Trabajos cyber security en Arlington, VACrear alertas

MANTECH seeks a motivated and mission-driven Senior Cyber Intelligence Analyst to join our team in Springfield, VA. In this role, you will support critical cyber intelligence operations through focused analysis, coordination, and reporting to help defend national security networks against advanced threats. You will be central to identifying emerging cyber threats, analyzing activities of adversaries, and providing timely, actionable intelligence to stakeholders. Responsibilities include, but are not limited to: • Managing cyber–intelligence requirements and directing cyber intelligence collection efforts, • Identifying emerging cyber technologies, capabilities, or weapons that may threaten U.S. or Allied systems, • Conducting multi-intelligence, all-source, and cyber threat intelligence analysis of current and emerging threats, • Producing intelligence products and delivering classified and unclassified briefings to command and staff, • Updating adversarial Tactics, Techniques, and Procedures (TTPs), • Disseminating timely Indicators of Compromise (IOCs) and cyber threat warnings to DoD personnel and systems, • Ensuring network, system, and application integrity through enforcement of organizational security policies, • Researching and analyzing Advanced Persistent Threat (APT) infrastructure, binaries, and threat intelligence reporting, • Collaborating with the U.S. Intelligence Community and private sector on threat intelligence and incident reporting Minimum Qualifications: • Bachelor’s degree or 4+ years of additional cyber experience in lieu of a degree, • 5+ years of relevant experience in cyber intelligence or related fields, • IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification or higher, • Proficiency in Microsoft Office applications such as Word and Excel, • Experience in cyber operations and security architecture Preferred Qualifications: • Familiarity with Security Information and Event Management (SIEM) tools, • Ability to effectively communicate with senior management, • Strong decision-making and problem-solving skills with the ability to assess and prioritize solutions, • Capable of multi-tasking and working both independently and collaboratively in a dynamic environment Clearance Requirements: • Must have a current/active TS/SCI with Polygraph clearance Physical Requirements: • The person in this position must be able to remain in a stationary position 50% of the time, • Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and/or virtual communication, which may involve delivering presentations

MANTECH seeks a motivated, career and customer-oriented Senior Cyber Security Detections Engineer to join our team in Springfield, VA. This role supports our Cyber Operations mission by providing critical detection and response capabilities. You will be part of an industry-leading organization where employees come first, and you'll help defend national security while working on rewarding projects with room for growth and innovation. Responsibilities include but are not limited to: • Formulating and publishing custom Security Information and Event Management (SIEM) tool content and IDS/IPS signatures to address threats, • Performing security event and incident correlation using information gathered from a variety of sources within the enterprise, • Analyzing and assessing damage to the data/infrastructure as a result of cyber incidents, • Performing cyber incident trend analysis and reporting, • Characterizing and analyzing network traffic and system data to identify anomalous activity and potential threats to resources, • Providing detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities, • Creating, deploying, and implementing threat-based signatures and detection rules for operational intrusion detection capabilities Minimum Qualifications: • Bachelor’s degree or 4+ years of additional cyber experience in lieu of a degree, • 5+ years of related cyber experience, • Experience with modern Windows, UNIX, network operating systems, databases, and virtual computing environments, • DoD 8570 certification meeting IAT Level II (e.g., GSEC, Security+, SSCP, or CCNA-Security), • Knowledge of counter-measures or mitigating controls, • Experience with enterprise security tools, including SIEMs, Threat Intelligence Platforms (TIPs), or network monitoring tools, • Proficiency in creating, modifying, tuning IDS signatures/SIEM correlation searches and other detection signatures Preferred Qualifications: • Advanced skills in Linux/Unix (command line user—proficient and used in the last 6 months) Clearance Requirements: • Must have a current/active TS/SCI with Polygraph Physical Requirements: • Must be able to remain in a stationary position 50% of the time, • Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations

ManTech seeks a motivated and mission-driven Senior Cyber Intelligence Analyst to join our team in Springfield, VA. This role supports critical defensive cyber operations through targeted analysis and coordination. You will help protect national security networks from advanced persistent threats by identifying emerging threats, analyzing cyber activities, and delivering actionable incident responses to key stakeholders. Responsibilities include, but are not limited to: • Provide detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities, • Characterize and analyze network traffic and system data to identify anomalous activity and potential threats to resources, • Perform security event and incident correlation using information gathered from a variety of sources within the enterprise, • Conduct cyber incident triage to determine scope, urgency, and potential impact; identify specific vulnerabilities and recommend expeditious remediation, • Track and document cyber incidents from initial detection through final resolution, • Analyze and assess damage to data and infrastructure resulting from cyber incidents, • Perform cyber incident trend analysis and reporting, • Work on a 24x7 Shift Work basis (4/10 shift schedule; hours dependent on location) Minimum Qualifications: • Bachelor’s degree or 4+ years of additional IT experience in lieu of a degree, • Minimum of 5 years of cybersecurity experience, • IAT Level II certification (GSEC, Security+, SSCP, or CCNA-Security), • Proficiency in both Windows and Linux operating systems, • Familiarity with cybersecurity techniques and network analysis, • Experience with SIEM (Security Information and Event Management) tools, • Understanding of modern security principles, techniques, and protocols Preferred Qualifications: • CSSP-IR certification (CEH, CySA+), • Experience working in a Cybersecurity Operations Center environment, • Experience with COTS technologies used in Cybersecurity Operations Centers, • Ability to work effectively in a fast-paced environment while managing multiple tasks and coordinating resources, • Excellent verbal and written communication skills, • Strong interpersonal skills, including the ability to engage with senior management, • Proven problem-solving skills and decision-making abilities, • Ability to work both independently and collaboratively, manage shifting priorities, and share workloads Clearance Requirements: • Must have a current/active TS/SCI with Polygraph clearance Physical Requirements: • Must be able to remain in a stationary position 50% of the time, • Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, or virtual communication, which may involve delivering presentations

Project Kuiper is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband connectivity to unserved and underserved communities around the world. The mission of Project Kuiper’s Government Solutions (KGS) is to leverage Kuiper and provide high speed, low latency, and secure satellite broadband services to United States and allied government customers. We have an immediate opening for a Technical Program Manager to support the Kuiper Government Solutions (KGS) team focusing on Space Network Solutions for U.S. Government NASA, DoD, and National Security customers. As a Technical Program Manager, you will be responsible for establishing and tracking milestones and project priorities to maximize development efficiency, identify project critical paths, and ensure supplier/partner products are delivered on time and to Kuiper specifications. You will work in a collaborative, analytical, and fast-paced environment and must be comfortable interacting with highly technical cross-functional teams. The candidate must have strong business judgment, dive deep into data, have strong writing skills, and be comfortable leading executive-level reviews. The best candidates will have deep understanding of aerospace/satellite and systems engineering, as well as DoD/IC cyber and security standards, practices and assessments. Candidates with demonstrated experience in deployed secure satellite telecommunications services will be preferred. 10037 Key job responsibilities This role is responsible for defining Project Kuiper’s government communication systems provisioning, management, and monitoring solutions in support of a wide variety of government customer ground, air, maritime, and space based users utilizing Kuiper’s Low Earth Orbit satellites. This is a unique opportunity to assist in the development of a global broadband communication system. You will work closely with the commercial satellite and consumer terminal teams to organize resources, schedule milestones, and track achievements in the group. In addition, you will be responsible for identifying project dependencies and critical paths in government systems development. On a day-to-day basis, you will coordinate among teams and subcontractors to surface and solve the critical risks to the programs you are assigned to lead. In this role you will: • Specify and implement service provisioning, management, monitoring, and operations solutions in support of various government customers, each with unique security and cyber concerns. Oversee and monitor implementation, testing, and fielding of those solutions., • Propose and drive adoption of improvements to the Kuiper program to improve government user utility and satisfaction, • Act as the point of contact for Kuiper Government Solutions with external teams, partners, and subcontractors for assigned solutions, to identify and mitigate programmatic risks in order to meet established goals, • Communicate clearly and effectively to executive management on the plans, status, and critical issues in narrative and verbal formats. Escalate urgent issues appropriately and drive them to closure in a timely manner, • Establish and perform subcontract management and define and assess vendor deliveries, • Unblock technical issues by pulling together the multi-functional technical expertise to resolve issues, • Develop, track, & communicate project schedules and achievements, • Drive project execution, develop project plans, make technical trade-offs, manage risks, track and report on status, and resolve blocking issues, • Work closely with partner organizations (including government agencies) to develop work packages and ensure that all teams have what they need to be successful, • Establish goals and metrics to identify opportunities to deliver customer solutions to meet cost, performance and schedule requirements. Some travel, primarily domestic, will be required. Security Clearance: This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance. • 3+ years of technical product or program management experience, • 2+ years of software development experience, • 3+ years of project management disciplines including scope, schedule, budget, quality, along with risk and critical path management experience, • Experience managing programs across cross functional teams, building processes and coordinating release schedules, • 3+ years of working directly with engineering teams experience Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit ___ for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $114,500/year in our lowest geographic market up to $197,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit ___. This position will remain posted until filled. Applicants should apply via our internal or external career site.

MANTECH seeks a motivated, career and customer-oriented Cybersecurity Analyst - Nights to join our team in Tysons, VA The Cybersecurity Analyst will monitor Air Gapped Security Fabrics through managed SECOPs Tools. Responsibilities include but are not limited to: • Monitoring Operations Center IT an infrastructure for a 24x7 mission critical SECOPs function., • Performing event analysis within SIEM, leveraging systems to develop response tickets within case management tooling., • Troubleshoot and coordinate with TIER 2 Analysts for event escalation and follow defined security playbooks for environments., • Drive enhanced Security Posture through detections & response compliance., • A customer first attitude is a must, • Work Shift: Monday-Friday 11pm-7am. Schedules are subject to change based on business needs. Minimum Qualifications: • High School Diploma with 3+ years of experience in Security Operations, Cyber Security, and/or Systems Administration., • Experience with SIEM, IDS, EDR, and Case Management Tools., • Experience with supporting operating systems, networking, scripting and automation, and Security Application troubleshooting., • An active 8140 Certification, such as Comptia Security + Preferred Qualifications: • Bachelor's degree in Information Technology/Computer Science field or equivalent practical experience., • Experience in working with SOC systems/networks and supporting Security Detections Development, • Experience with security alert tuning, in partnership with TIER 2 and TIER 3 (Engineering) Teams, • Experience with creating scripts to automate common tasks., • Experience in developing Threat Reports, translating IOCs and alerts into narrative overviews., • Understanding of local and wide area networks (LAN/WAN) and mobile computing environments., • Understanding of STIG and hardening practices Clearance Requirements: • An active TS/SCI with Polygraph clearance Physical Requirements: • Frequently moves Audio/Visual or Computer equipment weighing up to 50 pounds across and/or around a business campus or large facility., • The person in this position needs to occasionally move about inside the office to access filing cabinets, office machinery, etc., • Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, • Constantly positions self to maintain equipment, including under desks and in network closets.

ManTech seeks a motivated, career and customer- oriented SOC Technical Lead in McLean, VA. This position may require occasional local travel to Herndon, VA. The SOC Technical Lead will provide technical leadership and subject matter expertise for incident response and analysis. Lead a team of Cyber Operations experts and help to protect the most coveted target in the world. Responsibilities include, but are not limited to: • Serve as Technical Lead for Incident Analysis, providing subject matter expertise in incident response operations to include incident investigations, analysis and process improvement., • Oversee the execution of investigations to ensure thoroughness, accuracy, and completeness and assist with tickets and investigations as needed, • In coordination with management, recognize, adopt, and instill best practices in security engineering fields throughout the organization, • Continuously evaluate, shape, and make necessary changes to improve the efficiency and effectiveness of the Incident Response program, • Provide technical/analytical recommendations for improvement to the program of record, • Perform Risk Management activities and analysis and recommend mitigations to address identified risks and issues, • Own and facilitate exercise drill execution and planning, • Instill accountability for incident analysis to all levels of the contract team and ensure expectations are effectively communicated to the team Minimum Requirements: • Bachelor’s degree in a technical field and 8+ years of experience as a cyber security analyst, incident responder, or other closely related cyber security role, or High School Diploma and 12+ years of experience, • 5+ years of experience with SIEM, Windows and Linux Internals, NIST 800-53 and NSM-8, • 1+ years’ experience leading a team, • Experience responding to on-net cyber-attacks, such as, adversary credential breaches, account creations, shell or reverse shell usage, exfiltration, or similar, • Relevant certifications in cyber investigations, incident response, or cyber analysis, such as GCFE, GREM, OSCP, or similar Preferred Qualifications: * 11+ years of experience performing SOC incident response duties within the Intelligence Community 2+ years performing incident detection, response, or forensics in AWS, Azure, GCP, or OCI • Experience with network forensics Clearance Requirements: • Active/current TS/SCI with Polygraph is required for this position Physical Requirements: • Must be able to remain in a stationary position 50%

MANTECH seeks a motivated, career and customer-oriented Cybersecurity Analyst Evenings to join our team in Tysons, VA The Cybersecurity Analyst will monitor Air Gapped Security Fabrics through managed SECOPs Tools. Responsibilities include but are not limited to: • Monitoring Operations Center IT an infrastructure for a 24x7 mission critical SECOPs function., • Performing event analysis within SIEM, leveraging systems to develop response tickets within case management tooling., • Troubleshoot and coordinate with TIER 2 Analysts for event escalation and follow defined security playbooks for environments., • Drive enhanced Security Posture through detections & response compliance., • A customer first attitude is a must, • Work Shift: Tuesday-Saturday or Sunday-Thursday, 3pm to 11pm. Schedules are subject to change based on business needs. Minimum Qualifications: • High School Diploma with 3+ years of experience in Security Operations, Cyber Security, and/or Systems Administration., • Experience with SIEM, IDS, EDR, and Case Management Tools., • Experience with supporting operating systems, networking, scripting and automation, and Security Application troubleshooting., • An active 8140 Certification, Comptia Security + Preferred Qualifications: • Bachelor's degree in Information Technology/Computer Science field or equivalent practical experience., • Experience in working with SOC systems/networks and supporting Security Detections Development, • Experience with security alert tuning, in partnership with TIER 2 and TIER 3 (Engineering) Teams, • Experience with creating scripts to automate common tasks., • Experience in developing Threat Reports, translating IOCs and alerts into narrative overviews., • Understanding of local and wide area networks (LAN/WAN) and mobile computing environments., • Understanding of STIG and hardening practices Clearance Requirements: • An active TS/SCI with Polygraph clearance Physical Requirements: • Frequently moves Audio/Visual or Computer equipment weighing up to 50 pounds across and/or around a business campus or large facility., • The person in this position needs to occasionally move about inside the office to access filing cabinets, office machinery, etc., • Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, • Constantly positions self to maintain equipment, including under desks and in network closets.

MANTECH seeks a motivated, career and customer-oriented Cybersecurity Analyst Days to join our team in Tysons, VA The Cybersecurity Analyst will monitor Air Gapped Security Fabrics through managed SECOPs Tools. Responsibilities include but are not limited to: • Monitoring Operations Center IT an infrastructure for a 24x7 mission critical SECOPs function., • Performing event analysis within SIEM, leveraging systems to develop response tickets within case management tooling., • Troubleshoot and coordinate with TIER 2 Analysts for event escalation and follow defined security playbooks for environments., • Drive enhanced Security Posture through detections & response compliance., • A customer first attitude is a must, • Work Shift: Tuesday-Saturday 7am to 3pm. Schedules are subject to change based on business needs. Minimum Qualifications: • High School Diploma with 3+ years of experience in Security Operations, Cyber Security, and/or Systems Administration., • Experience with SIEM, IDS, EDR, and Case Management Tools., • Experience with supporting operating systems, networking, scripting and automation, and Security Application troubleshooting., • An active 8140 Certification, Comptia Security + Preferred Qualifications: • Bachelor's degree in Information Technology/Computer Science field or equivalent practical experience., • Experience in working with SOC systems/networks and supporting Security Detections Development, • Experience with security alert tuning, in partnership with TIER 2 and TIER 3 (Engineering) Teams, • Experience with creating scripts to automate common tasks., • Experience in developing Threat Reports, translating IOCs and alerts into narrative overviews., • Understanding of local and wide area networks (LAN/WAN) and mobile computing environments., • Understanding of STIG and hardening practices Clearance Requirements: • Must have a current/active TS/SCI with Polygraph clearance Physical Requirements: • Frequently moves Audio/Visual or Computer equipment weighing up to 50 pounds across and/or around a business campus or large facility., • The person in this position needs to occasionally move about inside the office to access filing cabinets, office machinery, etc., • Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, • Constantly positions self to maintain equipment, including under desks and in network closets.

Job Description Are you interested in working with KMS Solutions, but don't see a current position that fits? Please submit your resume and application here! KMS Solutions is currently collecting resumes for current and future openings. Should your experience align with KMS’s needs, someone from our hiring team will reach out. We look forward to learning more about your background, experience, and career aspirations. Thank you for your interest in a career opportunity with KMS Solutions! Our Philosophy - Building Trusted Relationships KMS Solutions, LLC is a technical management / solutions company that specializes in engineering, analysis, and cyber security. Founded in 2005, KMS is a certified small business with nearly two decades of experience supporting the Department of Defense as well as many other departments and programs critical to our Nations security and well-being. KMS is a 2024 winner of the USA Today Top Workplaces recognizing quality workplace cultures across the United States who put their employees first. Additionally, we received Providence Journal Rhode Island Top Workplaces award and Culture Excellence Awards for Compensation & Benefits, Innovation, Leadership, Purpose & Values and Work-Life Flexibility. Our clients include the US Intelligence Community, Department of Defense, the Joint Staff, Navy, Army, and the Department of State. We have worked closely with DIA, CENTCOM, US Army National Ground Intelligence Center and the National Media Exploitation Center. Our strength is in collectively providing integrated services. We are dedicated to moving our Nation’s agenda forward. It’s the key ingredient that makes us who we are – like our passion for excellence, our innovation throughout our organization and our long-standing customer relationships. You will see this simple philosophy at work in everything we do. It defines who we are, challenges us, forces our minds to be open, and to be a world-class company. Core Values Our Core Values are the guiding principles and our fundamental beliefs that dictate our behavior consistently, not time to time, situation to situation, or person to person, but rather they are the underpinning of our company culture. These values are represented in everything we do: Respect, Authentic Communications, Integrity, Lasting Relationships, and Sustained Excellence (R.A.I.L.S.) Respect - Our interaction with colleagues, peers, customers and others is marked by respect and honor. Authentic Communication - We share ideas, thoughts and concerns with our clients and partners in the most authentic manner. Integrity - We do what we say, say what we do, always practice high ethical standards and honor commitments. Lasting Relationships - We are focused on forging strong, long-term relationships with clients and associates. Sustained Excellence - We consistently deliver genuine value to those whom we serve, provide superior customer value, and work to continuously improve our performance. While delivering genuine value to our customers, we are committed in developing our people, building our brand, and supporting the communities we live and work in. R.A.I.L.S. is an unwavering guide and our core values give us a framework for leadership and daily decisions and help us enjoy our time at work. What we hire (list of recent hires): • Veteran & Transitioning Navy - Military, • Program Manager - Project Manager, • Cybersecurity Engineer, • Cyber Security Specialist, • NQV – Navy Qualified Validator, • Mechanical Engineer, • Electrical Engineer, • Electronics Engineer, • Systems Engineer, • Software Engineer, • Product Integration Engineer, • Reliability Engineer, • System Safety Engineer, • Computer Engineer, • Action Officer, • Auditor, • Technical SME - Subject Matter Expert, • Program Analyst, • Acquisition Analyst - Acquisitions Analyst, • BFM – Business Financial Management, • Navy Financial Analyst, • Logistician & Logistics Analyst, • Management Analyst, • Naval Analyst, • Business Process Analyst, • Configuration Management Specialist, • Integrated Project Team Development (IPTD) Facilitator, • Coach / Trainer, • Technical Writer, • Engineering Technician, • Electronics Technician, • Program Administrator, • Database and SharePoint Analyst, • Tradesmen - Skilled Trades, • Crane Operator / Rigger, • Fabricator, • Contract Specialist - Contractor, • Technical Consulting - Consultant, • Executive Assistant Benefits and Additional Compensation: KMS offers a competitive benefits packaging including medical, dental and vision insurances, flexible spending account, PTO, paid holidays, military leave, bereavement leave, 401k / retirement savings plan, professional development and tuition reimbursement, basic and voluntary life insurance / AD&D, short-term and long-term disability, voluntary AFLAC supplemental insurance products and employee assistance plan (EAP) program. Additionally, KMS offers employee referral bonuses and a discretionary annual bonus. AAP/EEO Statement: KMS Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. KMS Solutions is a drug free workplace.

Job Description Are you interested in working with KMS Solutions, but don't see a current position that fits? Please submit your resume and application here! KMS Solutions is currently collecting resumes for current and future openings. Should your experience align with KMS’s needs, someone from our hiring team will reach out. We look forward to learning more about your background, experience, and career aspirations. Thank you for your interest in a career opportunity with KMS Solutions! Our Philosophy - Building Trusted Relationships KMS Solutions, LLC is a technical management / solutions company that specializes in engineering, analysis, and cyber security. Founded in 2005, KMS is a certified small business with nearly two decades of experience supporting the Department of Defense as well as many other departments and programs critical to our Nations security and well-being. KMS is a 2024 winner of the USA Today Top Workplaces recognizing quality workplace cultures across the United States who put their employees first. Additionally, we received Providence Journal Rhode Island Top Workplaces award and Culture Excellence Awards for Compensation & Benefits, Innovation, Leadership, Purpose & Values and Work-Life Flexibility. Our clients include the US Intelligence Community, Department of Defense, the Joint Staff, Navy, Army, and the Department of State. We have worked closely with DIA, CENTCOM, US Army National Ground Intelligence Center and the National Media Exploitation Center. Our strength is in collectively providing integrated services. We are dedicated to moving our Nation’s agenda forward. It’s the key ingredient that makes us who we are – like our passion for excellence, our innovation throughout our organization and our long-standing customer relationships. You will see this simple philosophy at work in everything we do. It defines who we are, challenges us, forces our minds to be open, and to be a world-class company. Core Values Our Core Values are the guiding principles and our fundamental beliefs that dictate our behavior consistently, not time to time, situation to situation, or person to person, but rather they are the underpinning of our company culture. These values are represented in everything we do: Respect, Authentic Communications, Integrity, Lasting Relationships, and Sustained Excellence (R.A.I.L.S.) Respect - Our interaction with colleagues, peers, customers and others is marked by respect and honor. Authentic Communication - We share ideas, thoughts and concerns with our clients and partners in the most authentic manner. Integrity - We do what we say, say what we do, always practice high ethical standards and honor commitments. Lasting Relationships - We are focused on forging strong, long-term relationships with clients and associates. Sustained Excellence - We consistently deliver genuine value to those whom we serve, provide superior customer value, and work to continuously improve our performance. While delivering genuine value to our customers, we are committed in developing our people, building our brand, and supporting the communities we live and work in. R.A.I.L.S. is an unwavering guide and our core values give us a framework for leadership and daily decisions and help us enjoy our time at work. What we hire (list of recent hires): • Veteran & Transitioning Navy - Military, • Program Manager - Project Manager, • Cybersecurity Engineer, • Cyber Security Specialist, • NQV – Navy Qualified Validator, • Mechanical Engineer, • Electrical Engineer, • Electronics Engineer, • Systems Engineer, • Software Engineer, • Product Integration Engineer, • Reliability Engineer, • System Safety Engineer, • Computer Engineer, • Action Officer, • Auditor, • Technical SME - Subject Matter Expert, • Program Analyst, • Acquisition Analyst - Acquisitions Analyst, • BFM – Business Financial Management, • Navy Financial Analyst, • Logistician & Logistics Analyst, • Management Analyst, • Naval Analyst, • Business Process Analyst, • Configuration Management Specialist, • Integrated Project Team Development (IPTD) Facilitator, • Coach / Trainer, • Technical Writer, • Engineering Technician, • Electronics Technician, • Program Administrator, • Database and SharePoint Analyst, • Tradesmen - Skilled Trades, • Crane Operator / Rigger, • Fabricator, • Contract Specialist - Contractor, • Technical Consulting - Consultant, • Executive Assistant Benefits and Additional Compensation: KMS offers a competitive benefits packaging including medical, dental and vision insurances, flexible spending account, PTO, paid holidays, military leave, bereavement leave, 401k / retirement savings plan, professional development and tuition reimbursement, basic and voluntary life insurance / AD&D, short-term and long-term disability, voluntary AFLAC supplemental insurance products and employee assistance plan (EAP) program. Additionally, KMS offers employee referral bonuses and a discretionary annual bonus. AAP/EEO Statement: KMS Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. KMS Solutions is a drug free workplace.

Manager, Information Security Office Consultant At Capital One, you will help consult on initiatives, programs, and projects to raise their game in Information Security and Risk Management. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. You are comfortable with technologies like Cloud services, Containers, Docker, Microservices, Serverless, APIs, DevOp and micro-segmentation. Security is essential to what we do here, from protecting our customers to our associates. Responsibilities: * Act as a central point of contact for your line of business to the rest of Capital One’s Information Security and Risk Management * Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management * Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards * Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes * Escalate and manage cyber security risk * Provide ad hoc support on special Information Security hot topics for the business * Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment * Work with line of business leadership to anticipate their objectives and needs to better serve the line of business About You: * You have a desire to work in a very fast moving, forward leaning, and modern computing environment * You have a deep passion for Securing modern computing platforms * You have a strong desire to continually learn about new technologies * You possess strong conceptual thinking and communication skills * You are able to work well under minimal supervision * You are a demonstrated leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors * You maintain calmness and clarity of thought under pressure and ability to maintain confidentiality * You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives Basic Qualifications: * High School Diploma, GED, or equivalent certification * At least 4 years of experience providing guidance and oversight of Security concepts * At least 3 years of experience performing security risk assessments and security architecture reviews * At least 3 years of experience with Architecture design, software design, networking or Cloud infrastructure Preferred Qualifications: * Bachelor’s Degree * 6+ years of experience with Architecture design, software design, networking or Cloud infrastructure * 4+ years of experience in securing a public cloud environment (AWS, GCP, or Azure) * 2+ years of experience utilizing Agile methodologies * 2+ years of experience in Enterprise Monitoring * 2+ years of experience with technologies supporting finance, fintech, banking, payment cards, or a related domain * 2+ years of experience with web and mobile application security, and solid understanding of the OWASP Top Ten * 2+ years of experience with security testing, such as penetration testing, red teaming, vulnerability scanning, SAST and DAST * 2+ years of scripting or programming experience (Python, SQL, PHP, PowerShell) * Professional certifications such as AWS Certified Solutions Architect or Certified Information Systems Security Professional (CISSP) At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization). The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. McLean, VA: $193,400 - $220,700 for Manager, Cyber Technical New York, NY: $211,000 - $240,800 for Manager, Cyber Technical Richmond, VA: $175,800 - $200,700 for Manager, Cyber Technical Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Director, Technology Risk- Enterprise Services Risk Director, Technology Risk- Enterprise Services Risk The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector. As a Technology Risk Director in Capital One’s Tech and Product Risk Office, you will apply your risk management, cyber, and technical expertise to the company’s Technology organization. You will partner across Enterprise Services, Divisional CIOs, and Information Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders, and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization. Your contributions will drive organizational and strategic change through risk identification, measurement, analysis, and reporting in order to better manage the company’s risk in an open and collaborative environment. In this role, you will: * Serve as the Technology Risk Guide leader for the Enterprise Platforms Technology and Product Leadership Team and respective software engineering teams to propel technology risk agenda and help them make informed risk-based decisions. * Assist Tech and Product Risk leadership in delivering against their strategy and services * Provide oversight and guidance on key strategic Technology initiatives * Serve as interdepartmental advisor, interfacing with technology lines of business and other areas such as second line Technology and Cyber organizations and Compliance; collaborate effectively across multiple organizations to achieve objectives * Identify and implement continual program enhancements based on industry standards and best practices related to risk management (especially technology risk) and aligned with Capital One’s strategic risk direction * Gather risk and control data and reporting; perform initial analysis or potentially evaluate data provided by team analysts * Design and implement internal risk and control governance processes * Influence leaders within Tech, Cyber, Product, second line risk organizations, the developer community, and Internal Audit on key technology risks and actions needed * Develop and monitor risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness * Support Risk Control and Self Assessments (RCSAs) * Understand, document, and analyze current state capabilities leveraging one or more risk methods. Leverage industry benchmarking to determine best practices and lessons learned regarding components of the risk framework. * Advanced knowledge of cloud computing and of third-party collaboration platforms such as Google apps, Zoom, Slack, Confluence etc. * Familiarity with Generative AI technologies, including safeguards and associated risk management activities. * Write and revise documents such as policies, standards, procedures, and guidelines. Develop and enhance processes, tools, templates, and job aids. Draft, contribute to, edit, and deliver presentations that enable the design, development, refinement, and usage of risk methods. Basic Qualifications: * High School Diploma, GED or Equivalent Certification * At least 7 years of experience in Cybersecurity, Technology, Risk Management, or External Audit, or a combination * At least 7 years of experience in project, process, or program management * At least 7 years of experience planning and leading IT audits or risk assessments * At least 7 years of People Management experience Preferred Qualifications: * Bachelor's Degree or Military Experience * At least 10 years of experience in Cybersecurity, Technology, Risk Management or External Audit, or a combination * At least 10 years of experience in project, process, or program management * Cyber and Risk Certifications (CRISC, CISM, CRCM, CAMS, CIPP, ABA Risk Management Certification) * Excellent verbal presentation and written communication skills to confidently interact with the cyber organization and enterprise stakeholders * Excellent problem-solving, analytical, and critical thinking skills to effectively respond to shifting priorities, demands, and timelines * Consulting experience with a Big 4 firm is a plus At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. Richmond, VA: $205,400 - $234,400 for Director, Cyber Risk & Analysis McLean, VA: $226,000 - $257,900 for Director, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Director, International Risk Management (ES Risk) Capital One is one of the fastest growing organizations in the world today and we are growing our teams globally. As Director for International Risk Management, you will play a pivotal role in developing and driving our international risk management agenda—from day one. Teamwork is at the heart of our innovation and we empower each other to think big. We welcome diverse perspectives and experiences as we reshape the financial industry. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity and managing technology risk. The Director for International Risk Management will support our Enterprise Services (ES) Risk office in Capital One’s first line of defense, and will execute high-priority enterprise-level technology and cyber security and risk management initiatives related to our international expansion, influence across the organization, and drive the implementation of our strategy. Specifically, in this position, you will help lead and manage the international risk management function for ES, which includes executing and enhancing our risk management processes across Capital One, driving project and program delivery, and influencing outcomes supporting the broader International Risk Strategy for Capital One. You will collaborate closely with associates and senior Executives across all lines of defense, Lines of Business, and other risk management teams to support this work. This includes implementing risk management tools and frameworks for the organization and managing a sustainable and mature process to identify, assess, mitigate, and monitor risk. This role will also be responsible for big picture thinking, strategic direction, and partnering across teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company’s risk in an open and collaborative environment. This position is highly visible and requires an expert with a proven ability to work independently in a fast-paced environment and who can begin contributing immediately. Proficiency in risk management is key to success in this role. The successful candidate will be an experienced risk management professional who understands technology and cyber functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. Responsibilities: * Drive and coordinate work related to Capital One’s emerging international risk management function, working with the first line of defense Technology and Cyber teams, LOB, and second line of defense teams, to ensure effective collaboration within the team and across stakeholder groups. * Assist the ES Risk leadership team and country leadership team(s) in delivering their strategy and service model. * Lead the development of international processes and the related risk management framework by providing thought leadership, oversight, and coordination with LOBs and other risk management associates across the company. * Drive program and process-level risk assessments to identify risks and mitigation plans based on industry standards and best practices related to risk management (especially technology risk) and aligned with Capital One’s strategic risk direction. * Be a trusted advisor and drive effective and relevant technology and cyber risk conversations. * Stay current on emerging cyber threats and potential implications to the firm. * Stay current on the changing regulatory environment and understand the impacts to our international expansion efforts. * Assist and drive project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for Senior Management. * Write and revise documents such as policies, standards, procedures, and guidelines. Develop and enhance processes, tools, templates, and job aides. Draft, contribute to, edit, and deliver presentations that aid in the design, development, refinement, and usage of risk methods. * Participate in risk and other management forums and contribute to continuous improvement of risk and project / program management practices. * Support direction, manages expectations, and leads cross-functional teams through various initiatives, including oversight of third party resources. * Support interactions with Internal Audit and Regulatory agencies related to our work, as applicable. * Participate in and execute other special projects for the team, as needed. Basic Qualifications: * Bachelor's Degree or military experience * At least 7 years experience in Cybersecurity, Technology, Risk Management, or Audit or a combination of the the four * At least 7 years of experience planning and leading risk assessments and audits * At least 4 years of project or process management experience * At least 4 years of People Management experience * At least 2 years of experience implementing an International program or leading an International or Country Risk Management program Preferred Qualifications: * 10 years experience in Cybersecurity, Technology, Risk Management, International Risk, or External Audit, or a combination of these * 8 years of experience performing information security or technology risk identification and assessments, such as Control Self Assessments (CSAs), or completing assessments within established industry risk frameworks * 8 years experience performing data analysis in support of internal risk assessments and control design and operating effectiveness reviews * 5 years of experience performing data analysis in support of cybersecurity assessments and control design in a cloud environment (preferably AWS) * 5 years of project management experience leading cross-functional projects and programs * 3 years of Financial Services industry experience, including familiarity with regulatory practices * Cybersecurity and technology risk and/or project management certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), AWS Security certification, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Project Management Professional (PMP) Certification, or Masters Certificate of Project Management (CPM) or related certifications * Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology cyber organizations, enterprise business stakeholders, and executive leadership) * Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines * Consulting experience with a Big 4 firm At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. McLean, VA: $226,000 - $257,900 for Director, Cyber Risk & Analysis Richmond, VA: $205,400 - $234,400 for Director, Cyber Risk & Analysis New York, NY: $246,500 - $281,300 for Director, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Business Risk Guide- Enterprise Services Risk Office We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including: Brand, Enterprise Supplier Management, Enterprise Products & Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team for Enterprise Services Business Risk, we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business. As a Business Risk Manager in Capital One’s Enterprise Services (ES) Risk organization, you will apply your risk management and analytical skills to some of our highest profile Risk Management projects.As a Risk Manager in the Enterprise Services Risk Office, we are the first line of defense to help ensure our Company remains well-managed and avoid unnecessary risk. In this position, you will play a key role in enhancing our third party risk management processes across Capital One and driving project and program delivery. Here's what we're looking for in an ideal teammate: * You are a critical thinker who seeks to understand the business and its control environment. * You possess a relentless focus on quality and timeliness. * You adapt to change, embrace bold ideas, and are intellectually curious. You like to ask questions, test assumptions, and challenge conventional thinking. * You develop influential relationships based upon shared risk objectives and trust to deliver outstanding business impact. * You create energy and an environment that fosters trust, collaboration, and belonging, making it easy to attract, hire, and retain top talent. Responsibilities (Example): * Build successful relationships with ESM and other team members to understand the impact of technology risk on critical business processes * Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities. * Influence leaders within ESM, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed * Conduct periodic risk reviews with the executives and support reporting for risk metrics * Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness * Design and support internal risk and control governance processes * Identify and implement continual risk program enhancements based on industry standards and best practices in alignment with Capital One’s strategic risk direction * Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas Basic Qualifications * High School Diploma, GED or Equivalent Certification * At least 1 year of experience in the Financial Services and Technology industry * At least 3 years of experience in project, program, process, and risk management or a combination * At least 3 years of experience facilitating and leading discussions across various disciplines Preferred Qualifications * Bachelor’s Degree or military experience * 3+ years of risk management, technology, or a related discipline * 3+ years of experience in Risk Management * 1+ years of Financial Services industry experience * Experience in controls development, controls management, risk reporting activities such as process level assessments and risk and control self assessments * Strong organization skills and ability to support multiple projects simultaneously * Excellent verbal presentation and written communication skills to confidently interact with and lead meetings at all levels * Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines * At least 3 years of leading highly cross-functional programs * At least 3 years of experience consulting with senior executives and/or strategy building At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. Sales Territory: $115,900 - $132,200 for Prin Assoc, Cyber Risk & Analysis Plano, TX: $115,900 - $132,200 for Prin Assoc, Cyber Risk & Analysis McLean, VA: $127,500 - $145,500 for Prin Assoc, Cyber Risk & Analysis Richmond, VA: $115,900 - $132,200 for Prin Assoc, Cyber Risk & Analysis New York, NY: $139,100 - $158,700 for Prin Assoc, Cyber Risk & Analysis Wilmington, DE: $115,900 - $132,200 for Prin Assoc, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Business Risk Lead, Director, Enterprise Services Risk Office Capital One is a diversified bank that offers a broad array of financial products and services to consumers, small business and commercial clients. As one of the nation’s top 10 banks, we offer a broad spectrum of financial products and services to consumers, small businesses and commercial clients. We nurture a work environment where people with a variety of thoughts, ideas and backgrounds, guided by our shared Values, come together to make Capital One a great company and a great place to work. We are hiring! The Enterprise Services Risk organization is expanding with a focus on attracting innovative, pioneering, collaborative, and highly skilled professionals. We operate at the forefront of risk management, providing support for novel and developing technologies, as well as critical business strategies. Diverse perspectives and experiences are valued as we work to redefine the financial sector. As a Director on the ES Business Tech Risk team, you will partner across Enterprise Services, Divisional CIOs, and Information Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders, business partners and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as provide direct tech risk advisory services into our lines of business (Software, ESM, etc.) In this role, you will: * Serve as the Technology Risk Guide leader for the Enterprise Services Business Risk team to propel the technology risk agenda for our lines of business and help them make informed risk-based decisions. * Assist ES Business Risk leadership in delivering against their strategy and services * Provide oversight and guidance on key strategic Technology initiatives with a focus on architectures to enhance technology in support of business drivers * Serve as interdepartmental advisor, interfacing with technology lines of business and other areas such as second line Technology and Cyber organizations and Compliance * Identify and implement continual program enhancements based on industry standards and best practices related to risk management (especially technology risk) and aligned with Capital One’s strategic risk direction * Gather risk and control data and reporting; perform initial analysis or potentially evaluate data provided by team analysts * Influence leaders across Enterprise Services, Cyber, second line risk organizations and Internal Audit on key technology risks and actions needed * Develop and monitor risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness * Support Risk Control and Self Assessments (RCSAs) * Understand, document, and analyze current state capabilities leveraging one or more risk methods. Leverage industry benchmarking to determine best practices and lessons learned regarding components of the risk framework. * Write and revise documents such as policies, standards, procedures, and guidelines. Develop and enhance processes, tools, templates, and job aids. Draft, contribute to, edit, and deliver presentations that enable the design, development, refinement, and usage of risk methods. Basic Qualifications: * Bachelor’s Degree or military experience * At least 8 years experience in Cybersecurity, Technology, or Cyber Internal or External Audit, or a combination of these * At least 8 years of experience planning and leading IT audits or risk assessments * At least 5 years of People Management experience * At least 5 years of experience in data management and performing data analysis in support of cybersecurity assessments and control design in a cloud environment * At least 5 years of experience supporting security and compliance frameworks such as SOC2, ISO27001, PCI, and NIST SP 800-53 Preferred Qualifications: * 12+ years experience in Cybersecurity, Technology, or Cyber Internal or External Audit, or a combination of these. * Cybersecurity, technology risk, and technology specific certifications such as Certified Information Systems Security Professional (CISSP), AWS Security certification, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or AWS DevOps certification * 10+ years of experience in performing Control Self Assessments (CSAs), or completing assessments against established industry risk frameworks, including the NIST Cybersecurity Framework * 10+ years of experience supporting security and compliance frameworks such as SOC2, ISO 27001, PCI, and NIST SP 800-53 * 10+ years experience performing data analysis in support of internal risk assessments and control reviews * 3+ years of CI/CD, DevOps, SDLC framework experience * 3+ years Application Architecture review experience * 3+ years of Financial Services industry experience * Excellent verbal presentation and written communication skills to confidently interact with the cyber organization and enterprise stakeholders At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. Chicago, IL: $205,400 - $234,400 for Director, Cyber Risk & Analysis McLean, VA: $226,000 - $257,900 for Director, Cyber Risk & Analysis New York, NY: $246,500 - $281,300 for Director, Cyber Risk & Analysis Richmond, VA: $205,400 - $234,400 for Director, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Manager, International Risk Management Capital One is one of the fastest growing organizations in the world today and we are growing our tech teams globally. You’ll play a pivotal role in developing and driving our international risk management strategy—from day one. Teamwork is at the heart of our innovation and we empower each other to think big. We welcome diverse perspectives and experiences as we reshape the financial industry. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity and managing technology risk. Technology/Cyber Risk Managers are experienced and progressive individuals that operate within a highly collaborative team environment to deliver value-added risk management services to our Technology and Business partners. You will have a high level of exposure across lines of business to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in risk management program (ideally Technology risk-driven program) development and management are key to success in this role. The successful candidate will be an experienced risk management professional who understands cyber technology functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. As a Manager of Technology/Cyber Risk in Capital One’s Enterprise Services Risk Office (ES Risk, first line of defense), you will execute on high priority enterprise-level technology/cyber initiatives related to our international expansion in Mexico, help influence across the organization, and drive the implementation of our strategy. This includes analyzing technology initiatives to identify cybersecurity and technology risks to help ensure our Company remains well-managed and avoids unnecessary risk. You will collaborate closely with associates across all lines of defense, Lines of Business, and other risk management teams to perform and support the work related to further maturing risk management practices. The ideal candidate is an analytical thinker with expertise in technology and cybersecurity domains that has the ability to manage competing priorities, collaborate with stakeholders at all levels to gain consensus, communicate effectively in a cross-functional organization, and facilitate constructive problem-solving to achieve objectives and remove roadblocks. Responsibilities: * Support the coordination of work related to Capital One’s emerging international risk management function, working with the first line of defense Technology and Cyber teams, Lines of Business, and second line of defense teams, to ensure effective collaboration within the team and across stakeholder groups * Assist the ES Risk leadership team in delivering against their strategy and service model * Participate in and support the development of international processes and the related risk management framework across Capital One by providing thought leadership, oversight, and coordination with lines of business and other risk management activities across the company * Drive program and process level assessments to identify related risks and mitigation plans based on industry standards and best practices related to risk management (especially technology risk) and aligned with Capital One’s strategic risk direction * Analyze information to proactively identify risks, trends, and process improvements; supporting reporting on international risk topics to management * Stay current on the changing regulatory environment and understand the impacts to our efforts * Assist with project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for senior management and the Board of directors, and other governance activities * Participate in risk and other management forums and contribute to continuous improvement of risk and project / program management practices * Support direction, manage expectations, and support/help lead cross-functional teams through various initiatives * Support interactions with Internal Audit and Regulatory agencies related to our work, as applicable * Write and revise documents such as policies, standards, procedures, and guidelines. Develop and enhance processes, tools, templates, and job aids. Draft, contribute to, edit, and deliver presentations that aid in the design, development, refinement, and usage of risk methods * Participate in and execute other special projects for the team on a periodic basis Basic Qualifications: * Bachelor's Degree or military experience * At least 4 years of experience in information security or technology risk management * At least 4 years of experience supporting, partnering, and interacting with internal business clients * At least 3 years of project or program management experience * At least 2 years of experience developing, evaluating, and implementing information security or technology controls * At least 2 years of experience with information security, technology practices, standards or procedures Preferred Qualifications: * Proficiency in conversing in Spanish * At least 7 years of experience in information security or technology risk management * At least 5 years of project management experience leading cross functional projects and programs * At least 4 years of experience with analysis of information security or technology threats and risks * At least 4 years of experience in information security or technology risk identification and assessments associated with new or change-driven initiatives * Background in the financial services industry * Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Project Management Professional (PMP), or Masters Certificate of Project Management (CPM) * Strong verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology/cyber organizations, enterprise business stakeholders, and executive leadership) * Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines * Ability to set direction, manage expectations, and lead cross-functional teams * Consulting experience with a Big 4 firm * Familiarity with financial sector regulatory practices and three lines of defense * Proficient with G Suite, Google Workspace for reports, analysis, and presentations is a plus At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. McLean, VA: $158,400 - $180,800 for Manager, Cyber Risk & Analysis Richmond, VA: $144,000 - $164,400 for Manager, Cyber Risk & Analysis New York, NY: $172,800 - $197,200 for Manager, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Director, Business Risk Guide- Enterprise Services Risk Office We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including: Brand, Enterprise Supplier Management, Enterprise Products & Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team for Enterprise Services Business Risk, we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business. As a Business Risk Manager in Capital One’s Enterprise Services (ES) Risk organization, you will apply your risk management and analytical skills to some of our highest profile Risk Management projects.As a Risk Manager in the Enterprise Services Risk Office, we are the first line of defense to help ensure our Company remains well-managed and avoid unnecessary risk. In this position, you will play a key role in enhancing our third party risk management processes across Capital One and driving project and program delivery. Here's what we're looking for in an ideal teammate: * You are a critical thinker who seeks to understand the business and its control environment. * You possess a relentless focus on quality and timeliness. * You adapt to change, embrace bold ideas, and are intellectually curious. You like to ask questions, test assumptions, and challenge conventional thinking. * You develop influential relationships based upon shared risk objectives and trust to deliver outstanding business impact. * You create energy and an environment that fosters trust, collaboration, and belonging, making it easy to attract, hire, and retain top talent. Responsibilities: * Build successful relationships with ESM and other team members to understand the impact of technology risk on critical business processes * Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities. * Influence leaders within ESM, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed * Conduct periodic risk reviews with the executives and support reporting for risk metrics * Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness * Design and support internal risk and control governance processes * Identify and implement continual risk program enhancements based on industry standards and best practices in alignment with Capital One’s strategic risk direction * Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas Basic Qualifications: * Bachelor's Degree or military experience * At least 10 years of experience in Risk Management * At least 10 years of People Management experience * At least 10 years of experience in project, risk program, Cloud risk management, or process management * At least 10 years of experience supporting, partnering, and interacting with internal and external business clients * At least 10 years of experience consulting with senior executives or strategy building * At least 4 years of experience working in cross functional teams Preferred Qualifications: * 10+ years of experience in project or process management, or agile delivery * At least 10 years of experience managing senior stakeholders across different business functions * At least 10 years of experience writing communications and presentations for leadership audience * At least 10 years of experience in strategy development, preferably working in financial services and/or technology * Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology/cyber organizations, enterprise business stakeholders, and executive leadership) * Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines * Strong communication and relationship building skills, customer focus, and ability to collaborate and influence across teams to deliver * Ability to set direction, delegate tasks, manage multiple stakeholder expectations, and coordinate a cross-functional team * Ability to set direction, manage expectations, and lead cross-functional teams * Consulting experience with a Big 4 firm At this time, Capital One will not sponsor a new applicant for employment authorization for this position The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. Sales Territory: $205,400 - $234,400 for Director, Cyber Risk & Analysis Plano, TX: $205,400 - $234,400 for Director, Cyber Risk & Analysis McLean, VA: $226,000 - $257,900 for Director, Cyber Risk & Analysis Richmond, VA: $205,400 - $234,400 for Director, Cyber Risk & Analysis New York, NY: $246,500 - $281,300 for Director, Cyber Risk & Analysis Wilmington, DE: $205,400 - $234,400 for Director, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Director, International Risk Management (ES Risk) Capital One is one of the fastest growing organizations in the world today and we are growing our teams globally. As Director for International Risk Management, you will play a pivotal role in developing and driving our international risk management agenda—from day one. Teamwork is at the heart of our innovation and we empower each other to think big. We welcome diverse perspectives and experiences as we reshape the financial industry. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity and managing technology risk. The Director for International Risk Management will support our Enterprise Services (ES) Risk office in Capital One’s first line of defense, and will execute high-priority enterprise-level technology and cyber security and risk management initiatives related to our international expansion, influence across the organization, and drive the implementation of our strategy. Specifically, in this position, you will help lead and manage the international risk management function for ES, which includes executing and enhancing our risk management processes across Capital One, driving project and program delivery, and influencing outcomes supporting the broader International Risk Strategy for Capital One. You will collaborate closely with associates and senior Executives across all lines of defense, Lines of Business, and other risk management teams to support this work. This includes implementing risk management tools and frameworks for the organization and managing a sustainable and mature process to identify, assess, mitigate, and monitor risk. This role will also be responsible for big picture thinking, strategic direction, and partnering across teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company’s risk in an open and collaborative environment. This position is highly visible and requires an expert with a proven ability to work independently in a fast-paced environment and who can begin contributing immediately. Proficiency in risk management is key to success in this role. The successful candidate will be an experienced risk management professional who understands technology and cyber functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. Responsibilities: * Drive and coordinate work related to Capital One’s emerging international risk management function, working with the first line of defense Technology and Cyber teams, LOB, and second line of defense teams, to ensure effective collaboration within the team and across stakeholder groups. * Assist the ES Risk leadership team and country leadership team(s) in delivering their strategy and service model. * Lead the development of international processes and the related risk management framework by providing thought leadership, oversight, and coordination with LOBs and other risk management associates across the company. * Drive program and process-level risk assessments to identify risks and mitigation plans based on industry standards and best practices related to risk management (especially technology risk) and aligned with Capital One’s strategic risk direction. * Be a trusted advisor and drive effective and relevant technology and cyber risk conversations. * Stay current on emerging cyber threats and potential implications to the firm. * Stay current on the changing regulatory environment and understand the impacts to our international expansion efforts. * Assist and drive project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for Senior Management. * Write and revise documents such as policies, standards, procedures, and guidelines. Develop and enhance processes, tools, templates, and job aides. Draft, contribute to, edit, and deliver presentations that aid in the design, development, refinement, and usage of risk methods. * Participate in risk and other management forums and contribute to continuous improvement of risk and project / program management practices. * Support direction, manages expectations, and leads cross-functional teams through various initiatives, including oversight of third party resources. * Support interactions with Internal Audit and Regulatory agencies related to our work, as applicable. * Participate in and execute other special projects for the team, as needed. Basic Qualifications: * Bachelor's Degree or military experience * At least 7 years experience in Cybersecurity, Technology, Risk Management, or Audit or a combination of the the four * At least 7 years of experience planning and leading risk assessments and audits * At least 4 years of project or process management experience * At least 4 years of People Management experience * At least 2 years of experience implementing an International program or leading an International or Country Risk Management program Preferred Qualifications: * 10 years experience in Cybersecurity, Technology, Risk Management, International Risk, or External Audit, or a combination of these * 8 years of experience performing information security or technology risk identification and assessments, such as Control Self Assessments (CSAs), or completing assessments within established industry risk frameworks * 8 years experience performing data analysis in support of internal risk assessments and control design and operating effectiveness reviews * 5 years of experience performing data analysis in support of cybersecurity assessments and control design in a cloud environment (preferably AWS) * 5 years of project management experience leading cross-functional projects and programs * 3 years of Financial Services industry experience, including familiarity with regulatory practices * Cybersecurity and technology risk and/or project management certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), AWS Security certification, Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Project Management Professional (PMP) Certification, or Masters Certificate of Project Management (CPM) or related certifications * Excellent verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology cyber organizations, enterprise business stakeholders, and executive leadership) * Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines * Consulting experience with a Big 4 firm At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. McLean, VA: $226,000 - $257,900 for Director, Cyber Risk & Analysis Richmond, VA: $205,400 - $234,400 for Director, Cyber Risk & Analysis New York, NY: $246,500 - $281,300 for Director, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Manager, Risk Management (ES Risk) Capital One is one of the fastest growing organizations in the world today. As a Risk Manager, you will apply your risk management and project management skills to collaborate with our Regulatory Risk and Governance team and International Talent Expansion team to create and lead an end-to-end project management, program delivery, and reporting function to drive insights through data to ensure the health of our processes. Our portfolio of work includes diverse and impactful value-driven work, including: 1) The Regulatory Risk and Governance team assesses and implements new and updated laws and regulations that affect Enterprise Services (ES) to ensure compliance of business processes and controls with new laws and regulations; and 2) The International Talent Expansion team executes on high priority enterprise-level technology/cyber initiatives related to our international expansion to identify business and technology risks to help ensure our Company remains well-managed while operating within our risk appetite. You will be responsible for developing a strategic roadmap to enhance reporting to create efficiencies in processes and drive clarity into performance metrics. The ideal candidate will learn the end to end processes, identify opportunities for automation, be forward thinking, quick to adapt, and technologically adept. Managers have a high level of exposure across lines of business and have the opportunity to work with executives to create and implement innovative solutions to appropriately manage risks within Enterprise Services. The ideal candidate will be a highly-motivated risk expert with excellent communication skills. The candidate will be detail-oriented and results focused, and will have a proven record of problem solving and collaborating with others. Responsibilities: * Drive project and program delivery, including project and process management, reporting, facilitation of senior leadership meetings, drafting and reviewing materials for senior management, and other governance activities. * Develop a Reporting Strategy and drive the strategy to completion while applying automation where possible * Drive efficiency in the end-to-end lifecycle management of regulatory risk and governance and International Talent Expansion along with ensuring adherence to second line standards through the use of data to develop insightful metrics * Build and manage automated reporting focused on Objectives & Key Results and Key Performance Indicators highlighting risk topics for management including opportunities for automation * Build metrics around data quality and periodically monitor to ensure data is complete and accurate in the system of record * Partner with the Enterprise Services Risk Analytics team to identify and implement automated solutions to enable proactive risk management * Support development of content in response to Internal Audit and Regulatory agencies as necessary Basic Qualifications: * Bachelor's Degree or military experience * At least 4 years of risk management, compliance, regulatory, audit, or legal experience * At least 4 years of experience supporting, partnering, and interacting with internal business clients * At least 4 years of project or program management experience * At least 2 years of experience developing, evaluating, and implementing information security or technology controls * At least 2 years of experience with information security, technology practices, standards or procedures Preferred Qualifications: * At least 6 years of risk management, compliance, regulatory, audit, or legal experience * At least 5 years of project management experience leading cross functional projects and programs * Background in the financial services industry * Project Management Professional (PMP), Masters Certificate of Project Management (CPM), Certified Regulatory Compliance Manager (CRCM), Certified Information Systems Security Professional (CISSP), and/or Certified Information Security Manager (CISM) * Strong verbal presentation and written communication skills to confidently interact at all levels of the organization (e.g., technology/cyber organizations, enterprise business stakeholders, and executive leadership) * Excellent problem-solving, analytical and critical thinking skills to effectively respond to shifting priorities, demands and timelines * Experience with applying automation in risk management * Ability to set direction, manage expectations, and lead cross-functional teams * Consulting experience with a Big 4 firm * Familiarity with financial sector regulatory practices and three lines of defense * Proficient with G Suite, Google Workspace for reports, analysis, and presentations is a plus At this time, Capital One will not sponsor a new applicant for employment authorization for this position. The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. McLean, VA: $158,400 - $180,800 for Manager, Cyber Risk & Analysis Richmond, VA: $144,000 - $164,400 for Manager, Cyber Risk & Analysis New York, NY: $172,800 - $197,200 for Manager, Cyber Risk & Analysis Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the ___. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at ___. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ___ For technical support or questions about Capital One's recruiting process, please send an email to Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Job Description Insider Threat Program Management Specialist PKH Enterprises is seeking qualified individuals to support both government and private-sector clients in the development and implementation of insider threat and asset protection programs. Qualified candidates should have knowledge of insider threat program elements, governance models and overall program operations. Previous experience with counterintelligence, incident response, investigations, IT security, human resources or other relevant fields are considered a plus. Responsibilities: · Provide consulting support services to government and private-sector clients related to the development of insider threat programs · Conduct evaluations of existing insider threat program elements · Evaluate and recommend both technical and non-technical solutions to detect and respond to potential insider threats · Evaluate and establish program elements to support insider threat prevention, detection, and response · Evaluate and establish insider threat program governance and stakeholder engagement mechanisms · Conduct risk management assessments of critical assets and develop strategies for their protection · Provide support in developing business cases, resource planning, budget justifications and other documents in support of client insider threat programs · Develop and operationalize program performance metrics and reporting mechanisms in support of client insider threat programs · Proactively work with the security engineer and customer to identify gaps in the insider threat program technology or policy. · Draft / Update / Implement with customer new Insider Threat policies and procedures · Have a good understanding of policy and directives related to insider threat enacted with the DHS or other Federal Agencies · Conduct technical interchange meetings with client stakeholders to establish implementation processes, address concerns and troubleshoot challenges that arise in application deployment. · Assist in establishing and updating Insider Threat program to ensure collected data is relevant, timely, incorporates technical and non-technical data. · Help in developing, and updating the framework for the insider threat program · Identify data sources and priorities for data collection. · Work with data owners to ensure appropriate data is collected and processed by insider threat technology stack. Minimum Qualifications: · Bachelor's degree or equivalent · Minimum of three years’ experience as an Insider Threat analyst or relevant investigative or intelligence experience. · Knowledge of incident response, crisis management, data management best practices, and cyber security trends · Strong oral and written communication, analytical, critical thinking, data management, and research skills · Experience conducting end-to-end investigations, including collecting and analyzing qualitative and quantitative data, and handling sensitive materials · Familiar with National Insider Threat Task Force (NITTF) Mission, policies · Experience working with credentialed agents to supply knowledge and information required for sensitive investigations surrounding insider threat and counterintelligence. · Counterintelligence / Law Enforcement background · UAM and UEBA familiarity and how it relates and can be implemented to enhance the functionality of the insider threat mission · Minimum of 5 years’ of experience in federal program management support or related experience · Active Top Secret Clearance required · Must be eligible for a TS/SCI Clearance Preferred Qualifications: · 5 or more years’ of professional experience in relevant fields including counterintelligence, personnel security, IT security, human resources, or behavioral analysis · PMP Certification · Working knowledge of user activity monitoring tools · Bachelor's Degree in a related field (Intelligence Studies, Political Science, International Relations, Criminal Justice, or related) · CERT InT Program Manager Cert · CERT InT Vulnerability Assessor Cert · Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F) or Certified Counter-Insider Threat Professional - Analysis (CCITP-A) · TS/SCI Clearance Company DescriptionPKH Enterprises (PKH) is a small, woman-owned professional services firm dedicated to helping clients address challenging policy and technology issues. The PKH team is comprised of professionals with varied backgrounds combining legal, policy and technical expertise and offers the services and experience of business process engineers, senior subject matter experts and certified project managers. Our diverse capabilities help our clients improve performance and achieve innovative solutions to their most complex business problems. Our clients turn to us as partners and trusted advisors, and depend on our ability to anticipate, recognize and address their specific needs. PKHE has a reputation for excellence and remains dedicated to generating successful results for tasks at all levels of project execution. To all recruitment agencies: PKH Enterprises does not accept unsolicited agency resumes/CVs. PKH Enterprises is not responsible for any fees related to unsolicited resumes/CVs. PKH Enterprises is an Equal OPKH Enterprises (PKH) is a small, woman-owned professional services firm dedicated to helping clients address challenging policy and technology issues. The PKH team is comprised of professionals with varied backgrounds combining legal, policy and technical expertise and offers the services and experience of business process engineers, senior subject matter experts and certified project managers. Our diverse capabilities help our clients improve performance and achieve innovative solutions to their most complex business problems. Our clients turn to us as partners and trusted advisors, and depend on our ability to anticipate, recognize and address their specific needs. PKHE has a reputation for excellence and remains dedicated to generating successful results for tasks at all levels of project execution. \r\n\r\nTo all recruitment agencies: PKH Enterprises does not accept unsolicited agency resumes/CVs. PKH Enterprises is not responsible for any fees related to unsolicited resumes/CVs.\r\n\r\nPKH Enterprises is an Equal O

Job DescriptionDescription: Job Title: Information System Security Manager (ISSM) Location: Northern Virginia Department: Cyber Security Services Reports To: Management FLSA Status: Full Time/Non-exempt Apavo is at the forefront of cybersecurity, providing services to military, defense, and critical infrastructure industries. Joining the Apavo team means becoming part of a company rooted in the principles of quality, and communication. We value positive, candid interactions and the belief that everyone has valuable contributions to make. Apavo stands out for its commitment to a work-life balance and fostering a growth mindset among all team members. If you are looking to make a meaningful impact in the cybersecurity world while growing professionally in a supportive environment, Apavo is the place for you. Job Purpose: The Information System Security Manager (ISSM) is responsible for leading and overseeing the cybersecurity posture of assigned systems in alignment with DoD and federal requirements. The ISSM will manage the Risk Management Framework (RMF) process, ensuring systems achieve and maintain authorization while meeting all applicable cybersecurity regulations and standards. This includes developing and maintaining security documentation, coordinating with Authorizing Officials (AOs) and Authorizing Official Designated Representatives (AODRs), and providing direct oversight to Information System Security Officers (ISSOs) and system owners. As a senior member of the cybersecurity team, the ISSM will drive compliance, implement security policies and procedures, and act as the primary liaison for security-related matters with government stakeholders and senior leadership. The ISSM plays a critical role in balancing mission objectives with risk management, ensuring that security controls are effectively integrated into all stages of system development and operations. Duties & Responsibilities: ISSM responsibilities include, but are not limited to: • Develop and maintain Risk Management Framework (RMF) documentation and reports to achieve and maintain compliance with cybersecurity regulations, optimize current process to streamline approval process with Program Information Security System Manager (P-ISSM), Authorizing Official (AO) and Authorizing Official Designated Representatives (AODR) across the AMC Enterprise Mission Assurance Support System (eMASS) Portfolio for HQ and Enterprise records., • Work in all steps of the RMF process with system owners, ISSO and ISSMs, and validate adequate security controls are in place to enable sound risk management decisions by the AO., • Coordinate with the Government in obtaining security authorization for updated systems and emerging requirements., • Develop, implement, and maintain security policies, procedures, and documentation to ensure compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA)., • Achieve and maintain compliance with cybersecurity regulations, optimize current process to streamline approval process., • Coordinate with the Government in obtaining security authorization for updated systems and emerging requirements., • Support developing a Privacy Program Plan to streamline privacy risk assessments around system vulnerabilities, threat assessments, and operational mission impacts., • Support development of the command cybersecurity program to include reviews of external Policies, Guidance, Standard Operation Procedures (SOPs), and regulations from Department of Defense (DoD), Department of Army, National Institute of Standards and Technology (NIST), etc., • Develop internal plans, policies, SOPs to execute the command program with a policy development process., • Provide Communication Security governance and compliance reporting based on Orders and directives from higher headquarters to maintain security of encapsulation and encryption devices. Develop a knowledge management plan to capture data and provide business intelligence and data analysis related to all functions., • Provide exercise support to validate the security of systems accredited by the Authorizing Official and/or Privacy Official., • Develop additional technical and managerial cybersecurity training plans, guides and materials to enable workforce knowledge and compliance., • Interactions involving clients and interfacing with senior management and Government., • Coordinate with cross-functional teams (engineering, IT, operations) to implement and enforce security protocols and best practices., • Ensure the accreditation process for DoD systems (e.g., RMF accreditation) is completed and maintained in compliance with all applicable requirements., • Act as the primary point of contact for security-related issues, coordinating incident response and reporting to senior management and government customers., • Stay current with emerging cybersecurity threats, vulnerabilities, and trends to ensure the program adapts to evolving security challenges., • Bachelors Degree in Computer Science or a related technical discipline, • Masters Degree preferred., • Minimum 8-10 years of experience with 5 years in a leadership role., • Must currently possess an active TS/SCI with the ability to obtain and maintain a CI polygraph., • Effective communication skills to collaborate with cross-functional teams and stakeholders on implementing security measures organization-wide., • Proven leadership skills including working in a team environment, fostering communication, listening to teammate concerns and reconciling internal issues or differences., • Proven ability to solicit and process complex information and data to solve complex problems and make sound decisions., • Ability to work effectively in a team environment to encourage collaboration, innovation, and continuous improvement., • Strong analytical skills for identifying system vulnerabilities and documenting control implementation narratives., • Knowledge of system artifact requirements in support of a System Security Plan., • Familiarity with AWS and Cloud Service Provider requirements for development of System Impact Analysis and Documented Risk Acceptance., • Jira and Agile SAFe experience or ability to learn is required., • Detail-oriented with the ability to manage multiple tasks and prioritize effectively., • IAM III preferred, • Comprehensive knowledge of RMF activities with ability to articulate to Executive audiences preferred, • Familiarity with Federal, NIST, DOD and IC security policies. This is typical office or administrative work, and there is no exposure to adverse environmental conditions. This position requires sedentary work. Sedentary work is defined as: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met. Apavo Corporation provides equal employment opportunities to all applicants and employees and strictly prohibits any type of harassment or discrimination in regards to race, religion, age, color, sex, disability status, national origin, genetics, sexual orientation, protected veteran status, gender expression, gender identity, or any other characteristic protected under federal, state, and/or local laws. Consistent with the Americans with Disabilities Act (ADA), it is the policy of Apavo Corporation to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship. The policy regarding requests for reasonable accommodation applies to all aspects of employment, including the application process. If reasonable accommodation is needed, please contact Apavo Human Resources at or 571-407-0069 Employment with Apavo Corporation is on an at-will basis, meaning either you or the Company can terminate the employment relationship, at any time, for any or no reason, and with or without cause or notice. As an at-will employee, your employment with Apavo Corporation is not guaranteed for any length of time.

Job Description Time Type: Full-time, Exempt Minimum Clearance Required to Start: Top Secret/SCI Employee Type: Regular Percentage of Travel Required: 0% Type of Travel: None Shift: 2 Position Overview As the Senior Cyber Security Operations Specialist, you will be providing CSOC Tier 3 services. This involves 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents. CSOC Tier 3 services include malware and implant analysis and forensic artifact handling and analysis. More About the Role • Coordinate and implement tasks, performing analysis, and building/documenting response activities required during cyber security incident response, including but not limited to actions such as implementing containment measures, IP blocks, domain blocks, and disabling user accounts on the direction of the Government., • Coordinate with the Security and Installations Directorate (SI) Office of Counterintelligence (SIC), and Insider Threat Office, in addition to other law enforcement and counterintelligence personnel as required to perform advanced investigation and triage of incidents., • Collaborate with appropriate authorities in the production of security incident reports; categorize incidents and events., • Coordinate with other contracts, organizations, activities, and other services as appropriate to ensure incidents are properly reported, contained, and eradicated., • Coordinate with other contracts, organizations, activities, and other services to de-conflict blue/red team activity with open incidents/events., • Coordinate with other contracts, organizations, activities, and services to ensure customer recovers from an incident/event., • Build timelines, documents, briefings, and other products as required to inform stakeholders of incident response actions, analysis, and the impact of both adversary activity and blue force response actions., • Document actions taken and analysis in the authorized ticketing system to a level of detail where the actions taken and analysis are capable of being systematically reconstructed., • With approval from the Government - Develop, generate and update reports in the Joint Incident Management System (JIMS), Incident Case Management System (ICMS), and/or other authorized reporting systems as directed. You'll Bring These Qualifications • TS/SCI clearance (current). Selected candidates must be able to successfully pass and maintain a Government polygraph (post-hire requirement)., • IAT Level II Certification (current) that is compliant with DoD 8140.01 and DoD 8570.01-M., • Within Six (6) months of the hire date, the employee must be able to obtain CSSP Incident Responder certification compliant with DoD 8140.01 and DoD 8570.01-M., • Bachelor's degree (Engineering, Computer Science or related field) and Six (6) years of relative work experience. Additional experience may be considered in lieu of a degree. Work Environment Professional Office Environment: Must be able to sit at a desktop or laptop computer for extended periods of time. Physical Demands • While performing the duties of this job, the employee is regularly required to sit, stand, talk, hear, and use hands and fingers to operate a computer and telephone., • Must be able to communicate regularly via telephone and verbally present information to employees, customers, and outside vendors. Expected Hours of Work 40 hours per week based on the customer's core operating hours. About RISA In this time of rapid change, as technologies expand at lightning speed, RISA seeks to remain at the forefront - applying them in unique ways to address our customers' challenges and providing our employees with engaging career opportunities. We seek professionals excited by a challenge and focused on assisting our customers to reach their goals. At RISA, our success comes from the talent and commitment of our employees. As a team, we share the challenges and rewards of providing valuable services to our customers. Come along for the journey and be part of our growth and success. Benefits RISA offers a comprehensive benefits package that includes medical, dental, and vision insurance; retirement savings plans: 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer.

Job Description Cybersecurity Engineer III - Endpoint Security Services Job Category: Information Technology Time Type: Full time, Exempt Minimum Clearance Required to Start: Top Secret/SCI Employee Type: Regular Percentage of Travel Required: Less than 10% Type of Travel: Local Location: St. Louis, MO Position Overview: RISA has an exciting opportunity for a Senior Endpoint Security Engineer to join our Transport & Cybersecurity Services (TCS) team in St. Louis, MO. What You Will Do: • Implement and apply technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access., • Provide engineering and sustainment support for the various endpoint security solutions., • Establish computing environment by designing system configuration, directing system installation, and defining, documenting, and enforcing system standards., • Provide specific, detailed information for hardware and software selection, implementation techniques, and tools for the most efficient solution to meet business needs, including present and future capacity requirements., • Configure and install various security products utilizing Linux OS., • Work with both the software vendor and the customer to research, analyze, and implement enterprise-wide security solutions/capabilities/enhancements to support customer business/mission goals and objectives, • Assist with design, analysis, testing and implementation of state-of-the-art secure architectures, • Oversee security infrastructure sustainment, maintenance, and advanced configuration (policy management, database administration and security management tools), • Oversee the reporting, documentation and investigation of all security related incidents; lead the development and implementation of corrective measures Required Skills and Qualifications: • TS/SCI clearance (current). As a post-hire requirement, selected candidate must be able to successfully pass and maintain a Government polygraph., • DoD 8570 IAT Level II certified (current), • Bachelor's degree (Engineering, Computer Science or related field) and Six (6) years of technical experience in Cyber Security. Additional experience may be considered in lieu of a degree., • Working knowledge of maintaining Enterprise Cyber Security Engineering requirements utilizing all or some of the following tools: HBSS, Carbon Black Response/Protection, Microsoft ATA, Tanium, • Must obtain a CSSP Infrastructure Support certification within 6 months of hire date, • Strong working knowledge of administering applications in a Linux environment, • Experience with large-scale enterprise/global networks in a high-paced, diverse environment, • Understanding of and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions, • Experience in providing status reports and products to senior management and customers, • CSSP Infrastructure Support certification, • Any Linux related certifications, • Windows Enterprise Active Directory (AD) architecture and VMWare virtualization Work Environment: Professional Office Environment: Must be able to sit at a desktop or laptop computer for extended periods of time. Physical Demands: • While performing the duties of this job, the employee is regularly required to sit, stand, talk, hear, and use hands and fingers to operate a computer and telephone. In this time of rapid change, as technologies expand at lightning speed, RISA seeks to remain at the forefront - applying them in unique ways to address our customers' challenges and providing our employees with engaging career opportunities. We seek professionals excited by a challenge and focused on assisting our customers to reach their goals. At RISA, our success comes from the talent and commitment of our employees. As a team, we share the challenges and rewards of providing valuable services to our customers. Come along for the journey and be part of our growth and success. Benefits: RISA offers a comprehensive benefits package that includes medical, dental, and vision insurance; company-paid disability; life insurance; retirement savings plans: 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer.

Job Description Account Executive REMOTE About the Role: Pondurance is seeking a results-driven Account Executive focused exclusively on net-new business acquisition. In this high-impact role, you’ll be responsible for generating ne w logo revenue by prospecting, qualifying, and closing new customers across your assigned region. We're seeking a highly motivated self-starter with 2+ years in technology/cybersecurity sales who thrives in a fast-paced, remote work environment. As a strategic thinker and skilled communicator, you’ll deliver tailored security solutions, solve complex business problems, build client relationships, and consistently close new business. If you're energized by building new relationships, uncovering pain points, and delivering real security solutions, we'd love to hear from you. Responsibilities: • Prospect, qualify, and close new business opportunities to drive consistent pipeline growth., • Cultivate and expand channel and partner relationships to generate leads and maximize impact., • Consistently meet or exceed monthly, quarterly, and annual sales quotas., • Plan and participate in sales events, presentations, and partner enablement activities to boost visibility and engagement., • Deliver compelling online and in-person presentations, effectively communicating Pondurance’s cybersecurity solutions., • Establish clear expectations and partner with internal teams to anticipate and resolve issues, ensuring smooth transitions and consistently high customer satisfaction, • Manage the full sales cycle, from initial discovery through to close., • Deliver accurate forecasts and pipeline reports using Salesforce, Gong, and other key sales tools., • Maintain a comprehensive understanding of Pondurance solutions and a strong understanding of the competitive landscape., • Stay informed on emerging industry trends and cybersecurity challenges that impact prospective clients., • Contribute to a collaborative, service-driven company culture while continuously identifying opportunities to improve processes and systems., • Bachelor’s degree in Business, Marketing, or a related field., • 2+ years of proven success in full-cycle B2B sales, consistently meeting or exceeding performance targets., • Deep understanding of the full sales cycle, including lead generation, pipeline management, and closing strategies., • Exceptional communication, interpersonal, and negotiation skills., • Highly self-motivated, organized, and capable of thriving in a remote, autonomous work environment., • Strategic thinker with strong planning, execution, and problem-solving skills; able to make sound decisions under pressure., • Experience in cybersecurity or the broader technology sector preferred., • Skilled in cross-functional collaboration, with a track record of clear and accurate reporting and information sharing., • Open to feedback, adaptable to change, and committed to continuous improvement., • Demonstrated ability to build and maintain strong internal and external relationships., • Dedicated to contributing to a collaborative, service-oriented company culture. At Pondurance we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great! Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe “None of us are as smart as all of us” (R. Pelletier). We believe everyone has the freedom to be themselves, especially at work and so we embrace, support, and celebrate each other. Each one of us influences our company’s direction through speaking up, you have a voice and we want you to use it. Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape. What We Offer: The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives. An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work. Some of the corporate benefits (there are more) for full-time employees include: • Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan., • Time off: PTO, sick, holiday, & parental leave details are available To promote a healthy and safe work community we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request. We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex including sexual orientation and gender identity, disability, or any other characteristic protected by law. Powered by JazzHR DDsKGhhoGz

Job DescriptionCompany Description Our Mission At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are. Who We Are We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included. As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few! Job Description Your Career The Senior Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will utilize a variety of tools developed and act as a key team member in client engagements. They will be the client’s advocate for cybersecurity best practices and will provide strong recommendations in this domain. Your Impact • Assist in development of internal infrastructure design for research, development, and testing focused on offensive security, • Conducts periodic scans of networks to find and detect vulnerabilities, • Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools, • Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel, • Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients, • Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements, • Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems (mobile application testing, penetration testing, application, security, and hardware testing), • Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Unit 42 and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable), • Assist Unit 42 Leadership in the development of security standards and best practices for the organization and recommend security enhancements as needed, • Able to conduct cyber risk assessments using frameworks or standards like NIST CSF, ISO 27001/2, PCI, CIS Top 20, CMMC, or other industry measurement tools, • Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weakness after receiving permission from client stakeholders, • Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach, • Ability to perform travel requirements as needed to meet business demands (on average 30%)Qualifications Your Experience • 4+ years of professional experience with risk assessment tools, technologies, and methods focused on Information Assurance, Information Systems/Network Security, Infrastructure Design, and Vulnerabilities Assessments, • Demonstrate a deep understanding of how malicious software works (i.e.-malware, trojans, rootkits, etc.), • Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit, • Strong knowledge of tools and techniques used to conduct network, wireless, and web application penetration testing, • Familiarity with web application penetration testing and code auditing to find security gaps and vulnerabilities, • Knowledge and experience in conducting cyber risk assessments using industry standards, • Experience with penetration testing, administering, and troubleshooting major flavors of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure), • Experience with scripting and editing existing code and programming using one or more of the following - Perl, Python, ruby, bash, C/C++, C#, or Java, • Experience with security assessment tools, including Nessus, OpenVAS, MobSF. Metasploit, Burp Suite Pro, Cobalt Strike, Bloodhound, and Empire, • Knowledge of application, database, and web server design and implementation, • Knowledge of network vulnerability assessments, web and cloud application security testing, network penetration testing, red teaming, security operations, or 'hunt', • Knowledge of open security testing standards and projects, including OWASP & MITRE ATT&CK, • Ability to read and use the results of mobile code, malicious code, and anti-virus software, • Knowledge of computer forensic tools, technologies, and methods, • Identified ability to grow into a valuable contributor to the practice and, specifically -, • have an external presence via public speaking, conferences, and/or publications, • have credibility, executive presence, and gravitas, • be able to have a meaningful and rapid delivery contribution, • have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products, • be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team, • All applicants must live near a major US military installation to facilitate support for an ongoing DoD contract; close proximity to Fort Meade is preferred. Any proposed military installation other than Fort Meade shall be subjected to approval by our client. Questions regarding approved locations can be coordinated with either the PANW recruiter or Unit 42 interviewers during the early phases of a candidate’s evaluation process., • The candidate will be required to work onsite within a classified workspace at a US military installation for the first year of employment. Continued onsite work may be required in response to client requirements or contract renewal. Additional Information The Team Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Our team comprises recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients’ security posture. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $128000 - $176000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Job Description Job ID: 20241212062318 Location: Springfield, VA Shift: 2nd Shift, 1500 - 2300 Masego is an award-winning small business that specializes in GEOINT services. As a Service-Disabled Veteran-Owned Small Business (SDVOSB), we recognize and award your hard work. Description We are looking for an Apprentice-level TS/SCI-cleared Cartographic Analyst to join our team. Job Description: In this role, you will work within a government/contractor team environment providing Electronic Nautical Chart Conversion, Production, and Review. Must currently possess an active TS/SCI level security clearance and be willing to obtain a Polygraph level clearance to be considered for this position. Primary Responsibilities: • Support existing and developing mission areas, including Digital Nautical Chart or Electronic Nautical Chart Conversion production., • Perform cartographic and GIS analysis by extracting features from various sources, such as rasterized nautical charts, digital hydrographic survey data, and ortho-rectified imagery.Minimum Required Qualifications:, • High School diploma with EITHER, • 3 years of relevant military or full-time geospatial professional experience, • 3 years of experience plus GPC Level I and II certification, • Experience in geography, cartography, and GIS, with proficiency in ArcGIS applications., • Knowledge of digital cartography, GIS production techniques, and NGA digital data formats. About Masego Masego Inc. provides expert Geospatial Intelligence Solutions in addition to Activity Based Intelligence (ABI) and GEOINT instructional services. Masego provides expert-level Geospatial Collection Management, Full Motion Video; Human Geography; Information Technology and Cyber; Technical Writing; and ABI, Agile, and other professional training. Masego is a Service-Disabled Veteran-Owned Small Business headquartered in Fredericksburg, Virginia. With high-level expertise and decades of experience, coupled with proven project management systems and top-notch client support, Masego enhances the performance capabilities of the Department of Defense and the intelligence community. Pay and Benefits We seek to provide and take care of our team members. We currently offer Medical, Dental, Vision, 401k, Generous PTO, Referral bonuses, and more! Diversity Masego, Inc. is an equal opportunity/equal access/affirmative action employer fully committed to achieving a diverse workforce and complies with all applicable Federal and Virginia State laws, regulations, and executive orders regarding nondiscrimination and affirmative action in its programs and activities. Masego, Inc. does not discriminate on the basis of race, color, religion, ethnic or national origin, gender, genetic information, age, disability, sexual orientation, gender identity, gender expression, and veteran's status. Powered by JazzHR 5rnrpoP4SN

Job DescriptionSalary: Who we are: ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a work hard, play hard mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. The Perks: As recognized members of the Cyber Elite, we work together in partnership to defend our nations critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. Who were looking for: We are seeking an Incident Response Lead to serve as the Subject Matter Expert (SME) on all cybersecurity matters, including high-level analysis, design, integration and implementation of incident detection and response strategies. The ideal candidate brings deep technical expertise, a strategic mindset and hands-on leadership experience in incident response, security architecture and threat mitigation. The Incident Response Lead role offers the opportunity to shape cybersecurity posture by driving best practices and recommending emerging technologies and countermeasures. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. What youll be doing: • Lead the development and implementation of incident detection and response solutions across systems and environments., • Provide expert analysis and recommendations on new and emerging cybersecurity technologies, tools and methodologies., • Coordinate and lead incident response efforts, ensuring rapid detection, containment and recovery from cyber events., • Serve as the senior cybersecurity advisor, contributing to architecture, documentation and security strategy development., • Analyze evolving threat landscapes and deliver countermeasure recommendations to proactively mitigate risks., • Support the integration of incident detection and response requirements into system designs, architectures and operational workflows., • Demonstrated expertise in incident response lifecycle, including detection, containment, eradication and recovery., • Experience designing and implementing security controls, countermeasures and cyber technologies., • Familiarity with cybersecurity frameworks (e.g., NIST, ISO, FISMA) and incident response reporting requirements., • Excellent communication skills with the ability to advise technical and non-technical stakeholders., • Bachelors degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field., • 5+ years of relevant experience., • Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking., • Onsite (Washington, D.C.)

Job DescriptionDescriptionLead Cyber Security Engineer, Senior WHO WE ARE: STAHL Companies provides the Program Management for its Channel of Commercial Technology companies in Government that consist of Small Businesses and New Technology start-ups. STAHL advocates for policies that can improve government services and maintain our government's competitive advantage, by bringing more technology into government programs. STAHL Companies advocates on behalf of our nation's innovative, new technology and small businesses looking to work with the U.S. government. We do this by aligning the voice of our small business members with advocacy for change in federal policy that will make the government market more accessible to small businesses and the commercial technology ecosystem. The Channel's founding Technical Board Members include former government leaders and IT executives passionate about bringing best-of-breed technology to the government. We are seeking a skilled and experienced Lead Cyber Security Engineer, Senior to join our team! Position Overview The Lead Cyber Security Engineer, Senior will serve as the single security lead responsible for managing and overseeing cyber security operations across all sites. This individual must have extensive experience in IT systems, cyber defense strategies, and enterprise security operations, and will play a pivotal role in ensuring compliance with agency cyber security guidelines and regulations. The Senior Cyber Security Engineer will be responsible for leading security initiatives, coordinating with stakeholders, and ensuring that all security operations and incident response activities are effectively executed. This role requires strong technical expertise, leadership skills, and the ability to design, implement, and monitor secure IT systems across diverse environments. Key Responsibilities· Serve as the primary security lead overseeing all cyber security operations across multiple sites.· Design, implement, and maintain enterprise-wide cyber security solutions aligned with agency guidelines, frameworks, and compliance regulations.· Provide technical support and leadership in monitoring, correlating, identifying, mitigating, managing, tracking, and resolving cyber security incidents.· Develop and maintain incident response processes and ensure effective execution of security protocols.· Conduct vulnerability assessments, penetration testing, and risk evaluations to identify potential threats.· Collaborate with IT teams, system administrators, and leadership to implement defense-in-depth strategies.· Establish and maintain documentation for security policies, procedures, and system configurations.· Ensure continuous compliance with federal cybersecurity standards, directives, and security frameworks.· Lead investigations into security breaches and anomalies, producing reports and recommendations for mitigation.· Provide mentorship, training, and guidance to junior cyber security staff and stakeholders. Required Qualifications· Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (Master’s preferred).· Meets the minimum requirements of the GSA Labor Category Cyber Security Engineer, Senior, including education/degree and years of experience.· Extensive experience in IT systems, enterprise networks, and end-user environments with expertise in designing and implementing secure systems.· Proven track record in cyber incident response, intrusion detection, malware analysis, and vulnerability management.· Strong knowledge of NIST, FISMA, RMF, and other federal security compliance frameworks.· Certified Information Systems Security Professional (CISSP) required within 120 days of onboarding.· Demonstrated leadership in managing large-scale cyber security operations and projects.· Excellent communication, problem-solving, and analytical skills. Preferred Qualifications· Advanced certifications such as CISM, CISA, CEH, CCSP, or GIAC.· Experience supporting federal agencies, defense, or other highly regulated environments.· Familiarity with cloud security, zero-trust architecture, and advanced endpoint protection tools.· Ability to work in a fast-paced, mission-critical environment. Clearance Requirement· Must possess or be able to obtain and maintain a security clearance as required by the agency. *Position is contingent upon award. Work Location: Washington DC, United States To know more about the company, visit Stahl Companies (stahlusa.us) Key ResponsibilitiesThe Lead Cyber Security Engineer, Senior will serve as the single security lead responsible for managing and overseeing cyber security operations across all sites. This individual must have extensive experience in IT systems, cyber defense strategies, and enterprise security operations, and will play a pivotal role in ensuring compliance with agency cyber security guidelines and regulations. The Senior Cyber Security Engineer will be responsible for leading security initiatives, coordinating with stakeholders, and ensuring that all security operations and incident response activities are effectively executed. This role requires strong technical expertise, leadership skills, and the ability to design, implement, and monitor secure IT systems across diverse environments.

Job Description Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting Edge Technology across the US Government. Be a part of something special! Responsibilities: • Recording transactions in General Ledger in UNANET accounting software, including journal entries, • Managing Accounts Payable - Recording vendor/subcontractor invoices and Coordinating with Project Managers for approvals; preparing documents for payments., • Time-sheet management - regular review and corrections of employees and subs time sheets, • Work with accounting, Unanet, HR and Contracts teams on any issues that arise and require collaboration for resolutions. Halvik's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Job Description Sayres, a renowned leader in defense support services to the DOD in the shipbuilding industry, is currently seeking a skilled NQV Cybersecurity Analyst with Secret Clearance in Washington, DC. As a key member of our team, the Cybersecurity Analyst will play a vital role in ensuring the security and integrity of shipboard and shore-based operational sites, laboratory/development environments, and land-based test sites in support of the United States Navy. Responsibilities: The Senior Navy Qualified Validator Cyber Analyst will be responsible for supporting the technical implementation of the Risk Management Framework (RMF) Assessment and Authorization (A&A) services, as well as supporting the Cybersecurity Acquisition process. They will conduct cybersecurity and risk assessments on Platform Information Technology (PIT) and PIT control systems (Industrial Control Systems) to identify and mitigate technical and non-technical vulnerabilities. Duties include, but are not limited to: • RMF Package Development: Perform multiple roles in eMASS for RMF package development, providing inputs and maintaining RMF packages., • Vulnerability Remediation: Collaborate with engineers to remediate existing vulnerabilities or develop mitigations to minimize risks., • Policy Compliance: Implement and apply DoD, DoN, CNSS, and NIST policy, instruction, and requirements., • Ad Hoc Data Calls: Participate in ad hoc cybersecurity data calls to support critical assessments., • Security Compliance Evaluation: Conduct traditional security compliance evaluation activities on shipboard platforms., • Understanding of the Program Protection Policy, • Network Mapping and Vulnerability Scanning: Familiarity with network mapping, vulnerability scanning tools (e.g., ACAS, Nessus), and Security Technical Implementation Guides (STIGs) and Security Requirement Guides (SRGs)., • BA or BS degree., • ACTIVE NQV Certification, • Security+ certification., • Experience as an ISSE or ISSM, • 5+ years of experience in cybersecurity performing vulnerability assessments. Experience and understanding of the NIST RMF., • Minimum of 10 years' experience in cyber security issues at the subject matter expert level., • Experience with Operating Systems such as RHEL, Unix, Windows, Cisco IOS., • Good verbal and written communication skills, with the ability to collaborate effectively with a team of government and industry professionals., • Industry Certifications: Possess relevant certifications such as Network+, CISSP, CAP, or CEH., • USN Service Craft Experience: Preferred first-hand experience with USN Service Craft/Auxiliary Ships or Small Boats., • Ability to obtain a DoD Secret security clearance., • Willingness to travel to support shipboard testing, BS degree in Computer Science/Engineering or related technical discipline., • Experience in network mapping, vulnerability scanning, STIGs/SRGs. At Sayres, we offer an atmosphere conducive to realizing your potential through personal and professional development while exceeding customers' expectations. Join our dynamic team and contribute to our continued excellence in providing service to the Federal Government since 2001. We offer a broad spectrum of technical, engineering, and administrative services, including acquisition, financial and program management; fleet synthetic training; logistics; ship construction engineering; systems engineering and integration; wargaming; test and evaluation; security, counterintelligence, and policy analysis. Sayres is headquartered in Washington, DC, with offices throughout the United States and has a presence abroad. #CJ Job Posted by ApplicantPro

Job DescriptionSalary: Why Us? Our intentional culture, our leaders, our people. which helped us rank #1 Best Companies to work for in Maryland. This achievement is a testament to the dedication and passion of our smart, vibrant, and dynamic team members. You wont just find a job, youll discover a career with purpose, impact, and the opportunity to grow. Our team creates and brings market-leading, transformative technology solutions to the federal government, and our goal is to support them in building an exciting and profitable career by providing opportunities for professional and personal growth, competitive benefits, and work/life balance. We deliver innovative IT solutions to the federal government. We specialize in transforming federal IT systems into efficient scalable infrastructures that enhance operational performance and fortify against evolving cyber threats. We enable mission success for federal agencies with innovative, secure technology solutions and services that drive modernization, elevate cyber security excellence, and unlock peak efficiency. Our expertise in modernization, security, and optimization, augmented by our actionable insights derived from industry partnerships and extensive federal agency knowledge, enables our customers to deliver secure, resilient, and cost-effective services that meet the highest standards of national security and compliance. About the Role We are seeking a motivated and driven Account Executive. They will be responsible for driving strategic sales initiatives into target accounts within key Federal agencies such as Army, Navy, Airforce, and DHS. This includes targeting new names as well as existing accounts and managing existing customers. They must be able to work in a highly competitive environment and deliver measurable and quantitative results. Delivering desired results in the highest quality manner with a strong attention to detail is needed. The Account Executive will serve and maintain relationships with OEMs and key customers to deliver innovative and effective solutions. Responsibilities • Develop and maintain a pipeline of addressable business within client through direct customer interaction, vendor relationship development, and key partner alignment, • Demonstrate comprehensive understanding of our core offerings, map those to account needs and establish a resource and action plan to generate pipeline, • Uncover addressable business issues within government agencies and lead the effort to provide solutions and plans with key decision makers., • Demonstrate consistency in proactive customer engagement utilizing internal resources including pre-sales engineers, key partners and executive resources, • Provide a comprehensive briefing on target account goals and high priority projects to management, • Work closely with inside support resources to ensure accurate and standardized data population in CRM, • Manage multiple concurrent sales cycles effectively., • Negotiate and close complex long-cycle deals., • Nurture mutually beneficial long-term relationships with clients and strategic partners., • Apply forward creative thinking and problem solving. Requirements • Bachelors degree or equivalent experience 2-4 + years successful outside sales/lead generation management of technical products or services, • Experience selling to Army, Navy, Air Force, and/or DHS and relevant, current contacts within those agencies., • Proven ability in managing complex sales cycles from start to finish with a track record of successful revenue attainment, • Consistent over-quota performance and top tier company ranking, • Consistent and high-income track record of above OTE achievement, • Stability: proven history of being a top performer in a company for multiple years running, • Strong analytical, organizational, and financial management skills, • Demonstrated ability to take initiative, multi-task, and prioritize, • PC/Microsoft Office Understanding of IT technology and service solutions and associated products and applications., • Strong C-level/board level communication and presentation skills, • Ability to demonstrate strong verbal and written business communication., • Highest level of professional courtesy, mutual respect, and ethics, • High standard of excellence, professionalism, and role model behavior, • High energy level, comfortable performing multifaceted projects in conjunction with day-to-day activities, • Ability to establish credibility and be decisive and able to recognize and support the organization's preferences and priorities Great to Have • Familiarity with value selling methodologies, • Resourceful and well organized with superior attention to detail, • Self-starter attitude with the ability to work in a dynamic, predominantly remote environment remote work

Job Description Our Mission At Dobbs Defense, we deliver mission-centric IT, Cyber, and data analytics solutions for our government and commercial clients through the convergence of automation, innovation, training, and education. Delivering high-quality IT, cybersecurity, and data analytics solutions through proven and innovative methods is our vision. Job Description Dobbs Defense Solutions is seeking a System Administrator to provide the Magnetic Silencing Facility (MSF) program general Information Technology (IT) lifecycle support for hardware/software systems at MSF sites. The IT Systems Administrator will also maintain configuration management of software, as well as support maintaining the system master disks/files to facilitate on site troubleshooting and hardware/software systems restoration of the MSF site computer network systems. Duties Basic duties to include: • Install, configure, and maintain servers, workstations, networking equipment, and IT infrastructure, • Monitor performance, resolve bottlenecks, and optimize system efficiency, • Perform regular backups and test recovery procedures, • Apply security patches and updates to mitigate vulnerabilities, • Troubleshoot and resolve hardware, software, and user support issues, • Manage software installation, upgrades, and license compliance, • Track and maintain IT asset inventory, conduct audits, and oversee asset disposal, • BS/BA with 10+ years’ relevant experience, or, • On-site, • Ability to travel CONUS and OCONUS Our Equal Employment Opportunity Policy Dobbs Defense Solutions is an Equal Opportunity Employer. We consider all qualified candidates for employment based on individual merit, job qualifications, and business needs. Employment decisions are made without regard to any status protected by applicable law. We are committed to fair and consistent practices in hiring, promotion, compensation, benefits, and all terms and conditions of employment. Powered by JazzHR Spk5IJFFjj

Job Description Discover the feelings of Camaraderie and Family while being technically challenged to grow! Responsibilities: Assist in ensuring the quality of dynamic Enterprise Web and Mobile applications in Cyber Security, Supply Chain/Logistics, or Finance built by your teammates for a variety of clients like Verizon, Capital One, and Cardinal Health in small teams. Work in a fast-paced, hands-on capacity in a client-facing role, seeing first-hand the impact of your work on a daily basis. Desired Skills/Traits: • STRONG Communication skills - never hesitates to ask questions to fully understand, • Technical background/knowledge - Very computer/online literate, • Ability and DESIRE to learn New Technologies quickly, • High Energy / Attitude - need to move fast, • FREE catered lunch DAILY. Stipend ($50/week) provided during COVID work from home., • Paid Training (CodeAcademy, Coursera, NoFluffJustStuff, Google DevFest, pre-paid courses, mentoring)., • FREE snacks/drinks - Multiple varieties of soft drinks, juices, coffee, tea, Gatorade, beer, wine & regular social gatherings. EAI has NEVER HAD LAYOFFS from its beginnings in 2001. We have carried our folks through multiple tough economic cycles (2002, 2009/10, current pandemic) and will continue to do so! We are growing and looking for individuals who want to be part of a fun, passionate, and highly accomplished team with Hackathons and regular events like Poker and Movie Night to keep the spirits alive. Combine that with daily catered lunch from such restaurants as Cava, Chipotle, La Plaka, Jason’s Deli, and Shake Shack and you can see that we strive to foster a family-friendly culture that emphasizes teamwork, camaraderie, and openness. Come experience why so many employees have been with EAI for 5 to 10+ years and continue to make it their home as the EAI Family expands. Powered by JazzHR 9fZhMKFkIW

Job Description Develop innovative solutions to enable secure and reliable operations of enterprise computer systems. Engineer, design, develop, and implement enterprise network cyber defense capabilities to prevent sophisticated cyber threats. Understand the fundamentals of layered defense and zero trust technologies. Prevent adversary network threats, identify advanced attack vectors, and thwart methods of exploitation. Work individually or in a small integrated team, and potentially lead a task, project, or team. Ensure project completion and provide guidance and direction to lower-level technicians, specialists, and managers. Provide expertise in the engineering design, development, direction, and implementation of enterprise network cyber defense capabilities. Apply familiarity with the utilization, configuration, and implementation of cyber defense capabilities, including web content filters, email security capabilities, Intrusion Detection System, Intrusion Prevention System, Host Based Security Systems, Security Incident and Event Management tools, Domain Name System security practices, advanced log analysis, network monitoring, network flow analysis, packet capture analysis, network proxies, firewalls, anti-virus capabilities, Linux or UNIX command line, and access control lists. Requirements • 4+ years of experience with privileged and elevated access operating, maintaining, and patching a DoD Assured Compliance Assessment Solution (ACAS), • Experience with Windows and Linux, including installing, configuring, or maintaining servers operating systems and applications, • Experience working with STIGs, SCAP, and cybersecurity best practices, • Active TS/SCI clearance; willingness to take a polygraph exam, • HS diploma or GED and 7+ years of experience conducting or supporting cyber engineering projects and activities, Associate’s degree and 5+ years of experience conducting or supporting cyber engineering projects and activities, Bachelor’s degree and 3+ years of experience conducting or supporting cyber engineering projects and activities, or Master’s degree and 1+ years of experience conducting or supporting cyber engineering projects and activities, • DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification, • Experience with Gigamon, Ansible, Encase, Fidelis, Suricata, Varonis, or VMWare tools, • Experience with Cloud Enterprise, authorizing cloud systems, and Cloud services, including AWS, Azure, or GCP, • Experience with big data analytics, machine learning, artificial intelligence, or anomaly detection, • Experience with Zero-Trust Architecture, • Experience with DevSecOps, CI/CD, IaC and CaC, IT Infrastructure Library, and IT Service Management, • Experience scripting in PowerShell and BASH command line interfaces or in Python or Perl scripting languages, • Experience in a consulting or client-facing environment, • Ability to automate security configurations of Linux and Windows systems, and recommend and implement remediations for non-compliant security controls, • Possession of excellent verbal and written communication skills, including using presentations to convey complex ideas to client and internal staff Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? • Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS, • 401k Contribution from Day 1, • PTO + 11 Paid Federal Holidays, • Long & Short Term Disability Insurance, • Group Term Life Insurance, • Tuition, Certification & Professional Development Assistance, • Workers’ Compensation, • Relocation Assistance

Job Description Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting Edge Technology across the US Government. Be a part of something special! Halvik is looking for a self-motivated, organized, and detail-oriented Proposal Team Lead to lead our proposal team. The Senior Proposal Manager will work closely with the Director of Proposals, Account Managers, Capture Managers, Executive Leadership, and other corporate support functions (Pricing, Contracts, graphics, etc.) to respond to Defense and Civilian Federal pre- and post-proposal solicitation responses as well as follow-up clarification (EN, IFN, BAFO, etc.) notices. Halvik operates in an agile, team-based environment where employees are empowered and flexible in their roles, providing the right candidate with broad access to company leadership and growth opportunities within the organization. The Proposal Team Lead will be responsible for: • maintaining the proposal pipeline to include active and upcoming proposal activity, proposal team assignments, and identifying resource needs across solicitation response requirements, • mentoring and training proposal team resources and proposal participants, • communicating proposal team performance to internal team members, external teams, and company leadership, • supporting additional administrative tasks including knowledge management and Teams/SharePoint administration, • end-to-end management of the proposal development process, including pre- and/or final solicitation requirements analysis and response development, production, and delivery, • developing proposal support documents including schedules, outlines, compliance matrices, templates, and color team artifacts, • facilitating proposal solution development sessions and development of proposal strategy artifacts including win themes and discriminators, • scheduling and leading proposal related meetings including kickoff meetings, status calls, and color team debriefs, • ensuring compliance with solicitation response requirements, • writing to management, past performance, resumes, and other non-technical response requirements, as needed, • collaborating and/or coordinating with growth resources, operational resources, corporate functional resources, Government personnel, and external teammates Required Skills: • Bachelor's degree, • minimum five years of experience managing proposals in the Federal Contracting space, • strong writing and editing skills, • strong Microsoft Word, PowerPoint, and Excel skills, • experience with GSA and Agency-specific vehicles, • ability to work independently and proactively, • flexibility to work extended hours as needed Preferred Skills: • knowledge and experience with IT concepts, • experience with AI tools and processes in proposal development, • experience with graphics software like Adobe Illustrator, • experience with oral presentation development and coaching, • experience with a variety of proposal submission formats such as video presentations and editing Halvik's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Halvik's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Job Description Global Dimensions is a HUBZone, service disabled, veteran-owned small business based in Fredericksburg, VA. We are a dynamic, expanding company with exciting opportunities in language/culture, training/education/instruction, IT, cyber security, and intelligence (analysts, CI, HUMINT, SIGINT, etc.). Global Dimensions is seeking Logistics Analysts for upcoming opportunities in Springfield, Virginia. Duties: • Participates in the day-to-day provisioning, spares, or maintenance/repair activities for one or more programs, • Prepares requisition documents and forwards to applicable sources, • Maintains the document register, assigns document numbers, and records the status and demand for material, • Monitors the status of requisitions in the document register, • Provides status to customers and maintains a register of cancelled requisitions, • Conducts a monthly reconciliation of the document register and determines appropriate courses of action, • Maintain stock control levels and reorders parts, • Requisitions, receives, stores, issues, segregates, cares, preserves, inspect, and accurately inventories equipment and repair parts. Processes repairable/turn-in items, • Maintain accountability of equipment and equipment/supply stock age, • Participates in the conduct of routine market surveys, • Supports US Army systems on site whenever and wherever deployed, • Available to deploy to other countries and/or theaters to perform quick reaction technical support to US forces worldwide military contingency missions and requirements in potentially hazardous work environments, • Knowledge in shipping, receiving, storing, issuing stock control measures and accounting procedures, • Knowledge in handling, movement, storage, and maintenance of ammunition, medical and food supplies, • Establish and maintain stock records and other documents such as inventory, material control, accounting and supply reports, • Review and verify quantities received against bills of contracts, purchase requests and shipping documents, • Unload, unpack, count, segregate, palletize and store incoming supplies and equipment., • Construct bins, shelving and other storage aids, • Simplify and standardize the collection and use of maintenance data, • Raise the quality and accuracy of performance, cost and parts data through improved maintenance management Clearance Requirements: • TS/SCI Security Clearance., • Able to maneuver in small spaces and lift 50lbs, • Global Combat Support System-Army (GCSS-A) experience, • Defense Property Accountability System (DPAS) experience, • Military 92A equivalent training/experience desired, • Experience in the operation of office equipment such as word processors, secure telephones, and copiers, • The ability to use existing logistics database programs to collect maintenance, supply, and logistics information for reports and briefings, • Knowledge of the Federal Supply System, • Knowledge of packing and shipping requirements, • Fluent in the English language including the ability to read, write, and comprehend relevant logistics documentation, • Basic knowledge in operating MS-Office Suite including Word, Excel, Power Point, • Knowledge of basic military logistics, supply and maintenance shop operations Global Dimensions does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits. Equal Opportunity Employer/Veterans/Disabled.

Job Description J5 Consulting is a Maryland based company established in 2006 to provide computing and consulting services for government and commercial entities. Our services improve Information System networking performance and compliance and protect electronic assets from loss and compromise. We welcome your application to receive consideration for the following position. This position is available immediately. Job Overview: Candidate will provide web development support for the ground up development, build and continuous management, and maintenance of a WordPress-based website to include updating educational and outreach content, creating and managing comment capability, uploading and managing video content, and creating and managing sections for administrative functions of the office, including shared calendar administration. Required skills and demonstrated experience: • Demonstrated experience using WordPress., • Demonstrated experience in Microsoft SharePoint., • Demonstrated experience using open source software., • Demonstrated experience using content management systems., • Demonstrated experience writing workflows to include changing security permissions using workflow commands., • Demonstrated experience building customized reports, forms, and new features., • Demonstrated experience with web application development., • Certification as a SharePoint Administrator. US Citizenship: • The successful candidate must have an active U.S. Government Top Secret Security Clearance with a Full Scope Polygraph., • This position is expected to be onsite. The position will be located within the Washington Metropolitan Area (WMA)., • Local travel/POV will be on an as needed basis, within the local place of performance. This position is available immediately. Join J5 Consulting and Grow Your Cybersecurity Career At J5, we’re a team of innovators protecting organizations from evolving cyber threats. With 18+ years of success in government and commercial sectors, we offer meaningful opportunities to grow your career. Enjoy comprehensive benefits, including: • 100% employer-paid health coverage, • a 6% 401(k) match, • PTO, • tuition reimbursement, • bonuses Powered by JazzHR ol9EIM5t40

Job Description Phoenix Cyber is looking for a DLP Engineer to join our client delivery team. This position is onsite at the client location. Requirements: • 5+ years’ experience with defining an Endpoint data protection program (such as ForcePoint DLP) for a large enterprise., • 5+ years’ experience with defining an email Data Protection program with a full lifecycle approach for a large enterprise., • Ability to assess DLP configuration, infrastructure and assess data loss prevention (DLP) options., • Assess different DLP endpoint protection tool options and help the customer choose the best option., • Develop DLP design, design DLP integrations and assess enterprise reporting capability., • Configure DLP reporting capabilities, develop Endpoint system test plans and configure Endpoint policies in monitoring mode., • Must have the ability to assess Microsoft Office 365 email configuration, infrastructure, email flow and assess data loss prevention (DLP) options., • Responsible for developing O365 email DLP design, design DLP integrations, have experience with reviewing email Standard Operating Procedures (SOP’s), and assess enterprise reporting capability., • Responsible for configuring DLP reporting capabilities, develop email system test plans and configure O365 Email DLP policies in monitoring mode., • Monitor O365 email alerts, review and categorize alerts, coordination with business process and owners to move to secure information exchange, develop risk reduction plan, DLP policies testing and tune, and User acceptance testing (UAT)., • Top Secret Clearance, • Forcepoint Certifications Preferred: Phoenix Cyber is an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status. Phoenix Cyber participates in E-Verify to confirm the employment eligibility of all newly-hired employees. To learn more about E-Verify, including your rights and responsibilities, go to Powered by JazzHR qRhDGD0Cdo

Job DescriptionDescription: About the Position: The Cybersecurity Lead is responsible for overseeing the design, implementation, and management of an organization’s cybersecurity strategy and infrastructure. This role involves leading a team of cybersecurity professionals to protect the organization's information systems, network, and data from potential threats, ensuring compliance with relevant security regulations and standards. The Cybersecurity Lead will coordinate risk management efforts, respond to security incidents, and work proactively to secure all aspects of the organization’s digital presence. Key Responsibilities: Cybersecurity Strategy & Leadership: • Develop and implement a comprehensive cybersecurity strategy aligned with the organization’s business objectives and risk management framework., • Lead a team of cybersecurity professionals, providing direction, guidance, and support on security-related issues., • Ensure cyber-related tasks are performed efficiently, accurately, on time, and in compliance with all federal, state, and local regulations and guidelines., • Stay informed on the latest cybersecurity trends, threats, and technologies to ensure the organization’s security posture remains robust and up to date., • Enforce National Institute of Standards and Technology (NIST) RMF standards as well as Clinger Cohen Act (CCA) and Federal Information Security Management Act (FISMA) regulations., • Ensure non-compliant controls are being addressed in a timely manner (IAW DAF standards and best practices)., • Conduct regular risk assessments to identify potential vulnerabilities, threats, and areas of concern in the organization's infrastructure., • Develop and execute risk mitigation strategies, ensuring timely resolution of security gaps and vulnerabilities., • Implement and manage security monitoring tools to detect and respond to cyber threats in real-time., • Collect initial vulnerability scanning deliverables, specifically Assured Compliance Assessment Solution (ACAS) scans and Security Technical Implementation Guide (STIG) checklists., • Lead the response to cybersecurity incidents, including data breaches, malware attacks, and network intrusions., • Investigate security incidents, analyze root causes, and implement corrective actions to prevent future occurrences., • Oversee the design, implementation, and maintenance of secure network architectures, firewalls, intrusion detection/prevention systems, and endpoint security solutions., • Collaborate with IT teams to ensure security controls are effectively integrated into the infrastructure, cloud environments, and application development processes., • Ensure the organization complies with relevant cybersecurity regulations, standards, and best practices (e.g., GDPR, HIPAA, NIST, ISO 27001)., • Develop and maintain cybersecurity policies and procedures to ensure compliance with internal and external requirements., • Lead cybersecurity training programs for employees, raising awareness about potential threats such as phishing, social engineering, and other forms of cyberattacks., • Work closely with senior management and other departments (e.g., IT, legal, operations) to integrate cybersecurity into business processes and ensure alignment with organizational goals., • Communicate security risks and mitigation strategies to non-technical stakeholders, making complex issues understandable., • Prepare and present regular reports on logistics performance, inventory status, cost analysis, and potential issues to senior management., • Maintain accurate records of logistics activities, transactions, and communications with external partners., • Ensure compliance with internal reporting requirements and industry regulations., • Oversee vulnerability management processes, ensuring regular scanning and timely patching of systems, software, and applications., • Lead the continuous improvement of security processes, tools, and strategies to enhance the organization’s cybersecurity resilience., • Evaluate and recommend new cybersecurity technologies, solutions, and best practices to keep the organization’s security posture ahead of evolving threats Requirements: Cybersecurity Expertise: • In-depth knowledge of cybersecurity principles, frameworks, and technologies (e.g., firewalls, encryption, VPNs, IDS/IPS, SIEM)., • Strong understanding of risk management, incident response, vulnerability management, and security operations., • Experience with cloud security, network security, endpoint protection, and securing distributed systems., • Experienced working within the DoD Risk Management Framework (RMF) process., • Proven ability to lead, mentor, and manage a team of cybersecurity professionals., • Expertise in leading incident response, digital forensics, and root cause analysis., • Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar certifications., • Strong communication skills, both verbal and written, to articulate complex security concepts to stakeholders., • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field., • 7+ years of experience in cybersecurity, with at least 3 years in a leadership or senior technical role., • Proven experience managing security operations, incident response, and security risk management., • Occasional after-hours work may be required in the event of a security breach or ongoing incident., • The role may involve on-call availability to respond to security incidents outside of standard working hours., • Some travel may be required for audits, training, or industry conferences.

Job DescriptionConsulting Services Group (CSG) is a premier provider of support services, bringing a new and unique level of subject matter expertise to our clients. Our innovation-led services provides comprehensive solutions to our clients who face high-stake challenges related to managing essential programs, growth and transformation, critical communications, and logistics. Our people bring unparalleled expertise and dedication and we are always looking to expand our team. To meet our needs, we are looking for a Counterintelligence (CI) Officer to work out of McLean, Virginia. Successful CI Officer candidates will work in an integrated government-contractor team fusing intelligence information from multiple intelligence disciplines. Responsibilities include all-source intelligence research, risk analysis, and report writing; operational concept development; stakeholder engagement; and preparation and presentation of reports to all levels of customer management. CI Officers must be able to think critically and communicate highly complex information accurately, clearly, and in proper context while working collaboratively in a team environment. Candidates should be comfortable with drafting and disseminating written reports and requests for information. The ability to confidently deliver clear and concise briefings is a key skill for this role. Qualifications: • Must possess ability to obtain and maintain a TS/SCI clearance at time of application, • Active Top Secret SCI security clearance with Poly, • Experience conducting vulnerability analysis or surveys, • Strong knowledge of foreign adversaries’ intelligence capabilities including cyber/technical, Information Operations, and HUMINT, • Understanding of offensive and defensive counter-intelligence methods, • Familiarity with the concepts involved in CI risk analysis including insider threat detection, • Knowledge of and experience in the fundamentals of intelligence operations to include risk assessment, • Experience in Intelligence Operations/Analysis/Support to Field Operations, • Experience identifying targeting leads through the exploitation of all-source databases to craft targeting packages, • Experience using customer databases to monitor field traffic and communicate with field offices, • Formal CI training and/or certifications, • Overseas experience supporting collection operations and information sharing, • Foreign Language Skills Compensation and Benefits: We provide compensation commensurate with experience and qualifications. We are proud of the benefits that we offer! In addition to a competitive salary, we provide no cost health, dental, and vision insurance options for our employees. Our paid time off is a generous accrual program with additional time off for sick leave for you or your dependents wellbeing and paid military leave. Our 14 holidays allow our staff the flexibility to take alternative days off throughout the year. Employees also benefit from a retirement plan with immediate match and vesting. Additionally, we offer life and disability insurance, tuition reimbursement, and a rich employee referral program. We are honored to have been recognized as a USA TODAY Top Workplace for 2025. The strong culture that we have built – one that prioritizes work life balance, employee appreciation, strong values, and meaningful work, contributes to an environment where CSG employees feel valued and supported. Application: Applications will be reviewed on a rolling basis. Please let us know if you require accommodations during the application or interview process by reaching us at 540-751-3215. Consulting Services Group, LLC is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability. For more information, see Equal Employment Opportunity. We recognize that people come with a wealth of experience and talent beyond just the technical requirements of a job, therefore our job descriptions are guidelines, not hard and fast rules. Your experience helps build the competencies and knowledge that translates to our openings.

Job Description Company Description: Merlin Cyber is a cybersecurity company with over 25 years of experience working with the U.S. Public Sector. The company specializes in providing innovative technology solutions that effectively meet public sector requirements and mission priorities. By partnering with best-in-class companies and investing in emerging technologies, Merlin helps the U.S. Public Sector stay ahead of critical threats and accelerate modernization initiatives. Role Description: As the Salesforce & MuleSoft Administrator, you will support the Sales Operations team by creating Salesforce reports and dashboards, owning data management tasks, responding to user support requests, and testing new features and functionality. This role will have the opportunity to contribute to diverse projects both big and small and work cross-departmentally with the B2B Sales, Finance, Enrollment, and Marketing teams. Please note that US Citizenship is required for this position. Responsibilities: • Partner with the SalesOps team and internal business stakeholders to create Salesforce reports and dashboards, • Administer Company’s Salesforce instance and manage connected integrations, • Respond to Salesforce user requests and assist with developing solutions to address business needs, • Perform frequent data quality checks to ensure Salesforce data is accurate, • Make recommendations on improving existing business processes using Salesforce and other SalesOps technology, • Assist the CRM team with testing new Salesforce functionality that supports business requirements, • Take on ad-hoc responsibilities around new initiatives such as building new metrics and requests to analyze revenue information Qualifications: • 3-5 years’ experience administering Salesforce and innovating or scaling in a similar, fast-based environment; specifically, experience in tools administration, • Salesforce ADM-201 Certification (required), • Experience working as a part of a sales/business development, sales/revenue operations, or sales team, • Experience in Installing and Configuring Mule ESB, Mule Management Console - Install, Configure Cache for Mule., • Experience in Creating, Configuring and Managing API Gateway., • Experience in Automating application deployments to Mule., • Experience with Active MQ, Message Broker., • Experience in enterprise-scale environments, • Strong working knowledge of Service Oriented Architecture (SOA) and associated concepts such as XML data formats, Structures and Schemas, WS specifications, SOAP, Service Mediation/ESB, Digital certificates, Messaging, WS-Policy, WS-Security, WS-Addressing and other WS-* stack etc., • Advanced excel skills and excellent written communication, • Familiarity with the creation and configuration of Salesforce and/or Tableau dashboards and reporting, • U.S. Citizenship required. BENEFITS AND PERKS: At Merlin, we want to empower and inspire employees to be and do their best. Workdays are dynamic, collegial, and fun. Our office features multiple places to work unconstrained by typical office barriers. Our wellness package provides access to an on-site gym and includes medical, dental, and vision insurance along with options for FSA and EAP. We offer 401(k) with employer match, unlimited PTO, and a culture respectful of the reality that not everything in one's personal life is guaranteed to happen only after hours. Merlin International, Inc. does not discriminate based on race, color, religion, national origin, sex, sexual orientation, gender identity, age, genetic information, disability, veteran status, or any other status protected by applicable law or regulation. It is our intention that all qualified applicants be given equal opportunity and that selection decisions be based on job-related factors.

Job Description Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. Barbaricum is seeking a highly qualified Cloud Cybersecurity Subject Matter Expert (SME) to support the Military Community and Family Policy (MC&FP) enterprise and Digital Enterprise Services (MODES). This senior-level role provides strategic leadership and multidisciplinary cyber expertise to ensure secure operations and risk-managed digital environments. The ideal candidate is a seasoned technologist with deep understanding of DoD cybersecurity frameworks, cloud platforms, and cyber compliance methodologies. Responsibilities: • Lead cybersecurity support for MC&FP programs operating in cloud-based environments., • Guide and mentor technical teams on secure cloud architecture, policy implementation, and threat mitigation strategies., • Provide direct support for compliance with NIST Risk Management Framework (RMF), FISMA, and relevant cybersecurity directives., • Manage and oversee vulnerability assessments, system audits, and incident response planning., • Support the integration of security controls including STIGs, SCAP, IAVA compliance, and policy documentation., • Active DoD TS/SCI Clearance, • Bachelor's degree in Computer Science, Information Systems, IT, or a related discipline., • 8+ years of experience managing cybersecurity projects of similar size and complexity within cloud environments., • 8+ years of direct experience with NIST RMF, NIST SP 800-53, STIGs, SCAP, IAVAs, and FISMA., • One of the following certifications:, • 8+ years of experience analyzing, assessing, and implementing corrective actions based on vulnerability management and penetration testing. 8+ years of experience supporting DoD defensive cyber operations including but not limited to, information system protection, defense, response (incident handling), reporting and recovery. EEO Commitment All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Job Description ZERO TRUST COMMUNICATIONS SPECIALIST / Trainer MILITARY FRIENDLY & PREFERRED - HOH SPONSOR SUMMARY: Zermount, Inc., a military friendly and Hiring Our Heroes (HOH) sponsor, is seeking an experienced Senior Communications Specialist / Trainer to support our Zero Trust initiatives within a federal client environment. This role involves the development and delivery of in-depth communications strategies and materials, focusing on advancing cybersecurity awareness and adoption across the organization. The Senior Communications Specialist / Trainer will play an important role in both internal and external communications for our cybersecurity programs, including but not limited to Zero Trust and GRC (Governance, Risk Management, and Compliance) initiatives. This position requires an understanding of cybersecurity principles to effectively communicate and train on behalf of managers, SMEs, and technical teams, ensuring the accurate promotion of cybersecurity measures through various communication platforms and training modules. DUTIES & RESPONSIBILITIES: The ZT Communications Specialist will ensure the Zermount ZT solutions and services for securing federal networks and meet the objectives of EO 14028 and other Federal requirements are effectively communicated to federal clients. Additionally, the ZT Communications Specialist will provide support and services to include: • Develop and execute comprehensive communication strategies and plans to support cybersecurity initiatives, ensuring alignment with federal directives such as EO 14028; OMB M 22-09, 24-14, 21-31, and NIST guidelines., • Create and manage content across multiple platforms including team SharePoint sites, public and internal websites, ensuring professional presentation and adherence to 508 compliances., • Coordinate and lead communication-driven events like Zero Trust Day and GRC Day, targeting multiple stakeholders to enhance cybersecurity engagement and education., • Prepare and deliver high-quality presentations and briefings for executive-level program managers and stakeholders across contract and federal levels., • Review and ensure the quality of all communications, including technical documentation, newsletters, bulletins, and online content., • Collaborate with engineering leads, project managers, and other stakeholders to track, report and communicate on the adoption metrics of cybersecurity principles., • Support customer engagements, including quarterly reviews and performance debrief activities., • Support communication of complex scheduling and execution tasks within the Integrated Master Schedule (IMS) to facilitate coordination and interaction with all resources and relevant stakeholders., • Responsible for developing and conducting a minimum of six (6) Zero Trust training courses annually, ensuring comprehensive coverage of all relevant topics and principles., • Ensure Pre-Kick-Off Chats are initiated by tech evaluators with the System Team, managing communications and ensuring all stakeholders are prepared for project initiation., • Deliver relevant templates, overviews and System Overview Invitations, ensuring consistency and clarity in communications., • Initiate and manage communications with PS Stakeholders, ensuring engagement and alignment with project goals., • Ensure tech evaluators are supported to send and manage invites for Technical Evaluations, coordinating timings and participants effectively., • Review the Weekly ZT Update Brief for accuracy, ensuring all information is current and precise., • Continuously update and refine the communications plan, adapting to project needs and stakeholder feedback., • Inspect all ZT Training material and deliverables for quality and relevance, ensuring training effectiveness., • Implement and oversee a rigorous quality assurance process for all communications and training materials to ensure accuracy, relevance, and compliance with industry standards and federal guidelines., • Regularly review and update communication and training content to reflect best practices., • Develop and maintain a reporting system to track the effectiveness of communication initiatives, gathering feedback from stakeholders to measure impact and identify areas for improvement., • Minimum 5 years of technical writing and executive communication experience in IT or information security., • Must have a background working in an IT or technical cybersecurity role, or have been part of a cybersecurity program, providing the necessary knowledge and skills to effectively understand and communicate complex cyber security topics., • Demonstrated ability to develop and present talking points and executive summaries., • Proficiency with graphic design and presentation software to maintain high standards of visual communication., • Familiarity with NIST Special Publications, Zero Trust Architecture, Maturity Model, and Technical Reference Architectures., • Strong analytical skills and the ability to predict challenges and develop proactive solutions., • Minimum of a Bachelor's degree in one of the following: Information Technology (IT), Computer Science, Engineering, Cybersecurity, or a related field. One of the following certifications are preferred but not required: • Project Management Professional (PMP), • Scaled Agile Framework (SAFe), • Scrum Master, • Security+, • 8:00 am EST - 4:30 pm EST.

Job Description At Areté, we are on the forefront of utilizing innovative solutions, with great minds from all backgrounds, to help solve the nation’s most complex security challenges. We strive for an inclusive, collaborative team environment that approaches differences as opportunities for innovation and excellence. As an employee-owned company, we foster an atmosphere that propels diverse career opportunities and professional growth. Discover your future with us. Areté is seeking an experienced IT Systems Administrator to work in our new Falls Church, VA facility. The candidate will report directly to the regional IT Manager and provide support for the day-to-day administrative operations of the IT department. Selected candidates will have and maintain a Top Secret security clearance with SCI access, including a CI Polygraph. The selected candidates will collaborate with other Cyber Security and IT staff members, travel occasionally, and provide some after-hours support. Candidates will also support a variety of information systems at varying levels of complexity on the classified and corporate networks. This is an exempt non-supervisory full-time position. Primary responsibilities: • Integrating, upgrading, and managing domain services and infrastructure systems in a Microsoft Windows Server environment., • Configuring and administering various line of business applications, IT/Cyber Tools, and other software solutions., • Recommending improvements to the company’s IT services., • Contributing to computer and network security using a variety of security-based products., • Managing data backup and restoration systems for the local facility., • Some administration and maintenance of client computers and solutions in various LAN environments., • Providing end user support for local office, • Maintaining software licensing records and providing support to IT budget planning sessions., • Mentoring other IT staff and leading technical projects. Generous PTO and Leave Times • Bereavement, • Paid Time Off (PTO), • 401K Retirement Plan Contribution, • Employee Stock Ownership Plan, • Medical Insurance, • Dental & Vision Insurance, • Life Insurance and Long-Term Disability (LTD), • Creativity, • Integrity, • Passion, • Responsiveness, • Bachelor’s Degree in an Information Technology related discipline and/or current, applicable industry-standard certifications (MCSA, CCNA, Security+, RHCSA)., • Minimum of 3 years working as a Windows System Administrator, Linux Systems Administrator, Network Administrator or similar role., • Must have or be able to obtain a Security+CE or equivalent certification for DoD 8140/8570 IAT Level II or higher within 90 days of employment., • Proficiency with domain services utilizing Windows Server including Active Directory, DNS, Group Policy, DFS, and DHCP., • Advanced IT troubleshooting skills and experience., • Strong interpersonal skills, ability to work autonomously and on a team., • Strong written communication skills and the ability to produce technical documentation., • Active Top Secret security clearance., • System administration of Red Hat Enterprise Linux 8 or later., • Experience in one or more of the following: Microsoft 365, Azure or AWS Administration, SharePoint, Veeam Backup & Replication, or SCCM Configuration Manager, • Familiarity with classified information system Cyber Security tools and technologies (Nessus/ACAS, SCAP Compliance Checker, DISA STIGs). Other Considerations Areté is committed to the principles of equal employment opportunity and nondiscrimination, and we believe every person has the right to be treated with fairness, dignity, and equal consideration. Areté is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, marital status, national origin, age, veteran status, disability, or any other characteristic protected by applicable federal, state, or local law. U.S. citizenship is required to meet position eligibility. Successful passage of a criminal background screen is required to meet position eligibility. Selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Areté will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring. Successful passage of a Department of Transportation (DOT) drug test is required to meet position eligibility. If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access our website because of your disability. To request an accommodation, please contact Areté Human Resources at 818-885-2200 for assistance.

Job Description SGSS, a Parsons company, has an immediate full-time opening for a Senior Network Engineer to help SGSS and NRL continue expansion into cloud-based infrastructure with a specific focus on ensuring the stability and integrity of data, wireless, and voice network services. This position will be working onsite, at our office in Alexandria, VA as well as our customer site located in Welcome, MD. A successful candidate will bring experience planning, designing, and developing local area networks and wide area networks across the organization. JOB RESPONSIBILITIES • Maintain and manage network (Cisco, Juniper, Palo Alto) firewalls, routers, switches, LANs, WANs, site-to-site VPNs, remote-access VPNs and wireless networks as required, • Assess the current state of network architecture and identify areas for improvement, • Develop, design, implement, document, communicate, and oversee architecture and design products for new network capabilities, in partnership with software and systems engineers, to be procured and implemented at SGSS corporate and customer locations, • Assist in program engineering, including enterprise configuration management, risk management, trade assessments, procurement decisions, and the development of training and documentation to sustain new network capabilities, • Respond to tickets (Slack/Jira) and provide Tier 3 while tracking and resolving issues in a timely manner., • Develop, evaluate options, and deliver engineered network solutions for both corporate use and customer delivery, • Oversee new and existing equipment, hardware, and software upgrades. Adopt and implement architectural best practices and frameworks to include the enhanced security measures to protect the network infrastructure from cyber threats and vulnerabilities, • Active DoD SECRET clearance, with ability to obtain a TS/SCI clearance, • Must be a US citizen, • B.S. in relevant field (Comp. Sci./Engineering, Software Engineering, Information Technology) and a minimum of fifteen (15) years' experience in a professional relative field, • 12+ years of progressively increasing responsibility in network solutions engineering, • 12+ years of experience designing, implementing, managing and supporting enterprise level IP networks that include support of a heterogeneous distributed desktop computing environment, • 12+ years' Senior Network Engineering Design/Architecture, Operational, and Support experience in Data Center network environments, • 12+ years of experience with networking in service providers and/or enterprises to include 802.11 / Wi-Fi wireless, • Deep understanding and can demonstrate technical expertise in the configuration, troubleshooting and operation of technologies and protocols commonly implemented in Data Center networks including Layer 2 switching technologies, EVPN, Layer 2 and Layer 3 Multicast, OSPF, BGP, and associated tunneling technologies (GRE, VXLAN, etc.), • Excellent hardware troubleshooting experience, • Extensive application support experience with network monitoring and analysis software, • Current TS/SCI, • Network virtualization, including containerization., • Familiarity with specific tools: Gitlab, Terraform, OpenStack, AWS GovCloud, RedHat Enterprise Virtualization, VMWare/ESXi., • Experience serving in security management in a classified IT development program., • Experience with Automation Frameworks, DevOps Concepts, scripting, and Programming Languages (Kubernetes, Ansible, Python) a plus., • Proficiency with Linux, especially RHEL families, and Bash scripting., • AWS Certifications., • DoD 8750 certification at IAT Level II (CompTIA Security+; Cloud+, CASP+), will be required to attain and maintain as part of the job. SGSS believes in taking care of their employees by offering: • ALL benefits fully funded, for your entire family, • this includes Medical/Dental/Vision/Group Life/STD/LTD - no employee premiums, • SGSS funded HSA (Health Savings Account) provided, • with SGSS funding the maximum amount allowed by the IRS SGSS is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. If the offer is accepted for this position the candidate would be required to successfully complete drug screen and background check.

Job DescriptionDescription: Harmonia Holdings Group, LLC is an award-winning, rapidly growing federal government contractor committed to providing innovative, high-performing solutions to our government clients and focused on fostering a workplace that encourages growth, initiative, creativity, and employee satisfaction. We have an exciting opportunity for a Director Business Development & Capture to join our team in McLean, VA. The ideal BD Executive will have experience in business development, capture management, IDIQ/BPA Task Order Management experience, focused on DoD. • Harmonia is seeking a Senior-level BD Executive to aggressively pursue and qualify new opportunities within the Defense Agencies addressable market space that yield new incremental revenue and profitable growth. The BD Executive leads capture efforts to secure new or re-compete contracts, or task order business. The BD Executive develops strategy including business and help with technology solution for pursuit of opportunities; responsible for building and maintaining the business area's pipeline, identifies potential customers, competitive assessments, price-to-win strategies, teaming partners, and participates in bid and proposal activities., • This position will require a very strong understanding of the DoD customer's organization, technology, and end users, and to capitalize on that understanding to improve Harmonia's competitive position. Specific duties include: Identifies and qualifies opportunities for new business. Shape new opportunities/capabilities that competitively position Harmonia’s solutions. Leverage value-added solutions into new adjacent markets. Maintain and grow business relationships with Industry partners, client representatives and government customers that focus on solutions offerings, and opportunities to marketing campaigns. Supports lifecycle Capture Management efforts, including new business and re-competes which Increases Win on targeted new business/re-compete opportunities., • Proactively lead customer prospecting and engagements to gain insight, influence and shape re-compete/new opportunities. Coordinates and exchanges information with CTO, BD Executives, Account Managers, Delivery/Program Managers, Solution Architects, experts and other personnel to achieve organic and new business growth targets. Maintain accurate and timely records of business opportunities and ongoing account activities, which includes pipeline reporting, new customer data and revenue data for current customers. Articulate and present those business opportunities to senior management as needed. Research, identify, and develop a business strategy regarding new opportunities for assigned customers, develop tactical and strategic opportunity pipeline. Supports the development of capture plans, proposals, solutions, plans of action, business plans, and marketing materials., • DoD BD Executive, • Strategic & Tactical Planning, • Account Development/ Acquisition, • Target Marketing & Penetration, • Sales Team Training/ Supervision, • B&P Budget Management, • Process, Policy and Best Practices Formulation, • Sales Presentations/ Closing, • Contract Negotiations, • Ability to write and speak compelling proposal-quality prose and a demonstrated history of winning new work/closing deals, • IDIQ Task Order Capture Management, • Vehicles: DOT SWES, FDIC ITAS-NG, SEC ONEIT, • Best-in-Class Contracts: 8(a) STARS3, GSA VETS2, CIO-SP3 SB, Polaris, OASIS+, • Agency Experience: Federal Civilian –, • Education, FDIC, Labor, SBA, SEC, Transportation, Treasury/IRS, USDA,Requirements:, • US Citizenship is required, • Bachelors Degree in Computer Science or related degree or equivalent work experience preferred., • Must have at least 7 years of experience BD and Capture Management, • Experience developing business in the Government market in the fields of information technology to include digital modernization, Big Data, Cloud, cyber security, AI/ML, GIS solutions and services., • Previous experience with the Government procurement process and DFARs., • Team Player capable of working within a collaborative environment. Self-starter who exhibits attention to detail and expert organization skills, • Experience in use of DELTEK GovWIN IQ, and CRM tools Salesforce/Technomile Exp is preferred, • Fully capable of using MS 365 Office Suite Tools: Word, Excel, PowerPoint., • Strong customer service/client facing skills., • Active DoD SECRET or TS Clearance is a PLUS, • Previous DoD/ Military Experience is a PLUS, • Work location: Northerns VA/DMV - Tysons Area office will be the primary work location ( minimum 3 days/week), • Business Travel, as needed up to 30% expected

Job DescriptionTetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. We are looking for a Senior Cyber Operations Engineer to provide expert-level support to enterprise vulnerability management programs across cloud-based infrastructures. This role is critical in executing and maturing continuous monitoring capabilities through the use of industry-standard tools such as ACAS (Tenable.sc), AWS Inspector, and DISA STIG frameworks. The engineer is responsible for identifying, analyzing, and driving remediation of security vulnerabilities in alignment with DoD cybersecurity standards and Risk Management Framework (RMF) requirements. RESPONSIBILITIES: • Lead enterprise-wide vulnerability scanning, analysis, and reporting using ACAS for traditional infrastructure and AWS Inspector for cloud-hosted assets, • Interpret and apply DISA STIGs to support secure configuration baselines, remediation plans, and POA&M lifecycle management, • Coordinates with system owners, application teams, and ISSOs to drive resolution of findings, • Automates scanning and reporting pipelines to enhance operational efficiency, • Creates and maintains vulnerability dashboards, compliance reports, and audit-ready documentation, • Supports continuous monitoring tasks under RMF and ensures timely ingestion of findings into eMASS, • 10+ years of hands-on experience in cybersecurity operations, • Demonstrated expertise with ACAS (Tenable.sc/Nessus), AWS Inspector, and DISA STIGs, • Solid understanding of NIST SP 800-53 controls and RMF processes, • Hands-on expertise with compliance systems such as eMASS, STIG Viewer, and SCAP tools, • AWS Security Certification or equivalent cloud security credential, • Scripting languages (e.g., Python, PowerShell, Bash) to support security automation “TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.” Powered by JazzHR tLDHqoxq17

Job DescriptionSenior Cybersecurity Engineer - Compliance & Risk Management The Human Resources Research Organization (HumRRO) is a non-profit leader in developing high-impact services and products in the arenas of employment, military, student testing, and professional credentialing and licensure. We work with federal and state government agencies, private sector organizations, and professional associations. About the Organization As a non-profit, HumRRO is dedicated to work that contributes to science and society. Our employees enjoy a highly collaborative and supportive environment that fosters innovation, ethical practice, and outstanding customer service. Our core operational staff includes Industrial-Organizational Psychologists, Educational Researchers, and Behavioral Science Consultants. We are committed to supporting a diverse workforce and to practicing equity and inclusion for all staff. About the Job We are seeking a Senior Cybersecurity Engineer to lead our enterprise compliance and security programs across federal, state, and private sector engagements. This role manages multiple compliance frameworks including CMMC, FedRAMP, SCRM, NIST 800-171/53, and ISO 27001:2022 regulatory requirements. You will work on compliance standards across hybrid cloud environments while leading a team of junior engineers conducting vulnerability assessments and security scanning operations. A significant portion of this role involves creating security documentation, developing compliance policies, responding to time-critical security requirements from clients, and managing third-party compliance audits. As a Senior Cybersecurity Engineer, you will: • Lead enterprise cybersecurity compliance programs (CMMC, FedRAMP, SCRM, NIST frameworks, ISO 27001:2022), • Manage monthly compliance reporting and KPI dashboards for executive leadership, • Coordinate third-party compliance audits (NIST 800-171, CMMC, ISO 27001, FedRAMP) and remediation activities, • Maintain compliance evidence catalogs and SaaS compliance implementation controls, • Evaluate and implement security controls across software applications and cloud platforms AWS, Azure, and Office 365, • Oversee Risk Management Framework (RMF) processes for government contract organizations as well as applications in the DoD space (ATO/IATT/IATO documentation), • Conduct weekly Plan of Action and Milestone (POA&M) reviews and monthly security assessments, • Develop and maintain security policies, procedures, and technical standards, • Lead vulnerability management programs & conduct security assessments and penetration testing coordination, • Manage business continuity of operations (COOP) program including disaster recovery and crisis management plans, • Lead incident response and security event investigation, • Mentor and manage junior cybersecurity engineers and analysts, • Interface with federal agencies, auditors, and compliance assessors, • Work with system architects for security requirements on existing cloud workloads, cloud migrations and/or hybrid environments, • Facilitate and oversee completion of all customers' cyber security questionnaires and qualifications with time-critical deadlines, • Coordinate with HumRRO Contracts Division on written responses to RFPs regarding IT security, controls, data privacy and regulatory compliance, • Assist with implementation and administration of cybersecurity supply chain risk management (C-SCRM) program, • Develop compliance documentation and security narratives for proposals, • Support business development with technical security expertise, • US Citizen with ability to obtain/maintain security clearance, • Work on-site at Alexandria VA (Up to 2 remote days possible after probation period), • Bachelor's degree in Cybersecurity, Computer Science, or equivalent field. Work experience may be considered in lieu of degree, • 7+ years of cybersecurity engineering and compliance experience, • 5+ years of enterprise experience managing Risk and Compliance efforts including multiple regulatory and standard security frameworks, • Existing Security+ certification or the ability to obtain within 6 months (CISSP, CCSP, or CISM preferred), • Deep expertise in NIST 800-171, 800-53, RMF, and DoD compliance frameworks, • Hands-on experience with CMMC and FedRAMP authorization processes, • Proficiency in Office 365 security configuration and management, • Experience with vulnerability scanning tools (e.g. ACAS, Nessus, Rapid7, Qualys or equivalent), • Strong analytical and information gathering skills with ability to work multiple tasks simultaneously under short deadlines, • Active DoD clearance, • Experience in the nonprofit sector managing IT or related activities, • CMMC Certified Professional (CCP) or CMMC Certified Assessor (CCA), • Experience with FedRAMP 3PAO assessments, • Knowledge of Supply Chain Risk Management (SCRM) frameworks, • AWS certifications (Solutions Architect, Security Specialty preferred), • Experience with DevSecOps pipeline integration and IAC, • CISSP, CCSP, CISM, or CISSP-ISSAP certifications, • Knowledge of DoD STIG implementation and automated compliance tools, • Federal contracting and audit experience, • Experience with Atlassian suite (Jira, Confluence), • Experience with eMASS package development and continuous monitoring activities, • Experience with STIG implementation and SCAP compliance validation, • Experience with bi-annual COOP testing and crisis management plan development, • Leadership experience managing technical teams Benefits: • Health, dental and vision insurance, • Life insurance equal to 2x annual salary, • Retirement plan with company matching, • Paid professional development and certification maintenance, • Tuition reimbursement, • 12 weeks of paid parental leave Named one of "50 Great Places to Work" by Washingtonian magazine and one of "Top Workplaces" by The Washington Post.