Job Openings

Embark on an exciting journey with us. Revolutionize technology, drive innovation, and unlock your potential. Explore our job openings now.

Current Openings

Search by Keyword, Location, etc.

JOB DESCRIPTION:

The Cybersecurity Engineer will be implementing, managing, and enhancing the ESS (Endpoint Security Solutions) suite to support a Department of Defense customer ( DCSA).


Responsibilities:

  • Experience with ESS (Endpoint Security Solutions) EndPoint Security (ENS), Data Loss Prevention (DLP), and Policy Auditor (PA).
  • Ensure endpoint compliance using ePolicy Orchestrator (ePO) for multiple enclaves.
  • Maintain Trellix ESS server including Microsoft Operating System and SQL Database, using Government supplied hardware and software.
  • Test, upgrade, and deploy Trellix software to the most recent software versions as they are approved and released by the DISA Patch Repository Program including testing as required.
  • Plan/Develop endpoint security solutions for customer requirements.
  • Continuously monitor the performance and integrity of the Trellix ESS server solutions.
  • Create, tune, and maintain security policies to protect customer assets including Antivirus, Data Loss Prevention, Host Based Intrusion Prevention, and firewall policies.
  • Establish and conduct scheduled STIG and patch compliance scans utilizing Trellix Policy Auditor and other government-supplied solutions.
  • Ability to develop dashboards, queries, and reports that automate Cyber Scorecards, Incident Investigations, and applicable DoD/Intelligence Community-defined reporting standards.
  • Microsoft SQL database maintenance and support for ePO as needed.
  • Possesses understanding and experience with common cybersecurity toolsets and processes including STIGs, IAVA Management and Implementation, and Operation Orders.
  • Ability to provide Joint Force Headquarters (JFHQ) – DODIN (OPORD)/Fragmentary Order (FRAGO) support.
  • Ability to document and present data to management for compliance and security posture.
  • General knowledge of endpoint operating systems, endpoint security, and networking.
  • Proficiency in using Microsoft products (e.g., PowerPoint, Word, Excel).

CLEARANCE LEVEL:

Active Secret or Top Secret Clearance is a MUST

LOCATION:

Hanover, MD 1 Day onsite 4 days offsite

REQUIREMENTS:

  • Trellix experience
  • Windows Server administration
  • Microsoft SQL experience (preferred)

EDUCATION:

  • Bachelor’s Degree in a technology-related field or 6-8 years of related experience

CERTIFICATION(s):

  • DISA Host-Based Security System (HBSS) 201 and 301
  • IAT II Baseline Certification (Security+)

JOB DESCRIPTION:

Responsibilities:

  • Platform Administration: Manage and administer the CrowdStrike Falcon platform, including user access, permissions, and configurations for 1,400 Nodes.
  • Ensure the platform is properly configured to meet security and compliance requirements
  • Endpoint Security Management: Deploy and manage endpoint security agents across the organization’s devices
  • Monitor and analyze endpoint security data to identify potential threats and vulnerabilities
  • Incident Response: Respond to security incidents detected by the CrowdStrike Falcon platform
  • Investigate security alerts, analyze root causes, and take appropriate remediation actions
  • Policy Management: Develop and enforce security policies within the CrowdStrike Falcon platform
  • Configure and customize security policies based on organizational requirements and best practices
  • Stay updated on the latest cyber threats and trends to enhance threat detection and response capabilities
  • Troubleshooting and Support: Provide technical support and troubleshooting assistance to end-users regarding the CrowdStrike Falcon platform
  • Collaborate with CrowdStrike support teams to resolve issues and optimize platform performance
  • Security Awareness and Training: Conduct security awareness training sessions for end-users to educate them about endpoint security best practices
  • Promote a culture of security awareness and vigilance within the organization
  • Documentation and Reporting: Maintain detailed documentation of platform configurations, policies, and incident response procedures
  • Generate regular reports on security metrics, incidents, and compliance status for stakeholders
  • Continuous Improvement: Identify opportunities for process improvement and optimization within the CrowdStrike Falcon platform
  • Stay informed about emerging technologies and industry trends to enhance security capabilities
  • Compliance and Audit: Ensure that the CrowdStrike Falcon platform aligns with relevant regulatory requirements and industry standards
  • Participate in security audits and assessments to validate compliance with security policies and controls

CLEARANCE LEVEL:

Top Secret Clearance is a MUST

LOCATION:

Quantico, VA Hybrid- 2 Days Onsite 3 Days Offsite

REQUIREMENTS:

  • Trellix experience
  • Windows Server administration
  • Microsoft SQL experience (preferred)

EDUCATION:

  • Associate or Bachelor’s Degree in Information Technology or Engineering

CERTIFICATION(s):

  • IAT II Baseline Certification (Security+)is a MUST

JOB DESCRIPTION:

DCSA is seeking Information Systems Security Engineering (ISSE) support for the Zero Trust initiative to maintain IT infrastructure, applications, and any new development projects ensuring the security of networks. Technical analysis, research, evaluation, and technical guidelines are to be performed to provide support. The workload will vary depending on the number of active development projects and other technical assessments required.

Identify potential security vulnerabilities in ICAM/Zero Trust (ZT) implementation and recommend remediation.

  • Support all phases of an Information Systems Security Engineering Program (ISSE) with ISSE-certified personnel to support the requirements of the DoD A&A Process. The ISSE Program will use the Information Assurance Technical Framework (IATF); DoD 5200.1-M; Common Criteria for IT Security Evaluation (International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 15480; and DOD, federal, and DSS Cyber Security Policies as guides.
  • Provide input to the DCSA A&A Process including Information Security planning, design, testing, and analysis.
  • Provide research and analysis of Commercial-Off-The-Shelf (COTS) and Government-Off-The-Shelf (GOTS) and IA-enabled products as part of the security architecture and ensure that the products are National Security Telecommunications and Information Systems Security Policy Number 11 (NSTISSP-11) compliant and validated via the NIAP Common Criteria Evaluation and Validation Scheme or NIST Federal Information Processing Standards (FIPS) Cryptographic Module Validation Program (CMVP.)
  • Information System Security Engineer (ISSE) Deliverables, at the discretion of the government, may include but are not limited to:
    • Service Acceptance Criteria and Service Level Requirements
    • Service Level Policies, Procedures, and Reports
    • Service Level Agreements and Operational Level Agreements
    • Availability Policy, Plans, Design Criteria, Risk -Analysis and Reports
    • Business and IT service continuity policy, strategy, plans, risks, business impact analysis, and reports
    • Technical Documents
    • Market Research Analysis and Results
    • Technical Guidelines and Framework
    • Technical and Product Evaluation Reports
    • Technical Studies
    • Cloud Design Diagram with security impacts (outlines systems to be deployed to a cloud infrastructure; outlines the ingress and egress points from the DSS network to the cloud infrastructure, locations of the CND Suite, and method of connecting to the DoD information network (DoDIN))
    • Cloud Suitability Questionnaire Template-(will be used to score an application’s suitability for deployment to the cloud with security impacts. The template should baseline a score to be used to determine suitability based on qualifying factors).
    • Technical Documents as defined by the Government
    • Courses of Action
    • Proofs of Concept

CLEARANCE LEVEL:

Active Top Secret or Secret clearance is a MUST

LOCATION:

Quantico, VA, 2 days Onsite 3 days offsite Remote Long-Term

REQUIREMENTS:

  • At least 3-5 years of cybersecurity experience and knowledge of DoD, NIST, Cloud, DISA, and other applicable Cyber Security policies, procedures, and best practices

EDUCATION:

  • Associate or Bachelor’s Degree in Information Technology or Engineering
  • Familiar with IT Design, Installation, Integration with Cloud, FEDRAMP, and DoD Information Levels

CERTIFICATION(s):

  • Must be IAM II or IAT II Certified.
  • Maintain DoD 8570.01-M/8140-M IASAE level III or DoD 8570.01-M/8140-M IAM III certification

JOB DESCRIPTION:

As a Cloud Security Analyst, you will play a crucial role in ensuring the security and compliance of the Programs under the Program Executive Office (PEO). You will be responsible for managing Risk Management Framework (RMF) support for Amazon Web Services (AWS) based cloud systems.

CLEARANCE LEVEL:

Active Secret Required and eligibility for TS required

LOCATION:

Hanover, MD (Fort Meade location) Hybrid (2 Days Onsite and 3 Days Offsite)

REQUIREMENTS:

EXPERIENCE:

  • At least three (3) Years of cloud security experience.
  • Proficiency in implementing RMF processes and compliance with DoDI 8510.01.
  • Follow and execute DoDI 8510.01, DCSA OCIO / CISO requirements for the Program Management Office, ISSM, and Information System Security Officers (ISSO) within the PEO.
  • Manage the associated processes for RMF, ensuring each AIS (Automated Information System) is implementing RMF processes and supporting the acquisition process.
  • Collaborate with PEO-embedded contract staff for all programs to align, integrate, and support RMF processes.
  • Enforce Authorizing Official (AO)/CISO decisions for all hosted and interconnected systems.
  • Create, submit, and manage Plans of Action and Milestones (POA&Ms) for approval by AO/CISO.
  • Maintain and report on RMF processes using eMASS and related tools.

EDUCATION:

 Associate or Bachelor’s Degree, in Cybersecurity, and/or Information Systems Management or equivalent experience 

CERTIFICATION(s):

DD8140/DoD8570.01-M IAM Level I

JOB DESCRIPTION:

Our Business Development, Capture, and Proposals Unit’s mission is to support clients with managing and supporting the BD, capture, and proposal development lifecycle for their assigned proposals. Our services are focused on Federal Government information technology pursuits that may vary in size from small to large and may require a variety of solutions. Our team is responsible for administering proposal processes, ensuring configuration management, ensuring compliance, providing guidance and assistance to authors, administering proposal-related resources, preparing proposal-related reports, etc. Tasks managed include Requests for Proposal (RFP) Analysis, Kick-Off Meetings, Status Calls, Proposal Development, Proposal Writing, Color Reviews, Proposal Production, Knowledge Management, etc.

ESSENTIAL FUNCTIONS:

  • Manage, write, and review RFX responses, white papers, resumes, past performance citations, and other narratives related to proposal responses in collaboration with clients and Sunrays International team members.
  • Interpret RFP requirements for compliance mapping and proposal response outlining.
  • Develop and successfully implement proposal templates, outlines, compliance matrices, resource assignments, production checklists, and bid and proposal budgets.
  • Conduct desktop publishing on proposal response materials, ensuring formatting consistency and compliance across documents.
  • Develop and maintain the proposal schedule, and report on progress.
  • Research and organize solutions and content.
  • Collaborate with the Director of Proposal Operations, Proposal Coordinators, Capture Managers, Business Development Managers, Authors, Subject Matter Experts, Artists, Program Managers, Support Leads, etc.
  • Coordinate, prepare for, and participate in proposal meetings, reviews, and debriefs.
  • Ensure submissions are accurate, complete, and compliant with RFP requirements and editorial specifications, as well as corporate quality and branding standards.

CLEARANCE LEVEL:

Must be a US Citizen

LOCATION:

Chantilly, VA (1-day every 2 weeks Onsite)

REQUIREMENTS:

  • Knowledge of RFP life cycle management and federal procurement regulations (FAR/DFARS).
  • Proven ability to successfully communicate company proposal objectives and key characteristics to management and teammates, in writing and oral presentations.
  • Proven ability to work with/interview Subject Matter Experts to understand and write about complex technical and management approaches.
  • Excellent people skills – able to work with teams of varying sizes, technical abilities, and levels of authority with both internal corporate staff and teammates.
  • Advanced ability to manage the RFP/RFI process and the contributing team members (not direct reports).
  • Skilled in analyzing RFPs and preparing outlines, schedules, and proposal templates.
  • Thorough, detail-oriented, and organized, with excellent time management skills and ability to prioritize.
  • Excellent multi-tasking abilities – able to handle multiple projects simultaneously.
  • Strong analytical skills with solid administrative experience.
  • Ability to understand and verify compliance.
  • Skilled in proposal management, coordination, and production.
  • Skilled in desktop publishing and formatting.
  • Knowledgeable in Microsoft Office Suite including Word, Excel, PowerPoint, and other database applications
  • Disciplined and efficient, able to work rapidly without comprising quality
  • Able to work under pressure of deadlines

EDUCATION:

  • Bachelor’s or Master’s Degree in Business, English. Technical, or related academic fields are highly desired

CERTIFICATION(s):

N/A

JOB DESCRIPTION:

Cyber Defense Operations (CDO) support services include continuous monitoring, which encompasses data such as network and host vulnerability scanning, IDS, firewall, network sensor tuning, and net flow/packet capture (PCAP). Audit data is collected and retained to facilitate technical analysis related to misuse, penetration, or other incidents.

Engineer, administer, and coordinate all ForeScout and C2C-related objectives. Candidates will operate in a multi-enclave environment and collaborate with various sections within OCIO to ensure C2C milestones are achieved.

CLEARANCE LEVEL:

Active Top Secret with ability to obtain TS/SCI may be allowed

LOCATION:

DCSA Quantico, VA- Hybrid (2 Days Onsite a MUST)

REQUIREMENTS:

BASIC QUALIFICATIONS:

  • At least 3 Years- hands-on technical Cybersecurity Experience:
    • Proficient with Forescout, Comply-2-Connect.
  • Knowledge of computer network defense concepts, DISA Security Technical Information Guides, DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01 B, United States Cyber Command guidelines, and other applicable DoD Cybersecurity and Computer Network Defense policies, Cybersecurity and Computer Network Defense policies.
  • Be able to maintain TS/SCI clearance and access to required commercial and/or DoD systems including NIPRNet, SIPRNet, and JWICS.

Forescout Cybersecurity Defense Engineer specific:

  • Conduct Cyber Defense Operations supporting continuous monitoring with Forescout.
  • Knowledge of DISA C2C (Comply-to-Connect).
  • Daily Operation and Maintenance (O&M) of multiple Forescout CounterACT appliances across multiple enclaves.
  • Collaboration with DISA and Forescout regarding Patches, C2C Policies, and Updates.
  • Daily Health Checks of managed switches.
  • Knowledge of 802.1X implementation.
  • Proficient with Forescout Console and Fstool commands for troubleshooting.
  • Ability to collaborate with other teams such as Network Operations, Desktop Engineering, and Enterprise Operations for daily issues.
  • Familiar with creating Forescout Reports and creating informational dashboards.
  • Analysis of data aggregation and analysis tools, including Splunk, HBSS, Tanium, and FireEye.
  • Familiar with policy creation and segment control.
  • Assist with the implementation of countermeasures or mitigating controls.
  • Compliance control and reporting.

EDUCATION:

  • Associate or bachelor’s degree in information technology, Information Systems Management, Cybersecurity, or equivalent, or equivalent experience.

CERTIFICATION(s):

  • IAT Level II REQUIRED
  • Forescout FSCA (Forescout Certified Administrator) certification is required.

General Application form

Apply now

Position: