information system security engineer

Arsiem

<div><div><b>About ARSIEM Corporation</b></div><div></div><div><br>
At ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients. We provide support to multiple agencies across the United States Government. ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support.</div><div></div><div><br>
As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients. That means a career packed with opportunities to grow and the ability to have an impact on every client you work with.</div><div></div><div><br>
ARSIEM is looking for a part-time <b>Information System Security Engineer </b>to work 20 hours per week. This position will support one of our government clients in Fort Meade, MD.</div>
<h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3><ul>
<li>Collaborate closely with internal and external customers to complete required government paperwork and processes related to information system security.</li>
<li>Assist the government customer with answering information system security-related questions and perform regular audits of information systems.</li>
<li>Understand STE/STN requirements and have experience applying the principles of the NIST 800-53 to include the procedures in the Risk Management Framework (RMF).</li>
<li>Must have experience with Defense-In-Depth principles, networks and enterprise security architecture.</li>
<li>Bachelor's degree plus 8-years of relevant experience or equivalent.</li>
<li>Information Assurance Manager (IAM) Tier 1 certification.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3><ul>
<li>Knowledge of customer corporate tools and data repositories.</li>
<li>Experience with general Windows office software (e.g. Word, Outlook, Excel).
</li></ul><div>The ARSIEM pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) job responsibilities, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other laws.</div>
<div></div>
<div>Benefits:</div>
<div>For an overview of our benefits, please visit our benefits tab.</div>
<div>https://www.arsiem.com/careers/</div>
<div></div>
<div>Original Posting Date:</div>
<div>2026-05-08</div><div>
Clearance Requirement: This position requires an active TS/SCI with a polygraph. You must be a U.S. citizen for consideration.</div>
<div></div>
<div>Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is $2,500, and the referrer is eligible to receive the sum for any applicant we can place within 12 months of referral. The bonus is paid after the referred employee reaches six months of employment.</div><div></div><div><br>
ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

378 - Information System Security Engineer

Booz Allen Hamilton

<div>Cloud Security Engineer<p><b>
The Opportunity</b><b>:</b></p><p>
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</p></li><li><p>
4+ years of experience with secure IT architecture and computing hardware and software</p></li><li><p>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</p></li><li><p>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</p></li><li><p>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</p></li><li><p>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</p></li><li><p>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</p></li><li><p>
Top Secret clearance</p></li><li><p>
HS diploma or GED</p></li><li><p>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
Experience assessing and authorizing network connections between on-premise and cloud</p></li><li><p>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</p></li><li><p>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</p></li><li><p>
Experience with code management tools such as Git or GitLab in a team setting</p></li><li><p>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</p></li><li><p>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</p></li><li><p>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</p></li><li><p>
Ability to work independently and as an integrated member of a project team</p></li><li><p>
Possession of excellent verbal and written communication skills</p></li><li><p>
TS/SCI clearance</p></li></ul><p></p><p><b>
Clearance:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Candidate AI Usage Policy</b></p><p>
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on <b>your </b>own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited <b>unless permission is explicitly provided</b>.
</p><p></p><p><b>Work Model</b><br>
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.</p><ul><li><p><b>
Remote</b>: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</p></li><li><p><b>
Hybrid</b>: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</p></li><li><p><b>
Onsite</b>: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</p></li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Cloud Security Engineer

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Cybersecurity Engineer - Sr. Job Description</b></h1><b>
Position Title: </b>Cybersecurity Engineer Sr<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cybersecurity Engineer - Sr. supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cybersecurity engineering, security operations, systems hardening, cloud security, zero trust architecture, and enterprise cyber defense support services.<br>
The Cybersecurity Engineer - Sr. serves as a senior technical leader responsible for designing, implementing, integrating, securing, and optimizing enterprise security architectures across on-premises, cloud, hybrid, and SaaS environments. The position supports 24x7x365 Security Operations Center (SOC) activities and works closely with federal stakeholders, engineers, SOC analysts, architects, incident responders, and program leadership to enhance the cybersecurity posture of SBA enterprise systems and critical assets.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide senior-level cybersecurity engineering support for SBA ECS enterprise cybersecurity operations.</li><li>
Support Task Areas 3.5.3 and 3.5.3.9 by designing, implementing, and maintaining secure enterprise security architectures and cybersecurity engineering solutions.</li><li>
Develop and maintain cybersecurity engineering standards, architecture diagrams, implementation strategies, and technical security documentation.</li><li>
Engineer and implement security controls aligned with NIST, FISMA, Zero Trust Architecture (ZTA), and federal cybersecurity requirements.</li><li>
Design, integrate, configure, and support security technologies including SIEM, SOAR, IDS/IPS, EDR, DLP, MFA, PKI, NAC, firewalls, secure web gateways, and cloud-native security solutions.</li><li>
Provide advanced engineering support for Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network environments.</li><li>
Support cybersecurity monitoring, detection, containment, remediation, and recovery activities within the SOC environment.</li><li>
Perform enterprise systems hardening, vulnerability remediation, security baseline implementation, and secure configuration management.</li><li>
Conduct cybersecurity architecture assessments, threat modeling, security engineering reviews, and technical risk analysis activities.</li><li>
Support implementation and optimization of Zero Trust security capabilities including identity security, micro-segmentation, continuous monitoring, and least privilege access models.</li><li>
Design and implement cybersecurity solutions supporting cloud migration, DevSecOps, container security, and automation initiatives.</li><li>
Support incident response investigations by providing engineering expertise, log analysis, root cause analysis, and remediation recommendations.</li><li>
Collaborate with cybersecurity operations teams to develop detection logic, security use cases, automated workflows, and threat response procedures.</li><li>
Perform system security engineering activities throughout the system development lifecycle (SDLC) and support Authority to Operate (ATO) initiatives.</li><li>
Develop and maintain security architecture roadmaps, engineering plans, and technology modernization strategies.</li><li>
Perform security engineering analysis of enterprise applications, APIs, databases, cloud services, and network infrastructures.</li><li>
Support cybersecurity compliance efforts related to NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA guidance, and federal cybersecurity mandates.</li><li>
Provide technical leadership and mentoring to junior cybersecurity engineers, SOC personnel, and technical staff.</li><li>
Prepare technical reports, engineering documentation, executive briefings, and operational recommendations.</li><li>
Research emerging cyber threats, adversary tactics, and evolving security technologies to improve enterprise defense capabilities.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Systems Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 10 years of experience supporting cybersecurity engineering, cybersecurity operations, enterprise security architecture, or SOC environments.</li><li>
Demonstrated experience designing and implementing enterprise cybersecurity architectures and engineering solutions.</li><li>
Hands-on experience with SIEM, SOAR, EDR, IDS/IPS, firewalls, vulnerability management, IAM, cloud security, and security automation technologies.</li><li>
Strong knowledge of NIST cybersecurity frameworks, federal security standards, and Zero Trust Architecture principles.</li><li>
Experience supporting Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network infrastructures.</li><li>
Experience performing system hardening, secure configuration management, and vulnerability remediation.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting RMF, ATO, continuous monitoring, and federal cybersecurity compliance activities.</li><li>
Strong analytical, troubleshooting, technical writing, and communication skills.</li><li>
Ability to present technical findings and cybersecurity recommendations to executive leadership and technical stakeholders.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
GIAC Certified Enterprise Defender (GCED)</li><li>
GIAC Security Expert (GSE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA Security+</li><li>
CompTIA CySA+</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Cybersecurity Architect Expert</li><li>
Cisco Certified CyberOps Professional</li></ul><p>
</p><p>Q92uPhlSIK</p></div>

SBA - Cybersecurity Engineer - Sr

Creative Information Technology India

<div></div><div><div><div><div><div><div><b>About us<br>
</b></div></div><div><div>Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.<br>
</div><div></div><br>
<div>Join us in driving growth and seizing new business opportunities.<br>
</div></div></div><br>
<div><div><div><b>Role and Responsibilities<br>
</b></div></div><div></div><br>
<div><div><b>Vulnerability SE I: </b>This role performs the function of a system engineer level I that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE I role will primarily be responsible for working with the vulnerability management system to identify specific vulnerabilities to be remediated, research the correct remediation configuration and develop or update dashboards within the vulnerability management system to track remediation. The position may also assist a system engineer level II and the cybersecurity team in developing, deploying, and validating specific deployment scripts, automations, and/or installer packages to remediate specific vulnerabilities.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Research and identify specific configurations to remediate identified vulnerabilities.
</li><li>Work with the System Engineer II to develop automations, scripts, deployment packages, and/or customized installers to remediate vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Familiar with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience working with client management platforms e.g. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Knowledge of PowerShell, VBScript, and/or batch scripting.
</li>Knowledge of security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public platforms.<br>
<li>
</li></ul><div></div><br>
<div><b>Vulnerability SE II: </b>This role performs the function of a system engineer level II that will support the city&rsquo;s cybersecurity, end user computing, and core engineering teams. This role will directly work with the city&rsquo;s cybersecurity team to review, prioritize and remediate identified vulnerabilities related to Microsoft Windows, Microsoft Office, and related ancillary software. The SE II role will primarily be responsible for working with the vulnerability management system and system engineer I to remediate identified vulnerabilities, develop deployment objects, deploy remediations and correct any existing vulnerability deployment objects. The role will work with the city&rsquo;s cybersecurity team to develop communications and follow city requirements with regards to change management.
</div><ul><li>Work with the City&rsquo;s vulnerability management system to identify, review and track vulnerabilities and associated remediations.
</li><li>Develop Active Directory group policies, automations, scripts, deployment packages and/or customized installers to remediate vulnerabilities.
</li><li>Assist in the identification and research of remediation configurations for identified vulnerabilities.
</li><li>Perform other job duties requiring skills, knowledge and physical requirements as demanded by those duties described or less. Individual assignments will be determined by the supervisor based on then current workloads and department needs.
</li><li>Knowledge of principles of cybersecurity best practices and concepts.
</li><li>Experience with database, network, virtualization and OT operations, concepts, and design.
</li><li>Experience with evaluating vulnerability and threat information to assess, measure, and prioritize mitigations based on risk.
</li><li>Experience with client management platforms i.e. Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, PatchMyPC, Workspace One, etc.
</li><li>Experience with PowerShell, VBScript, and/batch scripting.
</li><li>Experience working with Microsoft Active Directory and Active Directory Group Policies
</li><li>Experience working with Microsoft Entra.
</li>Experience with security architecture and security best practices for AWS, Azure, Google Cloud, and/or other public cloud platforms.<br>
<li>
</li></ul></div></div><br>
<div><div><div><b>Minimum Qualification<br>
</b></div></div><div><div><b>Minimum/Special/Additional Requirements Vulnerability SE I:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus two (2) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to six (6) years in fields utilizing the knowledge, skills and abilities in technology systems, systems 3 functions and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator or Programmer Analyst.
</li>May be required to have a current and valid driver&rsquo;s license.<br>
<li>
</li></ul><div></div><div><b>Vulnerability SE II:
</b></div><ul><li>Requires a Bachelor&rsquo;s Degree in an Information Technology related field plus four (4) years of professional IT experience; OR any combination of education (above the high school level) and/or professional progressive IT experience equivalent to eight (8) years in fields utilizing the knowledge, skills, and abilities in technology systems, systems 3 functions, and systems capabilities; and associated with such positions as Systems Engineer, Network Engineer, Database Administrator, or Programmer Analyst.
</li><li>May be required to have a current and valid driver&rsquo;s license.</li></ul></div></div></div></div></div>

Senior Vulnerability Systems Engineer – Virginia Beach, VA

<div>
 <p>
  <strong>
   Senior System Engineer (Infrastructure &amp; Cloud / Middleware Support)
  </strong>
 </p>
 <p>
  <strong>
   Job Description:
  </strong>
 </p>
 <p>
  We are looking for a highly skilled Senior System Engineer to design, implement, and support complex IT infrastructure and enterprise systems. The role involves working across cloud platforms, virtualization, middleware, and production environments to ensure high availability, performance, and security.
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Design, implement, and manage enterprise IT infrastructure (cloud, on-prem, hybrid)
  </li>
  <li>
   Administer and support Linux, Windows, and UNIX-based environments
  </li>
  <li>
   Manage virtualization platforms (VMware, Proxmox, Hyper-V, etc.)
  </li>
  <li>
   Deploy, configure, and support middleware and application platforms (e.g., WebSphere, IBM stack)
  </li>
  <li>
   Monitor system performance using tools like Zabbix, Datadog, New Relic, APM tools
  </li>
  <li>
   Handle incident, problem, and change management in SLA-driven environments
  </li>
  <li>
   Act as L2/L3 escalation point for complex technical issues
  </li>
  <li>
   Support cloud environments (AWS, GCP, Azure, OpenShift)
  </li>
  <li>
   Implement and manage backup &amp; recovery solutions
  </li>
  <li>
   Automate tasks using scripting (Bash, YAML, Ansible, etc.)
  </li>
  <li>
   Collaborate with internal teams and external stakeholders across multiple regions
  </li>
  <li>
   Ensure system security, compliance, and high availability
  </li>
  <li>
   Participate in on-call rotations and production support
  </li>
 </ul>
 <p>
  <strong>
   Job Requirements
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field
  </li>
  <li>
   2 to 3 years of experience in: Systems Engineering / Infrastructure - Cloud or Middleware Support - Enterprise IT environments
  </li>
  <li>
   Systems &amp; OS:
  </li>
 </ul>
 <p>
  Linux (RedHat, CentOS, SUSE)
 </p>
 <p>
  Windows Server / UNIX (AIX is a plus)
 </p>
 <p>
  Cloud &amp; Platforms:
 </p>
 <p>
  AWS / GCP / Azure
 </p>
 <p>
  OpenShift / container platforms
 </p>
 <ul>
  <li>
   Virtualization:
  </li>
 </ul>
 <p>
  VMware vSphere, Proxmox, Hyper-V
 </p>
 <p>
  Middleware (Strong Plus):
 </p>
 <p>
  IBM WebSphere, MQ, DB2, IHS, Cognos
 </p>
 <ul>
  <li>
   Monitoring &amp; Tools:
  </li>
 </ul>
 <p>
  Zabbix, Datadog, New Relic
 </p>
 <p>
  Ticketing tools (Jira, Service Desk, etc.)
 </p>
 <p>
  Networking &amp; Security:
 </p>
 <p>
  Firewalls (Fortigate, PFSense, etc.)
 </p>
 <p>
  Basic networking (CCNA level knowledge)
 </p>
 <ul>
  <li>
   Automation:
  </li>
 </ul>
 <p>
  Bash scripting, Ansible, YAML
 </p>
</div>


Senior System Engineer

Paragon Technology Group

<div>
 <br/>
 <p>
  Paragon is recruiting for a
  <strong>
   Security Engineer II
  </strong>
  to work on the PEO-T contract for USTRANSCOM.
 </p>
 <br/>
 <p>
  Security Engineer II provides technical support in the areas of vulnerability and risk assessment, network security, product evaluation, and security implementation. Understands Information Security Continuous Monitoring (ISCM) concepts, security automation, and risk dashboarding tools. Must adhere to USTRANSCOM processes and procedures to identify and respond to risk while supporting efficient, accurate Assessment &amp; Authorization (A&amp;A) reporting to facilitate ongoing authorizations, secure release deployments, modernizations, migrations, and overall security enhancements. A high-level of autonomy is required for this role. Capable of defining solution recommendations and working with management to improve efficiency in processes and procedures. Capable of communicating technical details effectively within their assigned Program Management Offices (PMOs), translating complex security risks into operational or business impact for leadership and non-technical stakeholders. Effective communication skills and willingness to collaborate with peers and management are critical to success. May be asked to provide supplementary support to additional PMOs within the contract purview.
 </p>
 <br/>
 <p>
  <strong>
   Tasks
  </strong>
  &nbsp;include, but are not limited to, the following:
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Reviews evolving NIST requirements to support risk assessment activities associated with the affiliated system requirements and specifications (execution, mapping, and compliance tracking).&nbsp;
  </li>
  <br/>
  <li>
   Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated and conducts follow-up risk assessment to ensure proper secure coding practices and STIG/SRG implementation are being built-in/enforced to the greatest extent possible.&nbsp;
  </li>
  <br/>
  <li>
   Collaborates closely with government customers to develop appropriate POA&amp;Ms and support risk acceptance activities as needed to support risk management processes. Reviews evolving National Institute of Standards and Technology (NIST) requirements to support risk assessment activities associated with the affiliated system requirements and specifications (execution, mapping, and compliance tracking).
  </li>
  <br/>
  <li>
   Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated and conducts follow-up risk assessment to ensure proper secure coding practices and Security Technical Implementation Guide&nbsp;(STIG)/Security Requirements Guide (SRG) implementation are being built-in/enforced to the greatest extent possible.&nbsp;
  </li>
  <br/>
  <li>
   Collaborate closely with government customers to develop appropriate Plan of Action and Milestones (POA&amp;Ms) and support risk acceptance activities as needed to support risk management processes.
  </li>
  <br/>
  <li>
   Responsible for designing and implementing solutions for protecting confidentiality, integrity, and availability of sensitive information.
  </li>
  <br/>
  <li>
   Provides technical evaluations of IT systems and assists with making security improvements.
  </li>
  <br/>
  <li>
   Participates in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization.
  </li>
  <br/>
  <li>
   Conducts security product evaluations, and recommends products, technologies and upgrades to improve the organization&rsquo;s security posture.
  </li>
  <br/>
  <li>
   Conduct testing and audit log reviews to evaluate the effectiveness of current security measures.
  </li>
  <br/>
  <li>
   Participates in team initiatives including the drafting of deliverables and peer reviews of others&rsquo; products.
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Experience developing/reviewing system authorization documentation (family plans and supplementary artifacts) in accordance with Department of War (DoW) implementation of the Risk Management Framework (RMF)
  </li>
  <br/>
  <li>
   Experience participating in Technical Interchange Meetings (TIMs) on a wide range of Program Management Office (PMO) security engineering topics
  </li>
  <br/>
  <li>
   Experience participating in acquisition program engineering milestone reviews
  </li>
  <br/>
  <li>
   Experience coordinating and collaborating with Development contract personnel in Security, System Administration, System Engineering, and other supporting roles to identify, document, and plan for security enhancement requirements and to resolve program security issues&nbsp;
  </li>
  <br/>
  <li>
   Experience coordinating and collaborating with inheritance providers (e.g., enterprise teams in USTRANSCOM, Surface Deployment and Distribution Command [SDDC], Air Mobility Command [AMC], Defense Information Systems Agency [DISA] Security Office, etc.) to determine hybrid security requirements and established appropriate inheritance relationships using tools provided
  </li>
  <br/>
  <li>
   Experience performing security activities to maintain authorization of PMO programs (e.g., categorization, control selection, evidence collection and audit, risk assessments, reporting, security impact assessments affiliated with change management practices, Incident Response (IR)/Contingency Plan (CP) Exercise Support, Federal Information Security Management Act (FISMA) Reporting, Continuous Monitoring, etc.)
  </li>
  <br/>
  <li>
   Experience using DoW Enterprise Mission Assurance Support Service (eMASS) system&nbsp;
  </li>
  <br/>
  <li>
   Experience providing support to ensure PMO systems are designed, developed, and deployed in accordance with applicable Executive Orders, Federal Policy, DoW regulations, USTRANSCOM requirements, and commercial best practice
  </li>
  <br/>
  <li>
   Experience reviewing vulnerability scans using Assured Compliance Assessment Solution (ACAS)/Nessus, analyzing outputs to identify vulnerabilities, recommending mitigation and remediation actions, ingest actions in eMASS
  </li>
  <br/>
  <li>
   Experience supporting the Government Customer through critical review of documented DISA STIGs/SRGs, providing technical feedback and recommendations to customer for areas of improvement in reporting accurate qualitative results, and ingesting final product in the government-supplied tool to support risk assessment of the NIST controls.
  </li>
  <br/>
  <li>
   Experience generating, sustaining, extending (when appropriate), and reporting status associated with POA&amp;M requirements
  </li>
  <br/>
  <li>
   Experience conducting and evaluating security testing activities including security assessments and audits
  </li>
  <br/>
  <li>
   Experience supporting operational security activities (e.g., risk mitigation, host security, encryption, intrusion detection, Virtual Private Network [VPN] implementations, and viral detections)
  </li>
  <br/>
  <li>
   Experience with security lockdown and/or hardening of servers and network devices
  </li>
  <br/>
  <li>
   Ability to coordinate overall security strategy with multiple agencies, Authorizing Official (AO) representatives
  </li>
  <br/>
  <li>
   Ability to coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues
  </li>
  <br/>
  <li>
   Experience recommending changes to network and security architecture to improve security posture and meet operational performance requirements
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <strong>
   Required Education/Certification
  </strong>
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Must be a US Citizen with an active DoW Secret, or higher, clearance
  </li>
  <br/>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent Information Technology academic studies
  </li>
  <br/>
  <li>
   Active IAM II Certification in Good Standing (e.g., ISC2 CGRC [formerly CAP], CompTIA Security X [formerly CASP+CE], ISACA CISM, ISC2 CISSP (or associate), GIAC GSLC, EC-Council CCISO)
  </li>
  <br/>
  <li>
   1+ years of Security Engineering experience as Information Systems Security Officer (ISSO), Information Systems Security Manager (ISSM), Security Controls Assessor (SCA), Cyber Security Analyst/Engineer
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  <strong>
   What Success Looks Like
  </strong>
 </p>
 <br/>
 <p>
  Success in this role is demonstrated by clearly defined, traceable requirements that reflect validated operational needs; well-facilitated stakeholder forums that drive timely decisions; and functional designs that enable development teams to deliver compliant, mission-aligned capabilities. The Analyst is trusted by government leadership as a reliable integrator across Services, Agencies, and functional domains.
 </p>
 <br/>
 <p>
  <strong>
   How the Work Gets Done at Paragon
  </strong>
 </p>
 <br/>
 <p>
  At Paragon, work is executed through disciplined collaboration, accountability to mission outcomes, and respect for government processes. Analysts lead with preparation and clarity, facilitate structured decision-making forums, and ensure requirements are governed, documented, and traceable from operational need through delivery. The focus is on predictable execution, transparency, and stewardship of government resources.
 </p>
 <br/>
 <p>
  <strong>
   Working Conditions
  </strong>
 </p>
 <br/>
 <p>
  Work is primarily performed in a professional office or government facility environment.
 </p>
 <br/>
 <p>
  Position may require participation in classified discussions consistent with clearance level.
 </p>
 <br/>
 <p>
  Collaboration with geographically dispersed stakeholders is expected.
 </p>
 <br/>
 <p>
  Standard business hours with occasional schedule flexibility to support mission needs.
 </p>
 <br/>
 <p>
  <strong>
   Why Paragon
  </strong>
 </p>
 <br/>
 <p>
  Paragon Technology Group delivers mission-critical outcomes through disciplined execution, professional accountability, and respect for the trust placed in us by our government partners. Team members are empowered to own their work, contribute meaningfully to national defense missions, and operate in an environment that values clarity, predictability, and long-term stewardship.
 </p>
</div>


Security Engineer II

CareCloud

<div></div><div><div>Department: INFORMATION TECHNOLOGY Experience: 3 YearsDeadline: May 30, 2026Location: Rawalpindi, Pakistan</div><div><h4 class="jobSectionHeader"><b>
Job Profile</b></h4><p></p><div><p><b>
Job Summary:</b></p>
<p>We are seeking an experienced DevOps Engineer to design, build, and maintain scalable infrastructure and automated deployment pipelines. The role requires strong expertise in containerization, cloud platforms, and secure software delivery practices.</p>
<p>_________________________________________________________________________________________________________________________________________________</p>
<p><b>Responsibilities:</b></p>
<ul><li>Design, deploy, and manage containerized applications using Docker and orchestrate them with Kubernetes (EKS / AKS / GKE).</li>
<li>Build, maintain, and optimize CI/CD pipelines using Azure DevOps, Jenkins, GitLab CI, or GitHub Actions for fast and reliable software delivery.</li>
<li>Manage and automate multi-cloud infrastructure on AWS, Microsoft Azure, and Google Cloud Platform (GCP) using Infrastructure-as-Code tools (Terraform, ARM templates, CloudFormation).</li>
<li>Administer and maintain IIS (Internet Information Services) for hosting and managing .NET/web-based applications, including configuration, SSL, application pools, and performance tuning.</li>
<li>Configure, monitor, and fine-tune Web Application Firewalls (WAF) &mdash; AWS WAF, Azure WAF, Cloudflare, or F5 &mdash; to protect applications from OWASP Top 10 threats.</li>
<li>Implement secure coding and DevSecOps practices, including vulnerability scanning (SAST/DAST), secrets management, container image scanning, and policy-as-code.</li>
<li>Write and maintain Shell / Bash / PowerShell scripts for automation, deployments, and system administration.</li>
<li>Administer and troubleshoot Linux (RHEL, CentOS, Ubuntu) and Windows Server environments in production.</li>
<li>Monitor system health using tools such as Prometheus, Grafana, ELK, Azure Monitor, and CloudWatch; lead incident response and root cause analysis.</li>
<li>Collaborate with development, QA, and security teams to streamline release cycles and enforce compliance standards.</li>
</ul>
</div><p></p><div><h4 class="jobSectionHeader"><b>Tools / Skills</b></h4><p></p><div><p><b>
Required Skills:</b></p>
<ul><li><ul><li>Strong proficiency in Docker, Kubernetes, and container orchestration.</li></ul></li>
<li><ul><li>Proven experience building CI/CD pipelines, particularly with Azure DevOps.</li></ul></li>
<li><ul><li>Solid working knowledge of AWS, Azure, and GCP services and architectures.</li></ul></li>
<li><ul><li>Experience with IIS administration and hosting web applications.</li></ul></li>
<li><ul><li>Hands-on experience configuring and managing WAF solutions and application-layer security.</li></ul></li>
<li><ul><li>Expertise in Linux administration and Shell / PowerShell scripting.</li></ul></li>
<li><ul><li>Strong understanding of secure code practices, DevSecOps principles, and common vulnerability frameworks (OWASP, CIS Benchmarks).</li></ul></li>
<li><ul><li>Familiarity with monitoring/logging tools (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch).</li></ul></li>
<li><ul><li>Proficiency with Git and version control workflows.</li></ul></li>
</ul>
<p><b>Preferred Skills:</b></p>
<ul><li>Cloud certifications such as AWS Certified DevOps Engineer, Microsoft Certified: DevOps Engineer Expert, or Google Professional Cloud DevOps Engineer.</li>
<li>Kubernetes certifications (CKA / CKAD).</li>
<li>Experience with configuration management tools (Ansible, Chef, Puppet).</li>
<li>Exposure to Agile/Scrum environments and ITIL practices.</li>
</ul>
<p><b>Required Qualification:</b></p>
<ul><li>3&ndash;5 years of hands-on DevOps / SRE / Cloud Engineering experience.</li>
<li>Bachelor's degree in Computer Science, Software Engineering, or a related field.</li></ul></div></div></div></div><p></p>
<br><div><h5 class="jobSectionHeader"><b>Additional Information</b></h5><div><div><p><b>
Total Position(s)
</b></p><p>3 Positions</p></div><div><p><b>
Gender</b></p><p>
Does not matter</p></div><div><p><b>
Minimum Education</b></p><p>
Bachelors Degree</p></div><div><p><b>
Degree Title</b></p><p>
Bachelors Degree</p></div><div><p><b>
Shift</b></p><p>
Evening</p></div><div><p><b>
Nature of Job</b></p><p>
Work From Office</p></div></div></div>

Devops Engineer

Search 10000+ Information system security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.