ID 2018-1171 The Splunk Engineer will drive complex security-focused deployment of Splunk while working side by side with personnel to solve unique issues/integrations across a variety of departments. Responsibilities Work with our customers to understand their needs to facilitate the growth of our security posture and requirements Design and implement dashboards and reports; create rapid prototypes Leverage previous experiences, share best practices and create innovative solutions to push user adoption and maximize the value of Splunk within the organization Architect, deploy, document, and maintain integration between Splunk and external tools Maintain a list of system, application, and other changes and provide appropriate documentation. Build reports and dashboards within Splunk for INFOSEC and other departments Architect the generation, pulling, parsing, and directing of data from external sources into Splunk Monitor the health of data feeds ingested into Splunk Design and configure data alerting and summarization within Splunk Develop and maintain CIM deployment and integration within Splunk Provision and maintain segmented visibility in Splunk for appropriate stakeholders (system owners, etc) Qualifications Ability to work in a high-pressure environment with changing priorities. 3-5 years in architecture, development, deployment, and administration of Splunk Enterprise in Security.  Demonstrable knowledge of Splunk architecture and best practice Understand methods of collection, logging windows, filtering, and tuning baselining data. Understanding detection methods and relevant long analysis for abnormalities, attacker pattern, and behaviors 3-5 years of experience with data analysis, logging solutions, system and network monitoring, and technical consulting Experience in the use of network monitoring tools with a strong understanding of network protocols 2+ years’ experience with scripting languages (bash), application development (Java, Perl, Python, .NET, PowerShell), databases and analytical tools Ability to communicate effectively, both orally and in writing, with information technology professionals, and technical and non-technical users; Ability to perform security analysis, development and implementation of security policies, standards, and guidelines Ability to quickly explore, examine and understand complex security problems and how it affects a customer’s business 3-5 years with both the Unix and Windows operating systems Ability to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to help deliver solutions Self-motivated and self-educating, yet willing and able to work collaboratively Bachelor’s degree in related field (i.e., Computer Science, Information Systems Management) and a minimum of three (3) years of relevant IT security related work experience  In lieu of a Bachelor’s degree, proposed staff should have a total of five (5) or more years of IT experience. Certified Information Systems Security Professional (CISSP) is preferred. Required: Active Public Trust Clearance or ability to pass an equivalent criminal background check

ID 2019-1178 erad Digital Integrity - TDI requires a Cyber Security Analyst (CSA) with an Active Secret Clearance to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies within DIACAP C&A and RMF A&A.   Responsibilities Security Architecture analysis and compliance assessment with DoD/DON required configurations Security Operations tools architecture SME, integrator, and operations interface Support required selected sample audits of IAVA, STIGs and CTOs to enforce compliance Firewall and Boundary audit and configuration management Conduct security posture and threat analysis given current security infrastructure, configuration, and employment Coordinate/Collaborate with Ech I/II/III stakeholders and shepherd owners through cybersecurity work flow Qualifications Minimum six (6) years’ experience in Information Systems Operations (ISO), Information Assurance (IA)/Cyber Security (CS) or Information Systems Management Minimum four (4) years’ experience in systems, networks and application analysis applicable to A/CS, INFOSEC, DIACAP, and RMF Possess one of the following from the DoD 8570 IAT Level II/CSWF Designation code 61 Intermediate /Journeyman: Education: Bachelor Degree from accredited University  OR  CNSSI 4012-4016 Certificate or NDU CISO certificate Military training: NEC 2780  OR   2779 or 2781 Certifications: CCNA  OR  CAP  OR  Security + (CE)  OR  ENSA Active US Secret Security Clearance Required

ID 2019-1183 TDI is seeking candidates that will be responsible for researching, examining, reporting, and analyzing security incidents and related reports. Capable of analysis of malicious codes, vulnerable software, security tools, and patches. Develops technical content for technical documents, including content such as incident/vulnerability notes, advisories, and technical guidelines. Works on the development of white papers describing best practices for system and network administrators, technology managers, and other technology professionals. May support development of Certification and Accreditation documentation. Responsibilities Experience executing cyber defense activities to include but not limited to intrusion detection/prevention, incident response, network/application security monitoring, vulnerability management and providing technical security operations support. Experience working with and/or configuring network and host-based security applications and tools such as SPLUNK, Symantec, SCCM, Satellite, BigFix, FirePower, Nessus, or Qualys. Experience working with and/or configuring Networking and Security products by Cisco, Juniper, and/or Palo Alto Networks. Demonstrated competency working in a Linux environment. Qualifications Use of Technical Cybersecurity tools and techniques to detect vulnerable systems or configurations Plan and execute processes and procedures to improve cybersecurity posture for the enterprise Research, examine, report, and analyze security incidents and related reports Must have the ability to present complex, technical information to both technical and non-technical audiences Good customer service skills Team player 1-3 years' of experience

ID 2019-1182 As part of a team, the Senior Risk Management Lead is responsible for strategic and operational effectiveness assessments, ensuring systems perform as expected, assessing security risk, and operational effectiveness of the project or program. Responsibilities • Support NIST Risk Management Framework (RMF) based Assessment and Authorization (A&A) activities • Monitor and prepare required actions and documents pertaining to the A&A of the system throughout its lifecycle, to include security evaluation findings and residual risks • Conduct comprehensive reviews of security authorization documents to ensure the appropriate NIST security guidelines were used during the assessments and the selections of security controls are relevant to the confidentiality, integrity, and availability of the systems • Ensure required security authorization activities are completed and the results documented • Review and process Interconnection Security Agreements (ISAs), Policy Waivers, Approval to Test (ATT), and Interim Approval to Operate (IATO) documents • Review IS security plans and other A&A documents for all applications to determine if mandated procedures and tasks are followed • Assist the Government in preparing a written justification, when appropriate, to obtain a written waiver of policy for mandated security features. • Ensure that assigned systems/applications meet the minimum A&A standards before a recommendation is made to the CISO for Authorization. • Attend Compliance Team meetings and provide reports on the status of requested activities in the approved format • Update and upload all pertinent information for all systems within the FISMA portfolio repository • Update relevant FISMA Compliance SOPs on a quarterly basis • Provide guidance and support for all assigned Security Authorization activities. • Conduct Security Authorization entrance conferences. • Develop a preliminary Security Assessment Report (SAR) • Create the CSS Plan, including rules of engagement (ROE) for each major application, information system, or GSS undergoing authorization. • Document the results of the security control assessment, including recommendations for correcting any weaknesses or deficiencies in the controls, analyze findings, and develop risk mitigation techniques to address weaknesses • Conduct assessments of any required security controls Qualifications • Must have 5-7 years of relevant experience as a cybersecurity control assessor • U.S. Federal Information Assurance (IA), and the Risk Management Framework (RMF) • Related Best Practices from FedRAMP, NIST, and other sources • IT Security Engineering Life Cycle and Release Management • Assessment and Authorization (A&A), Certification and Accreditation (C&A), FISMA, FedRAMP, NIST SP 800-53, RMF • Risk and Issue Management and Mitigation • Excellent verbal and written communication skills • Ability to interface with customers at all levels of an organization and prepare presentations for senior executives • Demonstrated leadership and team development skills • Demonstrated success consulting at the senior management level • Superior time management, planning, and ability to scope prospective engagements, develop proposals and project plans • Secret security clearance required Work authorization: • United States (Required

US-VA-Dahlgren | US-VA-Dahlgren ID 2019-1185 TDI is seeking system administrator candidates that will be responsible for assisting NSWCDD personnel with NMCI issues, placing and tracking NMCI seat orders, submitting move/add/change (MAC) requests, and managing users within Navy Enterprise Tool (NET) and Active Directory (AD). Responsibilities Assist users with NMCI issues to determine appropriate next-steps for resolution Place and track NMCI seat orders and monitor delivery of assets Take delivery of new NMCI hardware for further distribution to NSWCDD personnel Assist with the distribution of IT assets transferred between the Dahlgren and Dam Neck sites Coordinate NMCI asset deployment to new users Provide NMCI and legacy equipment support to users by submitting move/add/change (MAC) requests Manage new user accounts requests in the Navy Enterprise Tool (NET) and Active Directory (AD) Assist with NMCI Technical Refresh efforts Assist users with the cleanup of cybersecurity incidents and spillages Manage all aspects of NMCI classified assets, accounts and SIPRNet tokens Support IT data calls for DoD, Navy, NAVSEA, NETWARCOM, and NSWCDD as required to include researching information for routine and complex reports Support scheduled meetings and High Velocity Learning (HVL) events as required Coordinate and meet with offsite vendors, NMCI subcontractors, and industry technicians to coordinate on-site initiatives as well as liaison between Base Operations Technicians and Site Managers Perform basic troubleshooting to assist users with NMCI asset and peripheral issues Validate employee NMCI services invoices Assist with IT initiatives as required Qualifications Knowledge and understanding of NMCI/NGEN contract Familiarity with Navy Enterprise Tool (NET) and Active Directory (AD) Understanding of move/add/change (MAC) request process Exceptional communication skills, both verbally and written Strong attention to detail Ability to work alone and in team environments Critical thinking skills Flexibility/Adaptability 5-7+ years of experience Security + CE Secret Clearance

ID 2019-1193 TDI is seeking an Active Directory Engineer (Senior level focusing on Active Directory Management) to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.   Responsibilities Provide authentication and related solutions including Microsoft Active Directory and Active Directory Federation Services. Monitor and analyze architecture, communication, policies, and protocols from a cybersecurity perspective. Identify potential and actual threats inside and outside an organization. Provide recommendations to augment the information technology security posture of organizations. Identity Access Management services and related solutions. Identity as a Service and related solutions. Support enterprise mobility management. Support large, cross functional, globally distributed and complex projects. Perform other official duties as assigned. The Senior Active Directory Engineer shall possess: Minimum of five years of experience administering active directory and assisting enterprises with cybersecurity, authentication, enterprise mobility management, identity and access management services, and related technologies. This would include three years technical experience with identity management access or privilege access management. Experience with Microsoft License Management. Experience working with cloud management (AWS, Azure, etc.). A minimum of two (2) years of experience with scripting languages such as VBScript, PowerShell, Bash, Perl. Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark. Demonstrated knowledge of NetWitness, FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls, StealthWatch, ThreatConnect, O365, Bro, AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus. Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience   Certifications Required: Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

US-VA-Manassas ID 2019-1194 TDI is seeking  a Cybersecurity Architect to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.       Responsibilities   Analyze user needs and requirements to plan system architecture supporting cybersecurity operations.    Collaborate with system developers and users to select appropriate design solutions or ensure the compatibility of system components.    Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment.    Design system architecture or system components required to meet user needs.    Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition lifecycle.    Employ secure configuration management processes.    Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.    Evaluate current or emerging technologies to consider factors such as cost, security, compatibility, or usability.    Identify the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.    Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.    Plan system implementation to ensure that all systems components can be integrated and aligned (e.g., procedures, databases, policies, software, and hardware).    Provide input on security requirements to be included in statements of work and other appropriate procurement documents.    Provide input to the Risk Management Framework process activities and related documentation.    Translate proposed technical solutions into technical specifications.    Propose new technologies or procedures that could be used to advance the ability to detect and mitigate malicious activity.    Perform other official duties as assigned   Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation   Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods   Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems   Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark.    Demonstrated knowledge of  NetWitness , FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls,  StealthWatch , ThreatConnect, O365, Bro,   AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus Exceptional communication skills, both verbally and written   Strong attention to detail   Ability to work alone and in team environments   Critical thinking skills   Flexibility/Adaptability Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience     Certifications Required: Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

ID 2019-1196 TDI is seeking  a  Mobile Device Security Analyst (Mid-level)  to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.       Responsibilities   Provide expert cybersecurity knowledge of enterprise mobility systems to business and technology teams and facilitates the collaborative development of the security of the mobile technology strategy, standards, roadmaps, and practices.    Determine the most efficient methodology and path for securing the mobile infrastructure to include assessing technical configurations and security settings for mobile devices.    Understand threats to mobile ecosystems and have the ability to architect security solutions in support of mobile environments.    Assess and integrate iOS, Android phones, and tablets within an integrated mobile threat platform (MTP) and mobile device management (MDM) environment.    Review applications and provide recommendation on whether or not applications should be approved for use on the mobile platform   Assess security risks for integrating enterprise and commercial mobile apps into the mobile environment.    Evaluate, recommend, and support operational changes, enhancements, and modifications to securing the mobile environment.    Perform other official duties as assigned.   Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation   Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods   Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems   Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark.    Demonstrated knowledge of  NetWitness , FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls,  StealthWatch , ThreatConnect, O365, Bro,   AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus. Exceptional communication skills, both verbally and written   Strong attention to detail   Ability to work alone and in team environments   Critical thinking skills   Flexibility/Adaptability Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience   Certifications Required: Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

ID 2019-1198 TDI is seeking  a  Security  Engineer ( Senior  level  focusing on cloud technologies )   to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.       Responsibilities   Partner with cloud team to implement and configure secure cloud solutions for IaaS, PaaS and SaaS.   Work with development teams to develop secure cloud practices and integrate into the DevOps process.    Design and implement AWS, Office365, Azure and GCP security strategy that is consistent with USHR security policies and procedures.    Engineer, implement and administer CASB MVISION by McAfee.    Engineer, implement and administer new cloud security tools.    Assess, implement and automate technical controls required to meet security, compliance, and audit requirements.    Understand outputs of CASB, GitLab, Terraform and additional cloud security tools.    Develop analysis, metrics and trends based on cloud security tools.   At least three years of experience deploying security tools in large cloud environments.    At least three years performing security engineering, steering cloud configurations and services towards industry-leading security.    understand software installations, systems monitoring and troubleshooting, account management, and overall efforts to minimize system downtime.   Perform hands-on security engineer support for CASB and USHR cloud tenants in IaaS, PaaS and SaaS.    Set-up and use; vulnerability scanning tools, SIEM, malware analysis, cloud native/3rd party security capabilities.    Assist and train team members in the use of cloud security tools and the resolution of security issues. Propose new technologies or procedures that could be used to advance the ability to detect and mitigate malicious activity.   Assess existing cloud implementations, identifying security issues and prioritizing fixes.    Provide mitigation recommendations to reduce identified security risks.    Perform other official duties as assigned.   Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation   Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods   Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems   Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark.    Demonstrated knowledge of  NetWitness , FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls,  StealthWatch , ThreatConnect, O365, Bro,   AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus. Exceptional communication skills, both verbally and written   Strong attention to detail   Ability to work alone and in team environments   Critical thinking skills   Flexibility/Adaptability Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience   Certifications Required: Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

ID 2019-1199 US-DC | US-DC TDI is seeking  a  Security Engineer (Senior level focusing on Privilege Access Management )   to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.       Responsibilities Minimum five years of experience administering active directory and assisting enterprises with cybersecurity, authentication, enterprise mobility management, identity and access management services, and related technologies.   This would include three years technical experience with identity management access or privilege access management.    Monitoring and analyzing architecture, communication, policies, and protocols from a cybersecurity perspective.    Identifying potential and actual threats inside and outside an organization.     Providing recommendations to augment the information technology security posture of organizations.   Identity Access Management services and related solutions.    Identity as a Service and related solutions.    Enterprise mobility management.    Authentication and related solutions including Microsoft Active Directory and Active Directory Federation Services.    Planning, architecting, and executing/implementing identity solutions and strategies.    Technology standard documentation (requirements, design, test, and transition).    Documenting policies and procedures   Management and access governance software into clients' infrastructure and applications    Expereince with Centrify products IAM or PAM familiarity in one or more of the following areas:    Access Certification    Provisioning/De- Provisioning    Application On-boarding    Single Sign On    Identity Federation    Privileged Access Management    Multi-factor authentication    Conditional access    Experience in any of the Privileged Identity Management.   Support large, cross functional, globally distributed and complex projects.    Experience working with cloud management (AWS, Azure, etc.).    A minimum of two (2) years of experience with scripting languages such as VBScript, PowerShell, Bash, Perl.    Perform other official  d uties as assigned. Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation   Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods   Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems   Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark.    Demonstrated knowledge of  NetWitness , FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls,  StealthWatch , ThreatConnect, O365, Bro,   AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus. Exceptional communication skills, both verbally and written   Strong attention to detail   Ability to work alone and in team environments   Critical thinking skills   Flexibility/Adaptability Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience   Certifications Required: Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

ID 2019-1203 US-VA-Manassas TDI is seeking  a  Threat Intelligence Engineer  to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.   Responsibilities Proactively research emerging cyber threats.  Apply analytical understanding of hacker methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits.    Utilize experience analyzing and synthesizing information with other relevant data sources, providing guidance to analysts and operators, evaluating, interpreting, and integrating all sources of information, and fusing computer network attack analyses with available threat feed data.    Develop and maintain analytical procedures to meet changing requirements and ensure maximum operations.    Perform other official duties as assigned.   Demonstrated knowledge of Threat Connect or similar threat intelligence platform.    Knowledge of threat actors and campaigns related to government/legislative branch.     Experience with current and historical threat actor group Tactics, Techniques, and Procedures.    Prior experience performing incident triage and response to cyber incidents. Knowledge of Cyber Kill Chain, Diamond Model of Intrusion Analysis, MITRE ATTK, or other relevant network defense and intelligence frameworks.    Ability to communicate to team members and senior leadership both quantifiable and qualifiable cyber risk to the organization through operational briefings and threat intelligence reports.    In-depth knowledge of security systems and understands the life cycle of network threats, attacks, attack vectors, and methods of exploitation.    Ability to use in-depth knowledge to identify and present actionable intelligence to team members and senior leadership.    Experience with scripting languages (bash), application development (Java, Perl, Python, .NET, PowerShell,  VBscript ), databases and analytical tools.    Minimum Secret security clearance required. Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation   Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods   Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems   Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark.    Demonstrated knowledge of  NetWitness , FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls,  StealthWatch , ThreatConnect, O365, Bro,   AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus.   Exceptional communication skills, both verbally and written   Strong attention to detail   Ability to work alone and in team environments   Critical thinking skills   Flexibility/Adaptability   Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience   Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

ID 2019-1205 US-VA-Manassas TDI is seeking  a  Vulnerability Management Analyst (Mid-level )   to help ensure the continued operation of the systems that protect a client’s network against unauthorized access, modification of data, and malicious activity.  These systems require continuous management and monitoring to ensure they are functioning as expected and to analyze and respond to alerts as they occur.     Responsibilities Perform vulnerability scans and develop applicable vulnerability reports for House systems.    Analyze scan results and engage with stakeholders to resolve identified vulnerabilities; document exceptions, and false positives.    C ommunicate appropriate vendor and scan system recommended solutions as part of comprehensive remediation solutions.    Follow-up with owners to ensure remediation efforts are consistent with policy and escalate instances of noncompliance.    Experience operating vulnerability and compliance scanning tools such as  WebInspect , Tenable Nessus Security Center, Tripwire, etc.    T rack progress of vulnerability remediation with responsible stakeholders and support teams.    Perform deep-dive analysis of vulnerabilities leveraging data from various sources; analyze data sources and provide recommendations for optimal reports.    Perform configuration and deployment of vulnerability scanning and network assessment tools    Work with Cybersecurity staff to troubleshoot performance and connectivity issues with network scanning and security assessment tools.    Work with Cybersecurity staff to evolve the Security Operations continuous monitoring toolsets and reporting to provide better vulnerability insight.    Research vulnerability impact or remediation. Provide comprehensive analysis back to leadership.     Present vulnerability reports to cross-functional stakeholders, to include Cybersecurity leadership.    Perform other official duties as assigned   Qualifications Demonstrated experience and advanced knowledge of security systems analysis, testing, and documentation   Knowledge of virtual environments, network operating systems, mobile device environments, and data encryption methods   Demonstrated expertise in communication protocols, network operating systems, servers, firewall implementation, IPS/IDS systems, and advanced malware detection systems   Demonstrated knowledge of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark.    Demonstrated knowledge of  NetWitness , FireEye, Splunk, AWS Direct Connect, Checkpoint/Barracuda Firewalls,  StealthWatch , ThreatConnect, O365, Bro,   AWS/AZURE Security Onion, Gigamon, and VMware. Experience with scripting languages such as Perl a plus. Exceptional communication skills, both verbally and written   Strong attention to detail   Ability to work alone and in team environments   Critical thinking skills   Flexibility/Adaptability   Level of Education:   Bachelors or above Area(s) of Concentration :               Bachelor’s degree in computer related field plus 5 years of professional experience or equivalent work experience is required for each position. In lieu of a bachelor’s degree, proposed staff should have at least eight (8) years of Information Technology security experience   Certifications Required: Certifications Desired  / Preferred :    CISSP, GIAC, CCE, ECIH, CEH

ID 2019-1208 The Director of Finance will be responsible for the direction and management of the Finance and Contracts departments at TDI. Reporting to the CEO, the successful candidate will be a strategic thought leader who takes a hands-on and participative approach to all aspects of the function.  The candidate will lead and develop a team to support finance, contracts, pricing, and capture efforts. Play a critical role as a member of the corporate executive management team to develop and implement strategic plans. Responsibilities   Lead all aspects of people management for the Finance & Contracts team Develop, maintain and provide insightful financial metrics to the executive team including budgeting, projections, forecasts, contract waterfall & pipeline reporting, financial health, program-specific input, indirect expenses guidance, etc. Oversee company financial operations and responsible for all general ledger accounts; exercise decision-making authority and be wholly accountable for the function. Manage and develop payroll, accounts payable/receivable, monthly and annual financial closing and reporting Regularly communicate, on a formal and informal basis, program reviews, contract concerns, financial performance and risks, and management updates Support individual program-side contracts helping with tracking actual costs, hours and ODCs, developing ETCs, invoice reviews, and ensuring completion of all required contractual requests, particularly for managers of Services divisions in a Controller capacity Manage contracts administration to review, negotiate and execute on behalf of TDI. Escalate salient and risk discussion points to the CEO for collaborative review Implement policies and procedures relating to Finance operations Principal support for development of pricing strategies and responsible for Pricing as part of TDI’s proposal process, sometimes developing response-specific cost centers with forward pricing estimates Additional proposal support for RFP interpretation, contract clause risk determination, and negotiating teaming and other agreements Pipeline support for Business Development and Sales Vendor negotiations Participate in special projects and performing other tasks as assigned Responsibilities include: hiring, supervising, developing and training of staff and managing their performance. Qualifications Minimum of a BA, ideally with an MBA and/or CPA Ten + years of experience in government accounting, GAAP, audits, FAR contract administration, and government proposal pricing Extensive experience managing and delivering financial and administrative support services, primarily in a consulting environment, to government and private sector clients Expert at analyzing, interpreting and reconciling financial data Awareness of Capture and Proposal Management, including pricing and its implications Government procurement specifics and how they impact contracts and their execution Excellent communication and relationship building skills with an ability to prioritize, negotiate, and work with a variety of internal and external stakeholders Expert computer skills, including Office, with advanced proficiency in Excel and Deltek Proven responsibility for the quality and content of all financial data, reporting and audit coordination for either a division or significant program area Experience to streamline internal processes; e.g., expenses processing Commercial and/or Produce Sales experience a plus Principal Accountabilities / Objectives: Meet or exceed company financial goals in accordance with generally accepted accounting practices (GAAP) Support program management in the achievement of revenue and profitability goals for individual programs and contracts Achieve all financial and contractual responsibilities in accordance with GAAP, DCAA and FAR requirements Supporting Service Delivery’s completion of contract requirements within the negotiated terms Strategic goals as articulated in TDI’s strategic plans; e.g., retention goals, improving the TDI experience for all employees, and ensuring on-time completion of employee reviews

ID 2020-1212 Tetrad Digital Integrity is seeking SharePoint Designer/Developer candidates that will be responsible for working with clients to identify and develop SharePoint tool requirements using SharePoint 2013. Responsibilities Creating, customizing and maintaining a Plan of Action and Milestones (POAM) to guide the development effort Design/develop tools IAW the POAM Create, customize and maintain a code repository to support version control/back-up and historical reference Create, customize and maintain Internal and External test plans Creating and troubleshooting Microsoft SharePoint workflows using Microsoft SharePoint Designer Creating and maintaining SharePoint user groups and maintenance of SharePoint permissions Integration of Microsoft Office applications (Access, Word, Excel, PowerPoint) applications with Microsoft SharePoint Use of Microsoft Access queries to interact with and manipulate SharePoint lists and libraries. Creating, customizing and maintaining InfoPath forms Basic SharePoint branding using out of the box Microsoft SharePoint functionality Basic HTML coding, including use of javascript, jquery, CSS and XSLT Qualifications Prior experience as a SharePoint Designer/Developer using SharePoint 2010 or 2013 Prior experience using SharePoint Designer 2010 or 2013 Prior experience creating, customizing, and maintaining POAMs, code repositories, internal and external test plans for SharePoint tools Secret Clearance

ID 2020-1214 Join one of the most exciting cyber operations on the planet where TDI is helping to protect our customer from a volume of attacks not seen anywhere else. TDI is a 19-year old cybersecurity company whose services have led, supported and created cybersecurity initiatives across the globe and within all markets. We are now seeking a Program Manager, a critical role, to help ensure the continued effectiveness of our client’s cybersecurity operations. Our customer works to protect some of the nation's most critical assets - this is a terribly exciting environment and you can help ensure its cyber supremacy. The Program Manager will be an integral part of the client’s overarching security program, leading and managing our contractor workforce tasked to help assure the security, privacy, and integrity of their systems, networks, and IT assets. Join TDI where opportunity exists across different clients, technologies and environments – we are an exciting company with amazing cyber scenarios to explore.  Responsibilities People Leadership:  Lead a blended team of 15+ employees and contractors on all aspects of Management (from tasking through coaching).  Guide the team daily on a variety of technical and non-technical matters. Team has great potential to grow considerably in next year(s). Team Management:  Proactively identify problems or challenges, then define practical, realistic solutions.  Raise awareness of disparate operations or needs and work alongside the team and the client to identify a path forward.  Communication Provide both internal and client-facing communications that clearly articulate the health, status, and direction of The Program and associated tasks to successfully deliver. Generate reports, providing meaningful metrics to company leadership and our Customer Client Relations:  Manage all aspects of the relationship with our client.  Tasks include weekly status meetings with the Director of Information Security. Program Management: Conduct Internal Program Reviews; identify, manage, and mitigate program risks as they emerge. Accountable for all aspects of the Program including cost, schedule and delivery Lead all administrative matters for the team (i.e. timesheets, expenses, status reports, clearances, performance reviews, invoice reviews, etc.) Qualifications Program and Project Management experience Strong working knowledge of Cybersecurity principles; experience supporting client security programs and operations Ability to lead a team, especially a disparate one, of IT/Cyber professionals to deliver service excellence to the end client Communications skills, both verbally and written  Collaboration Leadership and management Critical thinking Flexibility and adaptability 5-8 years' of experience Experience in Cybersecurity, IT, Federal Contracts, Program Management Bachelors degree in Science or Engineering or above   Certifications Preferred: PMP, CISSP  

ID 2020-1215 The Vice President (VP) Services is responsible for the growth, development, management, and oversight of daily operations of the Service Delivery division. Reporting directly to the CEO, the responsibilities of this role pertain directly to new business development, contract management and execution, capture and proposal management, budgeting, staffing, employee development and management, customer relations, and other related corporate initiatives tied directly to implementing TDI’s Strategic Plan. Responsibilities GENERAL RESPONSIBILITIES Participate as a critical member of TDI’s executive management team Contribute to the development and implementation of corporate Strategic Plans, cascading TDI’s strategy/mission objectives throughout organization and staff Provide leadership, management, and execution oversight across Service Delivery to support the continued stability and growth of on-going programs, projects, and business development activities Regular formal and informal communications and program reviews with members of the executive team regarding contract status, risks, client relations, and management issues Identify new business opportunities and communicate to key stakeholders Serve as TDI point of contact and account manager for key clients Improve and maintain program controls and culture of disciplined metrics and accountability Continuously survey and ensure integration of customer input in delivery of TDI’s services GROWTH – Achieving Business Development Goals and Expanding TDI’s Customer Base Achieve Service Delivery Revenue and Sales goals by developing and executing account plans Oversee and provide guidance to the Service Delivery management team in support of growth objectives and related business development plans tied to their respective accounts Perform specific business development activities tied to existing programs/projects Develop and maintain a business opportunity pipeline to track and target business growth opportunities Lead specific proposal efforts as Capture Manager EXECUTION – Delivering Successful Outcomes and Increase Customer Satisfaction Define and drive performance measures to track Key Performance Indicators (KPIs) to measure the company’s performance and progress against TDI’s Strategic Goals Maintain and improve TDI’s Project Execution Lifecycle throughout contract performance across all programs within Service Delivery Perform customer relations management to include direct interaction with different contract, programmatic, and functional customers on a regular basis Establish and/or maintain business partnerships in both the Prime and Subcontractor capacity for assigned programs Work closely with other Corporate Support functions (Recruiting, Contracts, HR, Finance) Maintain full awareness of and manage all program elements with respect to cost, schedule, technical execution and delivery, and risk OUR PEOPLE – Develop Employees and Promote Excellence Collaborate with HR to support all Service Delivery staffing related activities Promote, oversee and monitor the development, upward mobility, & certification of employees Lead, support and drive all aspects of the employee performance review process Maintain annual retention goals for TDI personnel in Service Delivery Provide guidance and support to Program Managers as needed or required COMMUNICATIONS - Ensure clear and continuous interface across all aspects of the Division to ensure awareness and cooperation, heighten collaboration thus preventing surprises, and effectively engaging employees in remote or offsite locations Regular formal and informal communications and program reviews with Service Delivery directors regarding programs, customers, staff, financials, risks, and opportunities within their respective accounts Regular formal and informal communications and program reviews with CEO regarding Service Delivery Hold regular meetings with all Corporate Support elements (i.e., Recruiting, Contracts, HR, and Finance) to enable ongoing program execution and business development activities  STRATEGIC SUPPORT - Participate in and support other corporate initiatives that support TDI’s broader strategic objectives Assist in the development of the TDI Annual Strategic Plan Participate and advise on TDI issues as discussed in executive meetings Manage and support other Strategic Initiatives and Goals as assigned Oversee the continued development of TDI’s middle-tier by promoting other company initiatives to high-performing / high-potential employees Identify and cultivate areas of innovation within account programs and employee-base Qualifications Operational Program Management of programs or business units of $15M in size or more Experience managing and growing multiple programs at once Business development and capture management Budget/P&L Technical solutioning, particularly with the ability to extemporaneously articulate solutions and answers to a problem to the client Stratigic thinking Collaborative  Leadership and management Growth-minded Excellent communicator Flexible/Open-minded 15 years' of experience wit 5 or more as PM or Director level Experience in Program Management, Cybersecurity, IT, Government Contracts Bachelors degree in Business, IT, Computer Science, Engineering or above Certifications preffered: PMP, CISSP  

  ID - 2020-1216 Overview After 20 incredible years of cybersecurity professional services, engineering, and consulting, TDI is expanding our business with new innovative cybersecurity solutions.  Using cutting edge technology TDI’s Solutions Division, established in 2017, has productized this expertise into an innovative cybersecurity solution and we’re seeing significant growth potential in our flagship product, CnSight, which provides Cyber Risk, Effectiveness & Performance Management (CNSIGHT.IO).   This newly established position provides an incredible sales leadership opportunity.  The senior sales lead will develop new business for TDI with market-leading compensation and incredible sales accelerators. This role will build-out a sales capability and have an immediate impact.  The ideal candidate brings 5+ years of experience selling cyber products or software solutions across a variety of commercial market verticals with the proven ability to sell into information security, risk, and IT functions, specifically to senior leaders (e.g.: CISO and CIO).   The talent we are seeking needs to be results oriented, eager, curious, driven and well connected. Our hunter is looking for an open and flexible start-up culture, yet with the benefit of a well-established cybersecurity firm behind it.    Responsibilities Lead hunter related to the launch, establishment and coordination of initiatives tied to CnSight or future solution-based offerings Negotiate and successfully close cybersecurity software sales Align the product solution strategy and approach with TDI's Business Growth Strategy Collaborate across all functions and all levels, with the team to build out competitor analysis, market analysis and segmentation as well as buyer personas to inform marketing and sales strategy Build, document and manage a sales plan and qualified pipeline / accurate forecasts Identify and establish strategic sales channels and partnerships to pursue.  Experience working with both Alliance Partners and System Integrator Present state of affairs for all on-going marketing and sales efforts to a wide variety of stakeholders (e.g. Solutions leadership, investors, Executive Team). Articulate a compelling vision for how our solution is a differentiator from others in the market and will address their unique needs and add value (from C-Suite Level Execs through technical teams) Create and communicate key performance metrics tied to ROI, schedule, and cost, and customer satisfaction Self-driven with a keen focus on winning in the marketplace Support the development of content for white papers, other publications, and marketing materials tied to TDI’s solution-based offerings Qualifications 5+ years of relevant cybersecuritycybersecurity sales experience Strong understanding of customer/industry climate High level of solutions and technical knowledge Understanding of enterprise cybersecuritycybersecurity requirements (NISTNIST) as well as Governance, Risk, and Compliance (GRCGRC) / Integrated Risk Management (IRMIRM) topics Familiarity with enterprise security tools such as (NessusNessus, Rapid7, McAfeeMcAfee, SplunkSplunk, etc.) Proven track record of meeting or exceeding sales goals Preferred Qualifications: Aptitude to understand how technology can improve business processes Bachelors Degree Challenger Selling approach

ID 2020-1217 Join one of the most exciting cyber operations on the planet where TDI is helping to protect our customer from a volume of attacks not seen anywhere else. TDI is a unique blend of stability, think a 19-year old cybersecurity company with the agility of a start-up.  Our services have led, supported and created cybersecurity initiatives across the globe and within all markets. We are now seeking a Splunk Engineer to support a cybersecurity focused deployment of Splunk while working side by side with other security personnel to solve unique issues/integrations across a variety of technologies, business goals, and departments.  Our customer works to protect some of the nation's most critical assets - this is a terribly exciting environment and you can help ensure its cyber supremacy.   Responsibilities Collaborate with our customers to understand their needs Ability to work in a high-pressure environment with changing priorities Keen interest in listening to needs of customer in order to facilitate the growth of their security posture and cloud migration Design and implement meaningful dashboards and reports; create rapid prototypes to validate proposed solutions and enhancements Leverage previous experiences, share best practices and create innovative solutions to exploit the tools functionality and maximize the value of Splunk within the organization Architect, deploy, document, and maintain integration between Splunk and external tools Document and maintain a list of system, application, and other changes and provide appropriate documentation. Monitor the health of Splunk connections, data feeds and storage capacities Design and configure data alerting and summarization within Splunk Understanding detection methods and relevant long analysis for abnormalities, attacker pattern, and behaviors Understand methods of collection, logging windows, filtering, and tuning baselining data. Ability to communicate and collaborate effectively with information technology professionals, and technical and non-technical users; Ability to perform security analysis, development and implementation of security policies, standards, and guidelines Ability to quickly explore, examine and understand complex security problems and how it affects a customer’s business Ability to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to help deliver solutions   Qualifications Experience in Cybersecurity environment/capability Demonstrable knowledge of and experience with Splunk configuration, deployment, and operations & maintenance Experience in the use of network monitoring tools with a strong understanding of network protocols Self-motivated and self-educating, yet willing and able to work collaboratively 1-3 years in architecture, development, deployment, and administration of Splunk Enterprise in support of a Cybersecurity capability.  1-3 years of experience with data analysis, logging solutions, system and network monitoring, and technical consulting 2-3 years with both the Unix and Windows operating systems Bachelor’s degree in related field (i.e., Computer Science, Information Systems Management) and a minimum of three (3) years of relevant IT security related work experience  In lieu of a Bachelor’s degree, proposed staff should have a total of five (3) or more years of IT experience. Required: US Citizenship and Active Public Trust Clearance or ability to pass an equivalent criminal background check Cybersecurity-related certifications are highly preferred.  

ID 2019-1187 Overview After 20 incredible years of cybersecurity professional services, engineering, and consulting, TDI set out to capture our expertise in the form of commercially available solutions and products. TDI’s Solutions Division was established in 2017 with the mission of bottling this expertise into innovative cybersecurity solutions for commercial clients using modern technologies. After less than two years, we’re seeing significant growth potential in our flagship product, C n Sight. CnSight is different from existing cybersecurity products because it focuses on presenting security leader’s key performance metrics of their tools, teams, and processes aimed at finally improving the effectiveness of cybersecurity. Our select and growing team is seeking a talented Software Engineers with a demonstrated passion for software development and problem solving. This is an exciting start-up style opportunity for a team player who wants to have an immediate impact on the development of an emerging commercial cybersecurity product.  https://cnsight.io/ Preferred work location is on-site in our Washington, DC headquarters. A telework option is also available for qualified candidates who reside in the continental U.S.    Responsibilities A successful Associate Senior Software Engineer will be expected to: Understand and maintain application front end using React Work with a modern microservices architecture in AWS using Golang or Python to create and deploy novel insights and metrics to help customers improve their cybersecurity Build automation services that integrate with 3rd party APIs and software and write advanced SQL queries and stored procedures Use Concourse CI/CD pipeline to promote and deploy solutions Work as part of a team using Agile development methodologies Actively participate in the development of user stories and sprint planning  Interact with customers and development team to help gather and define requirements Develop and maintain software technical documentation to assist with software maintenance and upgrades Ensure use of secure coding best practices and DevSecOps Qualifications 1+ years’ experience developing in Go or Python required, to include working with API service discovery, API Gateways preferred Understanding of microservice architectures or core distributed systems principles, and exposure to Amazon Web Services (AWS) with core services (EC2, VPC, VPN, etc.) required Demonstrated ability of strong analysis and problem-solving skills required Experience using Linux and MacOS as development environments required Excellent communication skills, both written and oral required Enthusiastic, self-starter with a passion for growing skills, tackling interesting work and challenging problems required Front end development experience using React preferred Knowledge of enterprise cybersecurity requirements (NIST) and tools (Nessus, Splunk, etc.) preferred United States citizenship required Computer Science degree or equivalent from accredited university required Apply for this job online Refer this job to a friend   Share on your newsfeed  

ID 2019-1191 Overview As part of a team, the Senior Risk Management Lead is responsible for strategic and operational effectiveness assessments, ensuring systems perform as expected, assessing security risk, and operational effectiveness of the project or program. Responsibilities • Support NIST Risk Management Framework (RMF) based Assessment and Authorization (A&A) activities • Monitor and prepare required actions and documents pertaining to the A&A of the system throughout its lifecycle, to include security evaluation findings and residual risks • Conduct comprehensive reviews of security authorization documents to ensure the appropriate NIST security guidelines were used during the assessments and the selections of security controls are relevant to the confidentiality, integrity, and availability of the systems • Ensure required security authorization activities are completed and the results documented • Review and process Interconnection Security Agreements (ISAs), Policy Waivers, Approval to Test (ATT), and Interim Approval to Operate (IATO) documents • Review IS security plans and other A&A documents for all applications to determine if mandated procedures and tasks are followed • Assist the Government in preparing a written justification, when appropriate, to obtain a written waiver of policy for mandated security features. • Ensure that assigned systems/applications meet the minimum A&A standards before a recommendation is made to the CISO for Authorization. • Attend Compliance Team meetings and provide reports on the status of requested activities in the approved format • Update and upload all pertinent information for all systems within the FISMA portfolio repository • Update relevant FISMA Compliance SOPs on a quarterly basis • Provide guidance and support for all assigned Security Authorization activities. • Conduct Security Authorization entrance conferences. • Develop a preliminary Security Assessment Report (SAR) • Create the CSS Plan, including rules of engagement (ROE) for each major application, information system, or GSS undergoing authorization. • Document the results of the security control assessment, including recommendations for correcting any weaknesses or deficiencies in the controls, analyze findings, and develop risk mitigation techniques to address weaknesses • Conduct assessments of any required security controls Qualifications • Must have 3+ years of relevant experience as a cybersecurity control assessor • U.S. Federal Information Assurance (IA), and the Risk Management Framework (RMF) • Related Best Practices from FedRAMP, NIST, and other sources • IT Security Engineering Life Cycle and Release Management • Assessment and Authorization (A&A), Certification and Accreditation (C&A), FISMA,          FedRAMP, NIST SP 800-53, RMF • Risk and Issue Management and Mitigation • Excellent verbal and written communication skills • Ability to interface with customers at all levels of an organization and prepare presentations for senior executives • Demonstrated success consulting at the senior management level • Superior time management, planning, and ability to scope prospective engagements, develop proposals and project plans • Secret security clearance required