cyber threat intelligence analyst (ts/sci req)

environmental compliance technical & policy lead (deputy/alternate pm) - odasn(e)

administrative assistant (meritain health)

operations coordinator - dispatcher Jobs in Washington

operations coordinator - dispatcher

risk adjustment outreach manager Jobs in Washington

risk adjustment outreach manager

clinical research assistant Jobs in Washington

clinical research assistant

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

environmental compliance technical & policy lead (deputy/alternate pm) - odasn(e) Jobs in Washington

incident response lead

ShorePoint

<div>Who we are: 
ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a &ldquo;work hard, play hard&rdquo; mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. 
The Perks: 
As recognized members of the Cyber Elite, we work together in partnership to defend our nation&rsquo;s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. 
Who we&rsquo;re looking for: 
We are seeking an Incident Response Lead to serve as the Subject Matter Expert (SME) on all cybersecurity matters, including high-level analysis, design, integration and implementation of incident detection and response strategies. The ideal candidate brings deep technical expertise, a strategic mindset and hands-on leadership experience in incident response, security architecture and threat mitigation. The Incident Response Lead role offers the opportunity to shape cybersecurity posture by driving best practices and recommending emerging technologies and countermeasures. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. 
What you&rsquo;ll be doing: 
<ul>
<li>
Lead the development and implementation of incident detection and response solutions across systems and environments.</li>
<li>Provide expert analysis and recommendations on new and emerging cybersecurity technologies, tools and methodologies.</li>
<li>Coordinate and lead incident response efforts, ensuring rapid detection, containment and recovery from cyber events.</li>
<li>Serve as the senior cybersecurity advisor, contributing to architecture, documentation and security strategy development.</li>
<li>Analyze evolving threat landscapes and deliver countermeasure recommendations to proactively mitigate risks.</li>
<li>Support the integration of incident detection and response requirements into system designs, architectures and operational workflows.</li>
<li>Develop and maintain security documentation, including policies, procedures and playbooks.</li></ul> 


What you need to know: 
<ul>
<li>
Demonstrated expertise in incident response lifecycle, including detection, containment, eradication and recovery.</li>
<li>Experience designing and implementing security controls, countermeasures and cyber technologies.</li>
<li>Familiarity with cybersecurity frameworks (e.g., NIST, ISO, FISMA) and incident response reporting requirements.</li>
<li>Excellent communication skills with the ability to advise technical and non-technical stakeholders.</li>
<li>Proven ability to deliver strategic security recommendations and guide cross-functional teams.</li></ul> 


Must have&rsquo;s: 
<ul>
<li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field.</li>
<li>5+ years of relevant experience.</li>
<li>Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.</li>
<li>Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.</li></ul> 


Beneficial to have: 
<ul>
<li>
Industry recognized certifications.</li></ul> 


Where it&rsquo;s done: 
<ul>
<li>
Onsite (Washington, D.C.)</li></ul></div>

Incident Response Lead

Amtrak

<div>Your success is a train ride away!
As we move America&rsquo;s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees. 
Are you ready to join our team?
Our values of &lsquo;Do the Right Thing, Excel Together and Put Customers First&rsquo; are at the heart of what matters most to us, and our Core Capabilities, &lsquo;Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety &amp; Security&rsquo; are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future. 
The Principal Cyber Threat Incident Response Analyst will play a critical role within the Amtrak Cyber Fusion Center. In this role, you will support a digital forensic cyber incident response team to effectively respond to and recovering from cybersecurity incidents. You will execute the cyber incident response plan, response playbooks, and will ensuring timely resolution of security breaches
ESSENTIAL FUNCTIONS:<ul><li>
As a Principal Cyber Threat Incident Response Analyst, you will provide industry-leading cyber incident response supporting the Cyber Fusion Center mission to effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident</li><li>
You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment to support effective remediation, and crisis management</li><li>
In this role, you will technically navigate critical and high-profile incidents, performing digital forensic and incident response analysis with support from threat hunting, and malware triage analysts</li><li>
Support Amtrak-wide cyber incident response engagements, examine cloud, endpoint, and network-based sources of evidence</li><li>
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations</li><li>
Both IT and OT Network analsis and forencis</li><li>
Experience handlig Malware and Malicious Code Reverse Engineering, Malware Analysis, Memory Analysis, Fileless Malware Analysis and Nation state actor malware investigations</li><li>
Build scripts, tools, or methodologies to enhance Amtrak&rsquo;s incident investigation processes</li><li>
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations</li><li>
Support Cyber Incident Exercises, Tabletops, and Cyber Incident Management Response Team with business leaders, stakeholders, and cross-functional teams.</li><li>
Support with Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to conduct and coordinate on Cyber Incident Response Activities.</li><li>
Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required.</li><li>
Cybersecurity certifications, courses, or hands-on experience with some of the following:<ul><li><div><ul><li>
Advanced Threat Detection</li><li>
Hacker tools, techniques</li><li>
Penetration Testing, Exploit Writing, and Ethical Hacking</li><li>
Offensive Security, Security Operations, Web Application Testing, or Cloud Security</li><li>
Reverse-Malware Engineering</li><li>
Digital Forensics and Incident Response</li><li>
PowerShell, JavaScript and Python</li><li>
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar</li><li>
Experience with using SIEM systems, network security tools, and log analysis tools</li><li>
Experience with cyber incident response</li><li>
Experience with Mitre ATT&amp;CK framework</li><li>
Experience with threat intelligence, vulnerability management, and security incident response</li></ul></div></li></ul></li><li>
Regularly participate in tabletop exercises designed to identify gaps, improve skills, enhance communication, and engage with stakeholders.</li><li>
Review technical reports from vulnerability and penetration testing assessments, as well as results from tabletop exercise to identify potential future incidents.</li><li>
Develop, refine, recommend, and maintain playbooks, policies, and procedures to ensure alignment to industry best practices.</li></ul>
MINIMUM QUALIFICATIONS:<ul><li>
Bachelor&rsquo;s degree in computer science, Information Systems, Cybersecurity, or related technical field plus 7-10 years of relevant experience is required.</li></ul>
Experience on one or the combination of the below to satisfy education and experience requirements:<ul><li><div><ul><li><div><ul><li>
Incident Response</li><li>
Vulnerability Management</li><li>
Digital Forensics</li><li>
Malware and Malicious Code Reverse Engineering</li><li>
Malware Analysis</li><li>
Memory Analysis</li><li>
Fileless Malware Analysis
</li><li>Nation state actor malware investigations</li><li>
Network or Cloud Security</li><li>
Penetration Testing</li></ul></div></li></ul></div></li></ul>
One incident response centric certification:<ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li></ul></div></li></ul></div></li></ul>
In depth understanding of threats, vulnerabilities and principals of incident response and chain of custody.<ul><li>
Hands on experience with forensics tools and log correlation.</li><li>
Ability to think like an attacker and hunt within the security tool stack.</li><li>
Ability to incorporate the MITRE ATT&amp;CK Framework in everyday processes.</li></ul>
 PREFERRED QUALIFICATIONS:<ul><li>
Master's degree in Cybersecurity, Information Technology, Digital Forensics, Computer Science, or equivalent technical field</li><li>
10+ years of experience within the cybersecurity field</li><li>
Basic knowledge of Operation Technology (OT), SCADA, HVAC and/or IoT</li></ul>
Two or more incident response centric certifications:<ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li></ul></div></li></ul></div></li></ul>
WORK ENVIRONMENT:<ul><li>
Amtrak offers several options for a working environment including 100% remote, on-site, and/or a hybrid schedule.</li><li>
This is a position that requires off-hours work and on-call participation.</li><li>
Please note your headquarters office may be in any one of Amtrak&rsquo;s locations across the United States. The ability and willingness to travel up to 30% to other office locations is required.</li></ul>
COMMUNICATIONS AND INTERPERSONAL SKILLS: 
Must have excellent oral and written communication skills.
The salary/hourly range is $124,600-$161,352, Pay is based on several factors including but not limited to education, work experience, certifications, internal equity, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position and/or long-term incentive plan compensation. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.
The salary/hourly range is $124,600.00 &ndash; $161,352.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here. 
Requisition ID:166157
Work Arrangement:06-Onsite 4/5 Days Click here for more information about work arrangements at Amtrak.
 
Relocation Offered:No
 
Travel Requirements:Up to 25%
You power our progress through your performance.
We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions. 
Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.
Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law. 
In accordance with DOT regulations (49 CFR &sect; 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions. 
In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. &sect;1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses. 
Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience. 
Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.</div>

Principal Incident Response Analyst (Digital Forensics)- 90406800 - Remote

Metrostar Systems

<div>As a SOC Analyst, you'll be responsible for monitoring, detecting, and responding to cybersecurity threats within an organization's IT environment. You'll analyze security alerts, investigate suspicious activities, and implement measures to mitigate risks. You will also document incidents, improve security protocols, and collaborate with other teams to strengthen overall cybersecurity defenses.

We know that you can't have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

What you'll do:
<ul>
<li>1st shift (7a-4p or 9a-6p)</li>
<li>Monitor security alerts and events using SIEM (Security Information and Event Management) tools.</li>
<li>Collaborate with leadership to develop and refine comprehensive cybersecurity strategies aligned with industry best practices and regulatory requirements.</li>
<li>Serve as a technical authority, offering in-depth expertise in areas such as threat detection, incident response, vulnerability management, and risk assessment.</li>
<li>Assess, design, and implement advanced security architecture solutions that address the organization's evolving technology landscape.</li>
<li>Identify, assess, and prioritize cybersecurity risks, working closely with cross-functional teams to mitigate potential threats effectively.</li>
<li>Lead and coordinate incident response activities, guiding the team through timely and effective resolution of security incidents and breaches.</li>
<li>Provide training and mentorship to internal teams, raising overall cybersecurity awareness and competence throughout the organization.</li>
<li>Conduct thorough security audits and assessments to identify vulnerabilities, weaknesses, and areas for improvement.</li>
<li>Investigate security incidents to determine root causes and implement remediation strategies.</li>
<li>Conduct threat intelligence analysis to identify and mitigate emerging cyber threats.</li>
<li>Perform real-time analysis of security logs and network traffic for anomalies.</li>
<li>Develop and update SOC processes, playbooks, and incident response plans.</li>
<li>Provide reports and recommendations to enhance security posture.</li>
</ul>
What you'll need to succeed:
<ul>
<li>2-4+ years of experience in a SOC environment.</li>
<li>An active TS/SCI security clearance</li>
<li>Experience in identifying, analyzing, and responding to security incidents using SIEM tools and threat intelligence platforms.</li>
<li>Strong skills in containing, mitigating, and resolving cybersecurity incidents following established protocols.</li>
<li>Solid understanding of network protocols, firewalls, and endpoint security solutions to assess potential vulnerabilities.</li>
<li>Experience examining system logs, packet captures, and forensic data to identify malicious activity.</li>
<li>Ability to clearly document findings, write detailed incident reports, and effectively communicate with technical and non-technical stakeholders.).</li>
<li>Experience with automation tools and scripting languages to streamline security operations, threat detection, and incident response.</li>
<li>Experience managing security events, and cyber threat response.</li>
<li>Familiarity with ITIL frameworks, incident management, and service desk operations.</li>
</ul>
SALARY RANGE: $115,000 - $138,000

The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:
<ul>
<li>The candidate's professional background and relevant work experience</li>
<li>The specific responsibilities of the role and organizational needs</li>
<li>Internal equity and alignment with current team compensation</li>
<li>This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:</li>
<li><ul><li>Performance-based bonuses</li>
<li>Company-paid training and/or certifications</li>
<li>Referral bonuses</li>
</ul></li>
</ul><div>To apply for this position, please submit your resume via the form below or through our careers page: https://www.metrostar.com/jobs/

Application Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.

Additional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.

Benefits: All full-time employees are eligible to participate in our benefits programs:
<ul>
<li>Health, dental, and vision insurance</li>
<li>401(k) retirement plan with company match</li>
<li>Paid time off (PTO) and holidays</li>
<li>Parental Leave and dependent care</li>
<li>Flexible work arrangements</li>
<li>Professional development opportunities</li>
<li>Employee assistance and wellness programs</li>
</ul>
Like we said, we are big fans of our people. That's why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.

Commitment to Non-Discrimination 
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

 What we want you to know:

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

 Not ready to apply now?

Sign up to join our newsletter here.</div></div>

SOC Analyst (6505)

<div>ECS is seeking an Operations Manager to work in our Washington, DC - Hybrid office. Please Note: This position is contingent upon contract award.

ECS is seeking an Operations Manager to lead and modernize the operational backbone of the SEC's IT environment &mdash; encompassing Data Center operations, the Network Operations Center (NOC), and Disaster Recovery (DR) capabilities. This is a critical leadership role: you will be responsible for the 24/7 reliability of the systems that the SEC depends on to fulfill its regulatory mission, while simultaneously driving these operations toward greater automation, intelligence, and resilience.

The SEC is not looking for someone who will simply manage shifts and keep the status quo running. The agency is investing in AI-driven operations (AIOps), automated incident response, predictive monitoring, and infrastructure automation &mdash; and your operations teams need to be at the center of this transformation. You will be expected to reduce manual operational toil, implement automated runbooks, introduce AI-powered event correlation and root cause analysis, and build a culture where your operators are engineers who build automation, not just watchers who respond to alerts.

You will manage and develop a multi-team operations staff, establish and enforce operational standards, and serve as the primary escalation point for critical infrastructure events. You will work closely with the System Architects, Network Architects, and Cloud Engineers to ensure that the operational model evolves in lockstep with the infrastructure modernization. Your success will be measured not just by uptime and SLA achievement, but by how much manual work you eliminate, how much faster your team resolves incidents, and how effectively you leverage AI and automation to improve the SEC's operational posture.

General Description of Benefits
Requirements:
<ul><li>10+ years of experience managing IT operations teams, including at least 5 years managing data center operations, NOC, or enterprise operations center teams</li>
<li>Demonstrated track record of transforming operations through automation &mdash; reducing manual toil, implementing automated runbooks, or introducing AIOps capabilities</li>
<li>Experience managing 24/7 multi-shift operations with direct responsibility for uptime SLAs and incident response in mission-critical environments</li>
<li>Strong technical foundation across data center infrastructure (servers, storage, networking, virtualization) and monitoring/observability platforms</li>
<li>Experience implementing or managing enterprise monitoring and event management platforms (ServiceNOW ITOM, Splunk ITSI, Dynatrace, SolarWinds, or equivalent)</li>
<li>Proven ability to measurably improve operational metrics &mdash; MTTR reduction, incident volume reduction, SLA improvement, or automation rate increase</li>
<li>Experience managing Disaster Recovery programs including DR testing, runbook maintenance, and failover coordination</li>
<li>Strong ITIL knowledge with practical experience in event, incident, problem, and change management processes</li>
<li>Experience managing and developing teams of 20+ operations personnel across multiple shifts</li>
<li>Active Secret clearance or ability to obtain; U.S. citizenship required</li>
<li>
Bachelor's degree in Information Technology, Computer Science, or related field. Equivalent combination of education and 12+ years of progressive IT operations management experience accepted.</li> 
</ul>
 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Operations Manager

IT Security EngineerWe are seeking a highly skilled and proactive IT Security Engineer to take ownership of the organization&rsquo;s end-to-end security program. This individual will be responsible for protecting systems, data, and infrastructure while partnering cross-functionally to ensure security is embedded across all technology and business operations. This role reports directly to the IT Director.Key Responsibilities<ul><li>Own and manage the full lifecycle of the organization&rsquo;s cybersecurity program</li><li>Conduct penetration testing, vulnerability scanning, and ongoing risk assessments to identify and mitigate threats</li><li>Develop, implement, and maintain security policies, procedures, and compliance documentation</li><li>Ensure adherence to regulatory frameworks including GDPR and HIPAA, with future exposure to ISO standards</li><li>Lead incident response efforts, including investigation, containment, and remediation of security events</li><li>Collaborate with internal teams to integrate security into daily operations and new technology initiatives</li><li>Provide strategic input on the development and evolution of the organization&rsquo;s technology stack</li><li>Manage vendor relationships, including evaluating third-party security practices and overseeing audits</li><li>Oversee endpoint and system security, including patching, monitoring, and access controls</li><li>Partner with external security vendors (e.g., SOC, EDR) to monitor systems and respond to threats</li><li>Deliver security awareness training and guidance to end users to reduce risk and improve best practices</li><li>Support audits, security questionnaires, and compliance-related requests</li></ul>Technical Environment<ul><li>Microsoft Azure Active Directory supporting approximately 130 end users</li><li>Experience with cloud security, identity and access management, MFA, and endpoint protection tools</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience)</li><li>5+ years of experience in cybersecurity or security engineering roles</li><li>Strong expertise in security technologies including firewalls, VPNs, SIEMs, IDS/IPS, and endpoint security</li><li>Experience with penetration testing, vulnerability management, and incident response</li><li>Familiarity with compliance frameworks such as GDPR, HIPAA, and general knowledge of ISO standards</li><li>Industry certifications such as CISSP, CISM, or similar are preferred</li></ul>Skills &amp; Competencies<ul><li>Strong analytical and problem-solving abilities with a proactive approach to risk mitigation</li><li>Excellent written and verbal communication skills, with the ability to translate technical concepts to non-technical stakeholders</li><li>High attention to detail and ability to manage multiple priorities in a fast-paced environment</li><li>Strong cross-functional collaboration and stakeholder management skills</li></ul>Additional Information<ul><li>Role requires local candidates with a hybrid schedule of three days onsite (Monday required)</li><li>Involves regular interaction with leadership and cross-functional teams across the organization</li><li>Interview process consists of three stages: initial virtual interview followed by two onsite meetings with technical leadership and executive team</li></ul>Pay: $130,000.00 - $170,000.00 per yearWork Location: Hybrid remote in Washington, DC 20036

IT Security Engineer

Anavation

<div><div>Be Challenged and Make a Difference</div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div> 
Description of Task to be Performed:</div>
<div>
AnaVation is seeking an Information System Security Officer (ISSO) Team Lead to support a key client in Washington DC. This individual will provide expert level guidance and leadership in implementing, maintaining, and enforcing information security policies, standards, and methodologies in accordance with federal regulations and agency requirements. This is a working Team Lead role.

What you will be doing
<div>
<ul><li>Directly oversee ISSO team members including technical guidance and training, mentorship, performance management, and day-to-day work assignments</li>
<li>Develop, review, and update system documentation and FISMA-compliant SA&amp;A packages (e.g., SSP, IRP, SOP, POA&amp;Ms, CMP, IPA, PIA, SORN) in accordance with client policies and procedures to obtain/maintain system accreditation (e.g., ATT, ATO, ATU, OA) using established processes</li>
<li>Advise the Authorizing Official (AO) and System Owner (SO) on cybersecurity matters related to assigned information systems across all NIST RMF phases, including system categorization, control baselines, control assessments, document and track weaknesses, and oversee corrective actions.</li>
<li>Serve as a member of the CCB to ensure system security requirements are addressed</li>
<li>Monitor cybersecurity status of information systems throughout the system lifecycle</li>
<li>Establish and regularly review audit trails, providing audit logs upon request</li>
<li>Provide RMF process subject matter expertise across all FISMA-reportable systems</li>
<li>Conduct SCA per NIST 800-53A, OMB A-130, OMB A-123, and client policies and schedules; report control gaps or weaknesses, risk levels, cost-benefit analysis, and impact to the client</li>
<li>Maintain a full inventory of hardware and software for the information system</li>
<li>Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans; support Incident Response and DR/COOP activities</li>
<li>Scan applications, networks, and databases; identify vulnerabilities</li>
</ul></div></div><h3 class="jobSectionHeader">Required Qualifications:</h3><div>
Minimum Qualifications (Education/Certications, Experience, etc):</div>
<ul><li>Minimum of ten (10) years of hands-on ISSO experience, including High and Cloud systems</li>
<li>Minimum two (2) active certifications: PMP, CISSP, CISM, CEH, CASP, CCSP, CCSK, or Security+</li>
<li>Minimum two (2) years of hands-on experience with JCAM</li>
</ul>
Clearance:
<ul>
<li>Active Top Secret clearance with SCI Eligibility</li>
</ul>
Other Required Skills &amp; Qualifications:
<ul>
<li>In depth understanding of FISMA, NIST RMF, and SA&amp;A processes</li>
<li>Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders</li>
<li>Experience with GRC tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
</ul><h3 class="jobSectionHeader">Preferred Qualifications:</h3><div>
<ul><li>Bachelors Degree or higher</li>
<li>CISSP certification</li>
</ul></div><div>Benefits</div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div>About AnaVation</div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

ISSO Team Lead

Quzara LLC

<div>Job Title: Cybersecurity Cloud Engineer
Pay Type: SALARIED EXEMPT
Location: Hybrid, Washington, DC (Must Work East Coast Hours)
Citizenship: U.S. Citizenship (Required)
Summary of Position Role/Responsibilities
The Cybersecurity Cloud Engineer is responsible for designing, implementing, and maintaining secure cloud environments across Quzara&rsquo;s federal and commercial platforms. This role emphasizes deploying and managing cloud-native security controls, integrating cloud telemetry with security operations tools, and ensuring ongoing compliance with federal standards such as NIST, FedRAMP, and agency-specific policies. The position supports secure architectures in IaaS, PaaS, and SaaS environments, requiring hands-on expertise in cloud security services, strong knowledge of security operations integration, and the ability to drive both engineering and compliance initiatives.
Essential Functions of the Job<div><ul><li>
Implement and support secure cloud architectures aligned with NIST, FedRAMP, and agency-specific security policies.</li><li>
Support the design and maintenance of cloud security reference architectures across platforms such as AWS and Microsoft Azure.</li><li>
Configure and maintain cloud-native security services and controls, including identity, logging, monitoring, and threat protection capabilities.</li><li>
Integrate cloud telemetry and logging data into SIEM and Security Operations (SecOps) platforms to support monitoring and detection activities.</li><li>
Support cloud security incident detection, investigation, and remediation in coordination with SOC and incident response teams.</li><li>
Assist in the enforcement of continuous compliance requirements, including validation of control implementation and support for audit readiness.</li><li>
Produce and maintain cloud security documentation, including system diagrams, architecture artifacts, and control narratives.</li><li>
Collaborate with engineering, DevSecOps, and compliance teams to ensure alignment between cloud implementations and security requirements.</li></ul></div>
Marginal Functions of the Job<div><ul><li>
Other duties as assigned</li></ul></div>
Normal Work Schedule:
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.
Education, Training, and Experience<div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</li><li>
3&ndash;5+ years of experience supporting cloud security engineering or cloud infrastructure in regulated environments.</li><li>
Hands-on experience with cloud platforms such as AWS and/or Microsoft Azure.</li><li>
Familiarity with federal cybersecurity frameworks including NIST SP 800-53 and FedRAMP.</li><li>
Experience configuring cloud-native security tools (e.g., identity and access controls, logging, monitoring, and threat protection services).</li><li>
Experience integrating cloud environments with SIEM or SecOps platforms.</li><li>
Ability to produce technical documentation, diagrams, and security artifacts.</li><li>
Strong analytical and problem-solving skills, with the ability to support incident response and remediation efforts.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div>
Preferred Certifications<div><ul><li>
Cloud and security certifications such as:<ul><li>
AWS Certified Solutions Architect</li><li>
Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li><li>
CompTIA Security+</li></ul></li><li>
Additional certifications related to cloud security or compliance frameworks are also a plus.</li></ul></div>
EEO Statement
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</div>

Cybersecurity Cloud Engineer

Explore 255+ Incident response lead in Washington this April. Find roles across top companies and apply now to boost your career.