring of NAS-connected assets. Other Required Skills and Abilities Understanding of federal cybersecurity policy (FISMA, NIST CSF, CDM program) and how operational cybersecurity functions support broader agency security objectives. Strong written and verbal communication skills. Ability to brief senior leadership on threat landscape and operational status. About Us : At OCH, we are more than just a government contracting firm; we are innovators and leaders in providing cutting-edge IT services and cybersecurity solutions. Driven by a set of fundamental values, we excel in creating secure, efficient, and forward-thinking solutions that empower the government agencies we work with. Our commitment to maintaining the highest standards of integrity, adapting swiftly to new challenges, and focusing on the people we serve ensures that we consistently exceed expectations and lead the industry in innovation and reliability. What Defines Us: Integrity - We act with unwavering honesty, ensuring every decision is rooted ethically. Adaptable - We swiftly adapt to changes, seizing opportunities to innovate and lead. People-Focused - We prioritize relationships, championing growth and mutual success. Accountable - We own our outcomes, striving for excellence through continuous improvement. Collaborative - We cultivate teamwork, harnessing diverse talents to forge groundbreaking solutions. Why Join Us? Step into a role at OCH where your contributions make a tangible impact. Join a team that values creativity and initiative, offering a platform to transform the landscape of government IT services. Here, your work is not just a career-it's a mission. Embrace the opportunity to grow, innovate, and excel alongside industry leaders who are as passionate about technology as they are about making a difference. Plus, we offer a comprehensive benefits package designed to support your wellbeing and work-life balance, including: Paid time off and Holidays Medical, Dental, and Vision Insurance Paid Parental Leave Short-term disability, long-term disability, and life insurance - Employer Paid! 401(k) Additional Voluntary Life Insurance Tuition Reimbursement & More! E-Verify Participation: OCH Technologies, LLC is a participant of E-Verify to verify the identity and employment eligibility of newly hired employees. Veteran's Preference and Accessibility Statement : At OCH Technologies, we deeply respect and appreciate the unique skills and experiences that veterans bring to our team. As a federal contractor, we encourage qualified veterans to apply and provide preference where permitted by law. Your service and dedication are valued here. We are committed to creating a workplace that is open, welcoming, and accessible to everyone. In accordance with the Americans with Disabilities Act (ADA) and Section 503 of the Rehabilitation Act, we provide reasonable accommodations throughout the hiring process to ensure individuals with disabilities can apply without barriers. If you need assistance or an accommodation, please contact us at . OCH Technologies, LLC is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, disability, gender identity, or any other protected characteristic as outlined by federal, state, or local laws.

Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training