Trabajos cybersecurity policy en Cherry Hill, New JerseyCrear alertas

Job Description Type: Full Time Location: Philadelphia, PA Overtime Exempt: Exempt Reports To: ARMADA HQ Travel Required: Yes Security Clearance Required: Active Secret Security Clearance CONTINGENT UPON AWARD*** Duties & Responsibilities: • Specialist, Information Assurance Compliance II (SIAC2) will collect and collate system or site information and use it to evaluate and document in Enterprise Mission Assurance Support Service (eMASS) the security posture of the system or site being Assessed, Authorized, and maintained. Will have access to the unclassified and classified Navy eMASS system., • Develop, submit, and maintain RMF packages in accordance with DoD Instruction 8510.01, NAVSEA Business Rules, DON RMF Process Guides, NAVSEA Standard Operating Procedures (SOPs), and the business rules of cognizant review offices. Should there be any conflicting interpretations, request for clarification/adjudication will be resolved in the Technical Instruction., • Specialist, Information Assurance Compliance II (SIAC2) will develop the RMF package documentation required for submission in accordance with DoD/NAVSEA directives. Some examples include AO Determination Request Package and Checklist, System Platform IT (PIT) Determination, Categorization Form, HW/SW lists, Authorization Boundary Diagrams, Defense in Depth Diagrams, PPSM list, Privacy Impact Assessment (PIA). E-Authentication Questionnaire, System Level Continuous Monitoring Strategy (SLCM), Security Plan (SP), RMF Step SOP checklists, Plan of Actions and Milestones (POA&M), Security Assessment Plan (SAP), Security Technical Implementation Guide (STIG), Alternate Forms of Compliance, Security Assessment Report (SAR), Risk Assessment Report (RAR), Security Authorization Package, Package Endorsement Letters. Products shall be created in the appropriate software (i.e. Microsoft Visio, scanning software, eMASS DISA STIG Viewer, eMASSTER etc.)., • Develop or revise existing policies, plans, and strategy documents to meet requirements for RMF Control Families and ensure all IA requirements have been addressed. Some examples include an Incident Response plan, Contingency plan, Information Assurance Vulnerability Management plan, Configuration Management plan, System Development plan, and Physical Security plan. Evaluate all discrepancies and recommend potential mitigation measures for reducing or eliminating specific risks., • Specialist, Information Assurance Compliance II (SIAC2) will conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks and protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on package content and assessment results and documenting for the Security Controls Assessor's (SCA) and higher level review., • Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities., • Specialist, Information Assurance Compliance II (SIAC2) will develop and maintain in eMASS a Plan of Action and Milestone (POA&M) for all IA-related tasks and deliverables. The POA&M should include findings from required Security Technical Implementation Guides (STIGs), vulnerability test results, automated scan reviews, Assured Compliance Assessment Solution (ACAS) scans, Security Content Automation Protocol (SCAP), Evaluate STIG, and other DoD-mandated assessment-utilities. eMASS shall be utilized to assist in POA&M creation., • Conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate and represent the current risk posture of the system., • Perform analysis of logs, events, and reporting of various data collections tools including: vulnerability monitoring via Assured Compliance Assessment System (ACAS) and related tools, Host Based Security Systems (HBSS), web content filters, Security Information and event management (SIEM), firewall systems, network devices, server devices, workstations, and intrusion detection and prevention systems (ID/PS)., • Specialist, Information Assurance Compliance II (SIAC2) will assess impacts from observed risks and report via the Cybersecurity Program chain of command., • Executing Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities., • Specialist, Information Assurance Compliance II (SIAC2) will perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution., • Present and submit data to management, develop reports, and produce procedural documentation in a comprehensive and cohesive manner., • Specialist, Information Assurance Compliance II (SIAC2) will develop and update, at frequency specified in each package, all required eMASS documents, to include Plan of Actions and Milestones (POA&Ms)/ Risk Assessment Reports (RARs) and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs); products shall be created in the appropriate software (i.e. Microsoft Visio, scanning software, eMASS DISA STIG Viewer, etc.), • Determine a system's compliance with all applicable Controls and Assessment Procedures (APs) for an assigned DoN system, including developing the appropriate test procedures, if necessary; executing the test procedures; and accurately documenting the results of security The analysts shall update the eMASS record for the assigned system(s)., • Track deliverables and action items in accordance with A&A guidance., • Specialist, Information Assurance Compliance II (SIAC2) will manage, attend, and support configuration control board practices., • Ensure RMF artifacts are in compliance with published Navy, NAVSEA Business Rules (OPNAV N2N6 and/or NAVSEA), NIST SP-800-37 and SP-800-53 Rev 4. In addition, local NSWCPD policies and procedures may apply. Command Information System Security Manager (ISSM) will resolve any conflicting interpretations., • Specialist, Information Assurance Compliance II (SIAC2) will write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms. Support the development of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation., • may be required to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). The estimated number of trips is 14 per year (estimated 25%-30% travel)., • Ability to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe)., • Proficient in Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum)., • Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance., • Possess excellent organizational and file management skills and the ability to plan and execute administrative work with little supervision., • Minimum of one (1) IAT Level II listed certificate required:, • CompTIA Security+ (CE), • CompTIA CySA+, • GIAC Security Essentials (GSEC) The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Duties • You will act as a senior scientist/engineer in a technical organization performing work requiring application of advanced scientific or engineering theories and techniques and the modification and extension of theories, precepts and practices., • You will apply engineering and scientific theories and principles involving design, construction and operation of computer/digital technology-based systems., • You will perform software development and support toward the goal of a secure Information Technology (IT) system and to integrate devices into a distributed yet secure ship system., • You will develop, design, test, evaluate and maintain computer/digital technology-based hardware, and software-based systems in an integrated manner, to insure systems engineering., • You will research into technological areas related to engineering of hardware and software solutions and analyze system specific detail requirements and conceptual design of a total system., • You will be responsible for the design and development of the Landing Platform Dock (LPD) machinery control systems throughout the full software development lifecycle that support the technology area of Hull, Mechanical, and Electrical controls.\nRequirements Conditions of employment • Must be a US Citizen., • Must be determined suitable for federal employment., • Must participate in the direct deposit pay program., • New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov, • Generally, current federal employees applying for GS jobs must serve at least one year at the next lower grade level. This requirement is called time-in-grade. Time-in-grade requirements must be met by the closing date of this announcement., • Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326., • Males born after 12-31-59 must be registered for Selective Service., • You will be required to obtain and maintain an interim and/or final security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal., • This is a Cyberspace Workforce position, work role code 621, proficiency level Advanced the incumbent is required to obtain and maintain qualifications in DoDM 8140.03 Cyber Workforce Qualification and Department of Navy policies., • This position is covered under the Defense Acquisition Workforce Improvement Act (DAWIA). Certification in the Acquisition Functional Area and category assigned to the position is required within established category timeframes., • This position may require travel from normal duty station to CONUS and OCONUS and may include remote or isolated sites. You must be able to travel on military and commercial aircraft for extended periods of time.\nQualifications Your resume must demonstrate at least one year of specialized experience at or equivalent to the GS-13 grade level or pay band in the Federal service or equivalent experience in the private or public sector demonstrating technical leadership in the strategic planning, full lifecycle management (SDLC), and delivery of complex software-intensive programs; managing real-time machinery control systems, encompassing the leadership of cross-functional teams through requirements analysis, new development, and in-service sustainment using modern Agile and DevSecOps methodologies; and managing complex system integration across software, hardware, and external vendor interfaces while successfully implementing Risk Management Framework (RMF) cybersecurity controls for embedded environments. Additional qualification information can be found from the following Office of Personnel Management website: AND Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. Education Applicants must meet the following basic education requirements of the Office of Personnel Management (OPM) Qualifications Standards Manual: Education Requirements for 08XX Series Successful completion of a professional engineering degree. To be acceptable, the program must: (1) lead to a bachelor's degree (or higher) in a school of engineering with at least one program accredited by the Accreditation Board for Engineering and Technology (ABET); or (2) include differential and integral calculus and courses (more advanced than first-year physics and chemistry) in five of the following seven areas of engineering science or physics: (a) statics, dynamics; (b) strength of materials (stress-strain relationships); (c) fluid mechanics, hydraulics; (d) thermodynamics; (e) electrical fields and circuits; (f) nature and properties of materials (relating particle and aggregate structure to properties); and (g) any other comparable area of fundamental engineering science or physics, such as optics, heat transfer, soil mechanics, or electronics. Such education must demonstrate the knowledge, skills, and abilities necessary to do the work of the position. OR Current registration as an Engineer Intern (EI), Engineer in Training (EIT), or licensure as a Professional Engineer (PE) by any State, the District of Columbia, Guam, or Puerto Rico. Absent other means of qualifying under this standard, those applicants who achieved such registration by means other than written test (e.g., State grandfather or eminence provisions) are eligible only for positions that are within or closely related to the specialty field of their registration For more information about EI and EIT registration requirements, please visit the National Society of Professional Engineers website at: OR Evidence of having successfully passed the Fundamentals of Engineering (FE) examination or any other written test required for professional registration by an engineering licensure board in the various States, the District of Columbia, Guam, and Puerto Rico The FE examination is not administered by the U. S. Office of Personnel Management. For more information, please visit: . OR Successful completion of at least 60 semester hours of courses in the physical, mathematical, and engineering sciences and in engineering that included the courses specified in the basic requirements under paragraph A (above). The courses must be fully acceptable toward meeting the requirements of an engineering program as described in paragraph A (above) OR Successful completion of a curriculum leading to a bachelor's degree in an appropriate scientific field, e.g., engineering technology, physics, chemistry, architecture, computer science, mathematics, hydrology, or geology, may be accepted in lieu of a bachelor's degree in engineering, provided the applicant has had at least one year of professional engineering experience acquired under professional engineering supervision and guidance. Ordinarily, there should be either an established plan of intensive training to develop professional engineering competence, or several years of prior professional engineering-type experience, e.g., in interdisciplinary positions. Education Requirements for 1550 Series Bachelor's degree in computer science or bachelor's degree with 30 semester hours in a combination of mathematics, statistics, and computer science. At least 15 of the 30 semester hours must have included any combination of statistics and mathematics that included differential and integral calculus. All academic degrees and course work must be from accredited or pre-accredited institutions. Additional information This position is covered by the Department of Defense Priority Placement Program. Additional vacancies may be filled by this announcement. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. During the application process you will have the ability to opt-in to make your resume available to hiring managers in the agency who have similar positions in the local commuting area. Depending on the hiring organization and the position being filled, job requirements (e.g., security clearance, travel, drug testing, financial disclosure filing, bargaining unit status, etc.) may vary. Other hiring managers filling similar positions may offer relocation expense reimbursement and/or may offer recruitment incentives for new employees, depending on funding availability and in accordance with policy. If you opt-in and are referred on a certificate, your resume will be available to other hiring managers for 180-days from the date the job announcement closes. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: PPP applicants will be placed at the FPL, if determined Well Qualified (WQ). To receive priority consideration, the FPL must be the same grade level or equivalent of the retained grade or the grade held immediately prior to separation ICTAP Applicants: To be considered well-qualified and exercise selection priority as an ICTAP candidate, displaced Federal employees must satisfy all qualification requirements for the position and receive a rating in the highly qualified category (score 85) or higher. ICTAP candidates must provide copies of all of the following documentation at the time of application: 1) agency notice; 2) most recent performance appraisal; and 3) most recent SF-50 or notification of personnel action that includes position, grade level, and duty location. Applicants who do not provide this documentation will not receive consideration as an ICTAP candidate. For more information about ICTAP eligibility please review the following link: Military Spouse Preference applicants will be placed at the highest grade for which they have applied and are determined Best Qualified (BQ). A BQ military spouse possesses knowledge, skills, abilities, and competencies comparable to others who meet the competitive referral criteria for the specific position. Certain incentives (such as Recruitment, Relocation or Student Loan Repayment) may be authorized to eligible selectees. A relocation incentive is generally a single payment intended to offset some of the relocation costs experienced by the selectee. A relocation incentive may be authorized

Company Overview: Business Integration Partners (BIP) is Europe’s fastest growing digital consulting company and are on track to reach the Top 20 by 2030, with an expanding global footprint in the US (New York, Philadelphia, Boston, Charlotte, Chicago, Houston). Operating at the intersection of business and technology we design, develop, and deliver sustainable solutions at pace and scale creating greater value for our customers, employees, shareholders, and society. BIP specializes in high-impact consulting services across multiple industries with 6,000 employees worldwide. Our industry domains include Life Sciences, Financial Services, Energy, and Retail, supplemented with Data & AI, Cybersecurity, Risk & Compliance, Change Management and Digital Transformation practices. We integrate deep industry expertise with business, technology, and quantitative disciplines to deliver high-impact results for our clients. BIP is currently expanding its footprint in the United States, focusing on growing its Life Sciences business within global pharmaceuticals and biotechnology. Our teams operate at the intersection of business strategy, technology, and data to help our clients in driving smarter decisions, reducing risks, and staying ahead in a fast-evolving market environment. Specific Opportunity: BIP US is seeking to grow its US consulting team and is looking for a Senior Consultant or Manager with 3 to 10 years of professional management consulting or industry experience within the pharmaceutical, biotechnology, or life sciences industries to join our US consulting team. What you will be doing: • Working with internal teams and clients across different aspects of life sciences such as Global Pharma and Biotech., • Collaborating with Bip US and BIP Global team members on mixed projects of variable size., • Applying your multiple skills such as: process design, content writing, vendor/ stakeholder management IT, or data management in coordination with your life sciences subject matter knowledge in areas like: Regulatory Compliance, Manufacturing, Supply Chain, Clinical Trials, Laboratory Management, Submission, or Quality Systems., • Engaging in internal initiatives, communities, Centers of Excellence, and intellectual capital development., • Engaging with BIP US colleagues through networking, coaching, and mentoring to further the organization’s, and your professional, goals., • Seeking business development opportunities through your client exposure, supporting proposals and other client engagement efforts across the team. Requirements: • Minimum 3-10 years in an external client facing role as a Consultant or other relevant experience., • Industry experience in Pharmaceuticals, Biotechnology, or Life Sciences., • Strong investigative, analytical, interpersonal, and communication (verbal, written and listening) skills., • Exposure to aspects of the pharmaceutical/life sciences value chain noted above., • Experience in process design, content writing, IT, or data science., • Ability to work independently as well as in teams., • Experience presenting and preparing/facilitating workshops., • A team-oriented, inclusive mindset and ability to work with a wide range of individuals., • Strong stakeholder management and consensus building skills., • A flexible approach to work with a focus on delivery to deadlines and high standards., • An eye for new project opportunities, new revenue streams and ways of working, as well as turning new ideas into reality., • Bachelor’s degree in science, engineering, computer science, business, or a related field. An advanced degree is desirable. The base salary range for this role is $110,000-$160,000 Benefits: • Choice of medical, dental, vision insurance., • Voluntary benefits., • Short- and long-term disability., • HSA and FSAs., • Matching 401k., • Discretionary performance bonus., • Employee referral bonus., • Employee assistance program., • 11 public holidays., • 20 days PTO., • 7 Sick Days., • PTO buy and sell program., • Volunteer days., • Paid parental leave., • Remote work environment with ability to travel to office as needed. For more information about BIP US, visit ___. It is BIP US Consulting policy to provide equal employment opportunities to all individuals based on job-related qualifications and ability to perform a job, without regard to age, gender, gender identity, sexual orientation, race, color, religion, creed, national origin, disability, genetic information, veteran status, citizenship, or marital status, and to maintain a non-discriminatory environment free from intimidation, harassment or bias based upon these grounds. BIP US provides a reasonable range of compensation for our roles. Actual compensation is influenced by a wide array of factors including but not limited to skill set, education, level of experience, and knowledge.

Management and Engineering Technologies International (METI) is looking for a Sr Information Systems Security Engineer to work alongside the Naval Surface Warfare Center Philadelphia Division to support an active Naval Surface Warfare Center Philadelphia Division (NSWCPD) contract in Philadelphia, PA. Under direct supervision, the candidate will assist in the implementation and maintenance of databases tracking inventory, product life cycle, preventive maintenance schedule, and customer service requests. The candidate will continuously monitor database performance and identify improvements. Support and supervise documentation of configuration change management procedures. Duties: • Complies with the responsibilities established in Section 2.6 of DoDEA Administrative, • Instruction 8500.01 and Section 2.c.(2)(d) of Enclosure 4 of DoD Instruction 8510.01., • Maintains and reports IT/PIT assessment and authorization status and issues, • Provides oversight of ISSOs to ensure that they are following established cybersecurity policies and procedures, in accordance with DoD Instruction 8500.01., • Monitors compliance with cybersecurity policy, as appropriate, and reviews the results of such monitoring., • Supports the ISO on the continuous monitoring security control assessment procedures to complete security responsibilities., • Ensures annual security control assessments are performed and the results entered into eMASS., • Ensures all users have the requisite security clearances and access authorization and are aware of their cybersecurity responsibilities for DoD IS under their purview before being granted access to those systems., • Ensures that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations., • Acts as the primary cybersecurity technical advisor to the AO for DoD IT/ PIT systems under their purview., • Ensure CM policies and procedures for authorizing the use of hardware/software on an IS are followed. Any additions, changes or modifications to hardware, software, or firmware must be coordinated with the appropriate AO prior to the addition, change or modification., • Maintain a working knowledge of system functions, security policies, technical security safeguards, and operational security measures., • Manage, maintain, and execute the information security continuous monitoring plan., • Ensure a record is maintained of all security-related vulnerabilities and ensure serious or unresolved violations are reported to the AO/DAO; and Assess changes to the system, its environment, and operational needs that could affect the security authorization., • Develop concept of operations for new systems., • Develop and maintain a formal IS security program and policies for their assigned area of responsibility., • Provide technical and procedural Information System (IS) Security advice to government and industrial teams., • A Bachelor's degree from an Accredited University., • Pursuant to the Government Contract, you must be a U.S. Citizen., • CNSSI 4012 or 4013 or 4014 or 4015 or 4016 Certificate or NDU CISO certificate or CCNA or CAP or Security + (CE), ENSA or DoD 8570 IAM II certification., • Active Department of Defense SECRET clearance required., • Four (4) years professional experience in Sr Information Systems Security Engineering.

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

Job Description Type: Full Time Location: Philadelphia, PA (Travel - CONUS locations, less than 5%) Overtime Exempt: Yes Reports To: ARMADA HQ Security Clearance Required: Active Secret CONTINGENT UPON AWARD*** Duties & Responsibilities: • The Information Systems Security Engineer III (ISSE III) shall assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M)., • The Information Systems Security Engineer III shall execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)., • The Information Systems Security Engineer III shall identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary., • The ISSE III shall perform Ports, Protocols, and Services Management (PPSM)., • The ISSE III shall perform IT and CS vulnerability-level risk assessments., • The ISSE III shall execute security control testing as required by a risk assessment or annual security review (ASR)., • The ISSE III shall mitigate and remediate IT and CS system level vulnerabilities for all assets withing the boundary per STIG requirements., • The ISSE III shall develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS)., • The ISSE III shall develop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs., • The ISSE III shall implement and assess STIG and SRGs., • The ISSE III shall perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG., • The ISSE III shall deploy security updates to Information System components., • The ISSE III shall perform routine audits of IT system hardware and software components., • The ISSE III shall maintain inventory of Information System components., • The ISSE III shall participate in IT change control and configuration management processes., • The ISSE III shall upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM)., • The ISSE III shall image or re-image assets that are part of the assigned RMF boundary, • The ISSE III shall install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets., • The ISSE III shall assist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary., • The ISSE III shall provide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management., • The ISSE III shall support configuration change documentation and control processes and maintaining DOD STIG Compliance., • The ISSE III shall support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware., • The ISSE III shall report compliance issues of network hardware to management., • Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance. The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job Description Type: Full Time Location: Philadelphia, PA Overtime Exempt: Exempt Reports To: ARMADA HQ Travel Required: Yes Security Clearance Required: Active Secret Security Clearance CONTINGENT UPON AWARD*** Duties & Responsibilities: • Systems Administrator II (SA2) will perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution., • Present and submit data to management, develop reports, and produce procedural documentation in a comprehensive and cohesive manner., • Systems Administrator II (SA2) will manage, attend, and support configuration control board practices., • Apply system configuration changes and software application updates (patches) as required by automated security assessment tools. When software modification is required to execute tasks specified herein, a software version description shall be provided in accordance with CDRL A003., • Consider Operational Mission Requirements when applying system configuration changes and work with system owner(s) to develop and execute plans and procedures to secure the system against cybersecurity threats to the greatest extent possible while providing continuous capability to conduct mission requirements., • Systems Administrator II (SA2) will develop and enhance Operating Procedures, Process Guides, User Agreements, and system-level RMF Control Family Plans and Procedures specific to operating system configuration settings and capabilities., • Identify, present and implement improvements to operating system configuration settings to maintain a secure operating system., • Systems Administrator II (SA2) will provide expert subject matter knowledge of the following operating systems: Windows 11, Windows 10, Windows 7, Windows XP, Windows 2000, Windows CE 6.0, and multiple versions of Red Hat Enterprise Linux., • Create and verify the accuracy of POA&Ms/RARs as identified by vulnerability actual test results;, • Ensure information systems are operated, used, maintained, and disposed of in accordance with security policies and practices as required by the authorization package and NSWCPD., • Systems Administrator II (SA2) will test system to verify adequate functionality for mission or project requirements., • Systems Administrator II (SA2) may be required to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). The estimated number of trips is 14 per year (estimated 25%-30% travel)., • Ability to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe)., • Proficient in Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum)., • Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance., • Possess excellent organizational and file management skills and the ability to plan and execute administrative work with little supervision., • Minimum of one (1) IAT Level II listed certificate required:, • CompTIA Security+ (CE), • CompTIA CySA+, • GIAC Security Essentials (GSEC) The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job Description Type: Full Time Location: Philadelphia, PA (Travel - CONUS locations, less than 5%) Overtime Exempt: Yes Reports To: ARMADA HQ Security Clearance Required: Secret CONTINGENT UPON AWARD*** Duties & Responsibilities: • The Information Systems Security Engineer II (ISSE II) shall assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M)., • The Information Systems Security Engineer II shall execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)., • The Information Systems Security Engineer II shall identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary., • The ISSE II shall perform Ports, Protocols, and Services Management (PPSM)., • The ISSE II shall perform IT and CS vulnerability-level risk assessments., • The ISSE II shall execute security control testing as required by a risk assessment or annual security review (ASR)., • The ISSE II shall mitigate and remediate IT and CS system level vulnerabilities for all assets withing the boundary per STIG requirements., • The ISSE II shall develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS)., • The ISSE II shall develop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs., • The ISSE II shall implement and assess STIG and SRGs., • The ISSE II shall perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG., • The ISSE II shall deploy security updates to Information System components., • The ISSE II shall perform routine audits of IT system hardware and software components., • The ISSE II shall maintain inventory of Information System components., • The ISSE II shall participate in IT change control and configuration management processes., • The ISSE II shall upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM)., • The ISSE II shall image or re-image assets that are part of the assigned RMF boundary, • The ISSE II shall install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets., • The ISSE II shall assist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary., • The ISSE II shall provide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management., • The ISSE II shall support configuration change documentation and control processes and maintaining DOD STIG Compliance., • The ISSE II shall support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware., • The ISSE II shall report compliance issues of network hardware to management., • Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance., • Ability to develop and implement information assurance guidance and execute ISS functions with little to no supervision., • Bachelor's degree in computer science, information technology, or an equivalent technical degree from an accredited college or university. Disclaimer: The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs. ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job DescriptionKinaras Solutions is recruiting pre-award for Information System Security Engineer (ISSE) III Position Overview The Information System Security Engineer (ISSE) III will serve as a senior cybersecurity engineering professional in direct support of the Naval Surface Warfare Center Philadelphia Division (NSWCPD), as part of the Information Technology Operations Division. This position is responsible for providing comprehensive cybersecurity engineering and Risk Management Framework (RMF) services across complex Navy and DoD information systems and networks. Key Responsibilities • Lead and perform security engineering and integration activities for Navy IT., • Develop, document, and maintain RMF artifacts such as System Security Plans (SSPs), Security Assessment Reports, Plans of Action and Milestones (POA&Ms), and hardware/software inventories., • Conduct security categorization, security controls selection and implementation, vulnerability and risk assessments., • Plan and execute security testing, continuous monitoring, configuration management, and audit readiness for assigned systems., • Apply and validate Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and other relevant DoD/Navy cybersecurity compliance standards., • Identify, document, and mitigate cybersecurity vulnerabilities. Lead vulnerability scanning, analysis, remediation, and compliance activities., • Coordinate and support Assessment and Authorization (A&A) efforts, including obtaining and sustaining Authorizations to Operate (ATO), Interim Authorizations to Test (IATT), and support for POA&Ms., • Develop and update IA and cybersecurity policy and procedure documentation. Participate in the creation of program plans, quality assurance processes, and technical reports., • Advise and collaborate with cross-functional project teams and government stakeholders to implement secure solutions and resolve RMF, audit, and operational security issues., • Provide technical mentorship and guidance to junior ISSEs and supporting personnel., • Ensure that all security engineering activities and deliverables support CDRL/reporting and DoD accountability requirements., • Remain current with changes in DoD, DoN, and NAVSEA cybersecurity/IA regulations, policies, and technology.Required Qualifications, • Education: Bachelor’s degree in Computer Science, Information Technology, STEM, or a closely related technical field. (Relevant experience may substitute for education requirements per contract terms.), • Experience: Minimum of 7 years’ experience in information system security, cybersecurity engineering, or IA roles, including demonstrated experience with systems of similar complexity and sensitivity as those described in the SOW., • Certification: Must possess and maintain a DOD 8570.01-M IAT Level III baseline certification (e.g., CISSP, CASP+ CE, CCNP Security, CISA, GCED, or GCIH)., • Clearance: Must have an active secret security clearance, • Knowledge & Skills:, • Proven experience implementing the DoD Risk Management Framework (RMF) for IT systems, including RMF Step 1–6 activities, eMASS, and supporting A&A., • Detailed understanding of NIST, DoD, DoN, and NAVSEA cybersecurity policies, security controls, and audit requirements., • Strong technical expertise in vulnerability assessment, configuration/patch management, compliance testing, continuous monitoring, and cybersecurity documentation., • Proficiency with security management tools, vulnerability scanning platforms (e.g., ACAS, Nessus), and familiarity with cloud, virtualization, and modern network architectures., • Exceptional written and verbal communication skills, including the ability to develop technical documents and briefings for diverse audiences., • Desired Qualifications, • Advanced degree in a relevant discipline., • Prior experience supporting Navy/DoD agencies or shipboard system cybersecurity., • Familiarity with eCRAFT, WAWF, and other DoD reporting/management tools., • Experience leading teams through system ATO processes and CDRL deliverable preparation., • Location: NSWCPD Philadelphia, PA; with occasional travel possible as required by the program. Kinaras Solutions, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, protected veteran status, disability status, or any other characteristic protected by federal, state, or local law. We are committed to fostering a diverse and inclusive workplace. If you require a reasonable accommodation to apply for a position or to participate in the application or interview process, please contact . Applicants selected may be subject to a background investigation and must meet eligibility requirements for access to classified information or employment as a contractor assigned to the U.S. government, as required. Powered by JazzHR 1fqWhtbJWA

Job Description Data Analyst - Government Contract - Philadelphia, PA Position Description Detail-oriented Data Analyst will support federal government client by analyzing and interpreting complex datasets that drive decision-making and improve operational efficiency[CC1] within an acquisitions/procurement environment in the Philadelphia area. Must develop, analyze, evaluate, and recommend actions that improve the efficiency of internal administrative and operational performance metrics. Must have strong analytical skills, experience working with government data, and the ability to translate findings into actionable documents/directives. Must plan, analyze and evaluate the effectiveness of client’s programs using available metrics, and using Microsoft Power BI or other data visualization tools, automate existing reports that currently involve manual inputs. Required Skills · Experience in data analysis, preferably working on federal government projects. · Proficiency in use and troubleshooting of data analytics tools and applications. · Proficiency with Microsoft 365 tools (e.g., Power BI, Teams, SharePoint, OneDrive) is essential. · Strong problem-solving skills and attention to detail. · Ability to communicate complex data findings to technical and non-technical stakeholders. Desired Skills · Experience with federal government contracting and procurement. · Knowledge of compliance and security standards for handling government data. · Advanced data modeling and forecasting skills. · Regulatory and compliance knowledge, including data governance and privacy. · Familiarity with laws that govern data management in the federal government. · Cybersecurity and risk assessment, which includes understanding of data security measures, encryption, and access controls. · Use data-driven insights to support policy development and operational efficiency. · Ability to collaborate with agency officials, public policy teams, and external partners. · Translating complex data findings into actionable recommendations for decision-makers. · Microsoft Excel, including VBA scripting, and/or Tableau. Job Duties · Evaluate working effectiveness and suitability of client’s programs, divisions, and systems using test methods aimed at (1) identification of defects, gaps, areas of risk; (2) measurement of the adequacy of the output; and (3) assessment of the reliability of the operations. · Prepare recommendations to mitigate risk and close gaps and improve overall effectiveness or efficiency. · Support the implementation of new processes, program, systems and national coordination efforts. · Improve decision-making through implementation of business intelligence. · Support the identification and collection of key performance indicators to monitor routinely for operational effectiveness Drive efficiencies and process changes to address information developed from performance indicators and operational data. · Review data currently available to client and determine the frequency and means of collection. · Recommend and support implementation of new collection methodologies, expanding and consolidating data requirements and analysis capabilities. · Prepare reports (briefings, white papers, decision papers, and memoranda) on business process improvements and activities as needed, to ensure the appropriate integration into client’s operations. · Research and analyze data quality and make actionable recommendations to improve · Identify systemic problems, develop and recommend corrective actions, and monitor progress of corrections, requiring involvement of client leadership. · Create standard and ad-hoc reports using databases and reporting tools for client and external organizations. · Work independently, handle complex tasks, and may help guide junior staff. Experience and Education Qualifications Work Location · On-site full-time in Philadelphia, Pennsylvania, five days a week. Security Clearance Requirements · U.S. Citizenship (Required). · Must be able to pass Information Technology Tier 1 or 3 background investigation. Company DescriptionAXIS Management Group, LLC (AXIS), formed in 2008 with headquarters in McLean, VA, is a strategic consulting firm providing a range of integrated technical services and solutions to federal agencies and programs in Information Technology, Programmatic Support, and the Environmental/Health Sciences.AXIS Management Group, LLC (AXIS), formed in 2008 with headquarters in McLean, VA, is a strategic consulting firm providing a range of integrated technical services and solutions to federal agencies and programs in Information Technology, Programmatic Support, and the Environmental/Health Sciences.

Job Description Global Resource Solutions, Inc. (GRS) is seeking an enthusiastic, motivated, detail orientated, and talented individual for the position of Information System Security Engineer III. Job Description: Summary: The Information System Security Engineer (ISSE) III, is primarily responsible for conducting information system security engineering activities with a focus on lifecycle of current systems and future requirement scoping. The position will collect and process the captured information security requirements and ensures that the requirements are effectively integrated into information systems through purposeful security architecting, design, development, and configuration. The position is an integral part of the development team designing and developing organizational information systems or upgrading legacy systems. The ISSE employs best practices when implementing security requirements within an information system including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques. This position’s main function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.. Essential Duties & Responsibilities: • Lead a team of System Security Engineers and Certification and Accreditation Analysts responsible for ensuring the customers national and international security interests are protected as support equipment are designed and tested, • Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP network infrastructures, • Builds IA into systems deployed to operational environments, • Assists architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of DoD and other agencies security policy and enterprise solutions, • Enforce the design and implementation of trusted relations among external systems and architectures., • Assesses and mitigates system security threats/risks throughout the program life cycle, • Thinks independently and demonstrates exceptional written and oral communications skills., • Applies advanced technical principles, theories, and concepts, • Contributes to the development of new principles, concepts, and methodologies, • Works on unusually complex technical problems and provides highly innovative and ingenious solutions, • Lead a team of System Security Engineers and Certification and Accreditation Analysts responsible for ensuring the customers national and international security interests are protected as support equipment are designed and tested, • Review ISSE related designs and provides security compliance recommendations, • Leads technical teams in implementation of predetermined long-range goals and objectives, • Supports customer and SAP community IA working groups, participate in SSE IPT reviews, • Provides expert level consultation and technical services on all aspects of Information Security, • Review ISSE related designs and provides security compliance recommendations, • Develop and provide IA risk management recommendations to the customer, • Provide ISSE support for Mission and Training systems design and development, • Assist with development and maintenance of the Program Protection Plan, • Assist with site activation activities and design reviews, • Represent the customer in various ISSE related working groups, advisory groups, and advisory council meetings, • Chair and or Co-Chair customer and SAP community IA working groups, participate in ISSE IPT reviews, • Represent the customer in various SSE related working groups, advisory groups, and advisory council meetings, • Integrate COTS & GOTS products to collect, display and remediate a variety of automated system security and system operations/performance functions and metrics, • Perform security assessments of servers/network devices/security appliances, • Develop improvements to security assessments with regard to accuracy and efficiency, • Integrate ancillary monitoring tools/capabilities with the enterprise security information and event management (SIEM) and create/tailor complex event alarms/rules and summary reports, • Write and execute cybersecurity test procedures for validation of control compliance, • Monitor/analyze output of cybersecurity related tools for reportable security incidents and residual risk, • Analyze technical risk of emerging cybersecurity tools and processes, • Work as part of a security incident response team as needed, • Build operational Operations and Maintenance (O&M) checklists to maintain the service (daily, weekly, monthly, yearly O&M checklists); build Tactics, Techniques and Processes (TTPs) and Standard Operating Processes (SOPs) associated with service checklists, • Fifteen (15)+ years related experience, • Bachelor’s Degree in a related area or equivalent experience (Four (4) years), • Prior performance in roles such as ISSO, ISSM, SCA, or SAP IT Technical Director; SAP experience;, • Current Top Secret Clearance with SCI Eligibility, • Eligibility for access to Special Access Programs, • Ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel and industry partners, • Working knowledge of Microsoft Office (Word, PowerPoint, and Excel), • Possess a high degree of originality, creativity, initiative requiring minimal supervision, • Must be familiar with security policy/manuals and the appropriate DCIDs/JAFANs and other guiding policy documents Communication: Excellent customer service via phone and face to face conversation, excellent written and oral command of English. GRS is an Equal Opportunity Employer. GRS will continue to abide by obligations under VEVRRA and Section 503 physical or mental disability, protected veteran status, or any other characteristics that are protected by law.

Job Description The Policy Executive / Strategic Planner will support the Naval Surface Warfare Center in Philadelphia, PA, by creating and maintaining technical documentation, including policies, procedures, strategic plans, and cybersecurity documentation. The ideal candidate will be responsible for writing clear, concise, and accurate technical content, ensuring that documentation meets high standards and aligns with the needs of the organization and its stakeholders. Additionally, the Technical Writer will present technical documents and strategic plans to executives, facilitating effective communication across teams. **This is an upcoming opportunity contingent on contract award. Key Responsibilities: • Write and update policies, technical documents, strategic plans, designs, cybersecurity operations, and procedures., • Collaborate with subject matter experts (SMEs) to gather information and ensure technical accuracy in documentation., • Review and revise existing documents to ensure they remain up to date and compliant with organizational standards., • Develop and maintain clear and accessible documentation that supports both technical and non-technical stakeholders., • Present and explain policies, technical documents, and strategic plans to senior executives and leadership teams., • Ensure documentation meets security, compliance, and regulatory requirements, particularly related to cybersecurity., • Work with cross-functional teams to align content and streamline documentation processes., • Bachelor's degree in computer science, information technology, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university., • Eight (8) years' experience with writing policies, technical documents, strategic plans, designs, cybersecurity operations and procedures, as well as presenting and explaining those products to executives., • Prior experience supporting Navy programs., • Ability to translate complex technical information into clear, easy-to-understand content for diverse audiences., • Strong verbal and written communication skills, with the ability to present technical information to both technical and non-technical audiences., • Knowledge of cybersecurity operations and relevant security standards., • Proficient with technical writing tools and software, such as Microsoft Office Suite, Adobe Acrobat, or similar tools., • Experience working in a military or government environment., • An active Secret clearance is required., • Must be a United States Citizen and pass a background check., • Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s). Axiom offers competitive compensation packages including comprehensive medical/dental/life insurance and matching 401(k) contribution. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c) Job Posted by ApplicantPro

Job DescriptionISSOEmployment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you’ll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. - Maintain responsibility for managing cybersecurity risk from an organizational perspective. - Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.- Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies.- Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO).- Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes.- Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF.- Provide subject matter expertise for cyber security and trusted system technology. - Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems.- Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. - Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring.- Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications:- Bachelor’s Degree.- A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc.- eMASS experience.- Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.- Strong desktop publishing skills using Microsoft Word and Excel.- Experience with industry writing styles such as grammar, sentence form, and structure.- Ability to multi-task in a deadline-oriented environment. Ideally, you will also have:- CISSP, CASP, or a similar certificate is preferred.- Master's Degree in Cybersecurity or related field.- Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking.- Demonstrated ability to work well independently and as a part of a team.- Excellent work ethic and a high commitment to quality. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.Health, Dental, and VisionLife Insurance401kFlexible Spending Account (Health, Dependent Care, and Commuter)Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description **This is an upcoming opportunity contingent on contract award. The Information System Security Manager (ISSM III) is responsible for overseeing the Navy's cybersecurity program implementation and ensuring compliance with Department of Defense (DoD), Department of the Navy, and NAVSEA cybersecurity requirements. This role involves leadership in developing and managing cybersecurity strategy, personnel, and policies to maintain the confidentiality, integrity, and availability of Navy information systems. The ISSM III serves as the senior cybersecurity lead responsible for implementing, enforcing, and maintaining the Navy's cybersecurity strategy. They manage the day-to-day operations of the information security program, ensuring compliance with DoD and Navy directives. The role also includes overseeing system accreditation, certification, and Risk Management Framework (RMF) processes, coordinating with Navy leadership, program managers, and IT stakeholders to integrate cybersecurity into operations and acquisitions. REQUIREMENTS: Target Education: Master's degree in computer science, information technology, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university. Target Experience: Eight (8) years of experience coordinating with various levels of an organization to oversee and manage information security program implementation within the organization or other area of responsibility. Must have managed cyber strategy, personnel, infrastructure, policy enforcement, emergency planning, security awareness, and/or other resources. Navy experience a plus! Must have at least ONE of the Certification below: • CAP, • CASP+ CE, • CISM, • CISSP (or Associate), • GSLC, • CCISO PLACE OF PERFORMANCE • The contractor's primary place of performance shall be at government facilities in Philadelphia, PA. It is estimated that 89% of the work will occur on-site at the NSWCPD facility and 11% of the work will occur off-site at the contractor facility., • Secret or TS with SSBI Investigation, or TS/SCI Axiom offers competitive compensation packages including comprehensive medical/dental/life insurance and matching 401(k) contribution. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c) Job Posted by ApplicantPro

Job Description The PCRB IT internship will allow you to apply skills and knowledge you have learned in school, while contributing to company projects and playing a key role within the IT department. Our company will provide you hands-on experience to fit your career objectives, evolve and complement your academic studies and help grow your knowledge base. The paid internship runs for approximately 7-10 weeks throughout the summer beginning in early June through end of August. We are looking for a motivated and technically curious IT Infrastructure Intern to join our IT team. In this role, you will gain hands-on experience supporting our organization’s day-to-day technology operations, including Microsoft Azure cloud services, on-premise network infrastructure, end-user device management, networking, security, and data analysis. You will work alongside experienced IT professionals, contributing to real projects while building foundational skills across the full IT infrastructure landscape. Key Responsibilities Cloud & Azure • Assist in the administration and monitoring of Microsoft Azure environments, including virtual machines, storage accounts, and resource groups., • Support Azure Active Directory (Entra ID) user and group management, including role assignments and access reviews., • Assist with cloud resource provisioning, decommissioning, and cost monitoring under the guidance of senior engineers., • Help maintain Azure-based policies and compliance configurations. End-User Device Support • Perform hands-on setup, configuration, imaging, and maintenance of Windows PCs and laptops., • Troubleshoot and resolve hardware and software issues for end users in a timely manner., • Maintain accurate records of device inventory, lifecycle status, and asset assignments., • Assist in deploying software updates, patches, and endpoint configurations via management tools. Networking & Security • Support the monitoring and maintenance of network infrastructure, including switches, routers, and wireless access points., • Apply basic networking concepts (TCP/IP, DNS, DHCP, VLANs) to assist with troubleshooting and documentation., • Follow established IT security policies and best practices, including access control and incident response procedures., • Assist with user access management and contribute to security awareness initiatives. Scripting & Automation • Write and maintain PowerShell scripts to automate repetitive IT tasks such as user provisioning, reporting, and system monitoring., • Assist in developing automation workflows to improve operational efficiency across IT processes., • Document scripts and automation solutions for team knowledge sharing. Data Analysis & Reporting • Use Microsoft Power BI to create and maintain dashboards and reports that provide visibility into IT operations metrics., • Assist in gathering, cleaning, and visualizing data from infrastructure systems to support data-driven decision making., • Collaborate with stakeholders to understand reporting requirements and deliver actionable insights. Microsoft 365 & Productivity Tools • Provide support for Microsoft 365 applications including Teams, Outlook, SharePoint, OneDrive, and Exchange Online., • Assist with M365 tenant administration including license management, permissions, and policy configuration., • Help users resolve issues with M365 productivity tools and document resolutions for the knowledge base. Security Software & Threat Monitoring • Assist in the review and assessment of security software solutions, including antivirus, endpoint detection and response (EDR), and identity protection tools., • Monitor and triage Managed Detection and Response (MDR) and Managed Extended Detection and Response (MXDR) alerts, escalating incidents to senior engineers in line with established response procedures., • Review alert queues within security platforms (e.g. third-party MDR consoles), documenting findings and initial analysis for each alert., • Support the investigation of security events by gathering logs, correlating data, and contributing to root cause analysis under the guidance of the security team., • Help maintain and update alert handling documentation, playbooks, and response runbooks., • Participate in periodic security tool evaluations, providing documented observations and recommendations to the IT team. Development Initiative Support via Azure • Support development teams by provisioning and managing Azure resources required for development, testing, and staging environments (e.g. App Services, Key Vault, Storage Accounts).., • Help enforce Azure governance policies such as tagging, resource group organization, and role-based access control (RBAC) to ensure development environments remain compliant., • Coordinate with developers to troubleshoot Azure resource access issues, networking configurations, and service connectivity., • Support the deployment and management of Azure-hosted development tools and services, ensuring availability and performance align with project requirements., • Assist in monitoring Azure resource usage and costs associated with development initiatives, flagging anomalies and recommending optimizations. General IT Operations • Log, track, and manage IT support tickets through the helpdesk system, ensuring timely resolution within SLA targets., • Maintain clear and up-to-date documentation for processes, configurations, and troubleshooting steps., • Collaborate with cross-functional teams and communicate technical information clearly to non-technical users. Qualifications & Requirements Education • Currently enrolled in or recently graduated from a degree program in Information Technology, Computer Science, Network Engineering, Cybersecurity, or a related field. Technical Skills • Foundational knowledge of Microsoft Azure cloud services and the Azure portal., • Experience with Windows PC and laptop setup, configuration, and troubleshooting., • Understanding of core networking concepts: TCP/IP, DNS, DHCP, VLANs, and subnetting., • Familiarity with IT security principles including access management, data protection, and endpoint security., • Working knowledge of PowerShell for scripting and task automation., • Experience using Microsoft Power BI for data analysis and dashboard creation., • Proficiency with Microsoft 365 productivity tools (Teams, Outlook, SharePoint, OneDrive, Exchange). Soft Skills • Excellent organizational skills with strong attention to detail and the ability to manage multiple tasks simultaneously., • Effective written and verbal communication skills for both technical and non-technical audiences., • Proactive, self-motivated, and eager to learn in a fast-paced environment., • Strong problem-solving mindset with a methodical approach to troubleshooting., • Able to work collaboratively as part of a team while taking ownership of assigned responsibilities. Preferred (Nice to Have) • Microsoft certifications such as AZ-900, MS-900, or CompTIA A+ / Network+., • Experience with ticketing/ITSM platforms., • Exposure to Microsoft Intune or other endpoint management tools., • Basic understanding of Active Directory (on-premises) administration., • Familiarity with ITIL principles or IT service management practices. Work Hours: Normal PCRB hybrid Flex time is available. Employee must be flexible when needed as projects or deadlines may sometimes necessitate extended hours.

Job DescriptionDescription: Experience: Applicant must be US citizen and hold active DoD Secret Clearance Validated 3-5 years of specialized experience in Cybersecurity Incident Response and Forensic Analysis. Candidate will initially assist with the buildout of the Forensic Lab and ultimately oversee and manage information security program implementation within the organization or other areas of responsibility. Manage strategy, infrastructure, policy enforcement, emergency planning, security awareness, and/or other resources. Minimum Education: Bachelor's Degree from an accredited University Requirements: Specific duties include: • Set up virtualized environments (e.g., VMware, VirtualBox, QEMU) for analysis sandboxes., • Set up network infrastructure, including isolation, segmentation, and secure connectivity., • Install and configure essential forensic tools (e.g., FTK Imager, Autopsy, F-Response)., • Install and configure tools to enable exact duplications of potentially compromised artifacts., • Set up and configure virus/malware scanning technologies, ensuring the lab is capable of performing scans and analyzing results., • Configure environments and tools necessary to analyze potentially compromised artifacts running in Windows, Linux, Unix, and Virtual Machine environments, as well as databases and hard drives., • Implement and configure malware analysis tools (e.g., REMnux, Cuckoo Sandbox, Ghidra, IDA Pro Free)., • Set up incident response tools (e.g., Volatility, Wireshark, Sysinternals Suite)., • Integrate and configure open-source intelligence (OSINT) tools as appropriate.

Job DescriptionCompany Description A best-in-class city that attracts best-in-class talent, Philadelphia is an incredible place to build a career. From our thriving arts scene and rich history to our culture of passion and grit, there are countless reasons to love living and working here. With a workforce of over 30,000 people, and more than 1,000 different job categories, the City of Philadelphia offers boundless opportunities to make an impact. As an employer, the City of Philadelphia values inclusion, integrity, innovation, empowerment, and hard work above all else. We offer a vibrant work environment, comprehensive health care and benefits, and the experience you need to grow and excel. If you’re interested in working with a passionate team of people who care about the future of Philadelphia, start here. What we offer • Impact - The work you do here matters to millions., • Growth - Philadelphia is growing, why not grow with it?, • Diversity & Inclusion - Find a career in a place where everyone belongs. Within the Philadelphia Police Department (PPD), the Office of Strategic Planning (OSP) is responsible for shaping the Department’s long-term vision, strategic direction, and operational effectiveness. A core focus is ensuring that strategic initiatives are data-driven, transparent, and designed to build public trust while addressing evolving public safety challenges. To support this work, the OSP is establishing a Project Management and Delivery Office (PMDO), which will: • Drive successful execution of the strategic plan, • Build organizational planning and implementation capacity, • Intensive project management and delivery support for high-priority initiatives, • Strategic support for broader change management efforts Position Summary: Reporting to the Executive Director and Director of Strategic Planning, the Project Manager will lead multiple projects involving research, planning, and implementation. They will collaborate with PPD leadership, staff, City departments, and external stakeholders to develop and deliver high-impact project plans. Projects will vary in scope, complexity, and timelines—requiring adaptability, strong communication, and strategic problem-solving skills. The Project Manager will build strong relationships across teams, anticipate challenges, develop solutions, and ensure all projects align with organizational goals and achieve intended outcomes. Key Responsibilities Project Planning and Execution • Define project scopes, objectives, timelines, and deliverables in collaboration with leadership, • Develop comprehensive project plans that address budgetary, legal, personnel, and operational considerations, • Coordinate cross-functional teams to ensure timely, high-quality execution, • Identify risks and implement mitigation strategies, • Build systems for implementation tracking and performance monitoring, • Incorporate data analysis and dashboards into project development and evaluation, • Conduct project evaluations to assess effectiveness and identify areas for improvement, • Implement quality control measures throughout the project lifecycle, • Document project activities, including progress reports and final deliverables, • Support broader change management and organizational development efforts, • Facilitate working sessions and promote cross-team collaboration, • Maintain clear, consistent communication with internal and external stakeholders, • Promote the institutionalization of best practices across teams Knowledge: • Strong understanding of project management methodologies (e.g., Agile, Scrum, Waterfall), • Expertise in change management, process improvement, and organizational development, • Familiarity with public sector budgeting, finance, and regulatory compliance, • Experience with data-driven decision-making, performance management, and evaluation, • Strong leadership, collaboration, and relationship-building skills, • Analytical thinking and the ability to translate complex information into actionable plans, • Skilled in business process analysis and requirements gathering, • Budget management and resource negotiation experience, • IT Projects: Technology deployment, system upgrades, cybersecurity, Agile/Scrum, • Finance Projects: Financial modeling, grants management, policy development, • Communications Projects: Strategic messaging, content creation, brand management, • Navigate complex, ambiguous environments with flexibility, • Build trust and collaborate with diverse stakeholders, • Solve problems proactively and adjust approaches as needed, • Communicate effectively across audiences, • Commit to advancing equity through improved systems, policies, and cultureQualifications, • Bachelor’s degree in public policy, business, sociology, public administration, urban planning, or a related field required; Master’s degree preferred, • Project Management Professional (PMP), Lean Six Sigma, or Scrum Master certification preferred Additional Information TO APPLY: Interested candidates must submit a cover letter, resume, references, and two work product samples (ideally, one prepared for an internal audience and one for an external audience). Salary Range: $72,000 to $90,000 Discover the Perks of Being a City of Philadelphia Employee: • Transportation: City employees get unlimited FREE public transportation all year long through SEPTA’s Key Advantage program. Employees can ride on SEPTA buses, subways, trolleys, and regional rail for their daily commute and more., • Parental Benefits: The City offers its employees 8 weeks of paid parental leave., • We offer Comprehensive health coverage for employees and their eligible dependents., • Our wellness program offers eligibility into the discounted medical plan, • Employees receive paid vacation, sick leave, and holidays, • Generous retirement savings options are available, • Pay off your student loans faster - As a qualifying employer, City of Philadelphia employees are eligible to participate in the Public Service Loan Forgiveness program. Join the ranks of hundreds of employees who have already benefited from this program and achieved student loan forgiveness. *The successful candidate must be a city of Philadelphia resident within six months of hire Effective May 22, 2023, vaccinations are no longer required for new employees that work in non-medical, non-emergency or patient facing positions with the City of Philadelphia. As a result, only employees in positions providing services that are patient-facing medical care (ex: Nurses, doctors, emergency medical personnel), must be fully vaccinated. The City of Philadelphia is an Equal Opportunity employer and does not permit discrimination based on race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, source of income, familial status, genetic information or domestic or sexual violence victim status. If you believe you were discriminated against, call the Philadelphia Commission on Human Relations at 215-686-4670 or send an email to . For more information, go to: Human Relations Website: