EKMS Specialist w/ Active TS Overview The EKMS (Electronic Key Management System) Support Specialist shall have experience and knowledge necessary to manage the day-to-day operation of a Navy EKMS account to include compliance supporting EKMS Visits and Inspections. The EKMS key personnel shall have experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms.  * Active TS Security Clearance Required.  Responsibilities Must have demonstrated experience in the following areas: • Performing EKMS Inspections using EKMS 3 series inspection manuals • Performing EKMS oversight of Local Element Accounts to include ordering, receipt, and distribution of COMSEC keying material and equipment. • Navy experience and/or expertise. • Interacting and coordinating with NSA, NCMS, CMIO, CRF’s, Controlling Authorities, and Local Elements. • Providing EKMS administrative support including material inventory, destruction reports, order placements and tracking. • Performing equipment maintenance, troubleshooting, issuance and operational instruction for COMSEC hardware (e.g. STEs, SKLs, KG-175s, KG-84s, IRIDIUMs and KIV-7s). • Conducting EKMS Spot Checks on Local Elements. • Delivering recurring training on operation of MSC EKMS mechanisms. • Maintaining all current and applicable EKMS Publications and Guidance. • Conducting site visits and traveling to perform training, inspections, equipment maintenance, and re-supply of necessary COMSEC related material or items. • Developing and maintaining Standard Operation Processes (SOPs) and EKMS specific training guides. • Developing and maintaining multiple databases in support of EKMS processes and policy utilizing Microsoft products such as Excel, Access, and Project. • Performing day to day management of multiple personnel in support of a program. • Shall have experience in the controlling policy documents related to COMSEC management.   Qualifications • Active TS Security Clearance • Minimum of four (4) years’ experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. • Ability to obtain and maintain a valid passport.    Required Skills and Certifications: • Security+ • EKMS/LE • Experience with MS Sharepoint   Travel:  Position Requires up to 75% CONUS and OCONUS travel   Clearance:  Top Secret  

Senior Software Developer (Data Engineer) Overview TDI’s Solution Division was established in 2017 with a mission of developing innovative cybersecurity solutions using modern technologies.  Our select and growing team is seeking a talented Senior Software Engineer with a demonstrated passion for software development and problem solving.  This is an exciting start-up opportunity for a team player who wants to have an immediate impact on the development of an emerging cybersecurity product.  Responsibilities A successful Senior Software Developer will be expected to: Work with a modern microservices architecture using Python, Java, and/or Golang to create and deploy enterprise grade software solutions using Concourse CI/CD pipeline Write advanced SQL queries and stored procedures Serve as a Senior developer and a work as part of a team using Agile development methodologies Actively participate in the development of user story creation and sprint planning  Build automation services that integrate with 3rd party APIs and software Interact with customers and development team to gather and define requirements Develop and maintain software technical documentation to assist with software maintenance and upgrades Ensure use of secure coding best practices and DevSecOps Qualifications 2+ years of experience developing in Python, Java, or Go / Golang at an enterprise level to include working with API service discovery; API Gateways preferred 4+ years of full-time software development experience Understanding of microservice architectures or core distributed systems principles, and exposure to Amazon Web Services (AWS) with core services (EC2, VPC, VPN, etc.) required Ability to work with complex data sets and developing PostgreSQL queries Demonstrated ability of strong analysis and problem-solving skills required Experience using Linux and MacOS as development environments required Excellent communication skills, both written and oral required Enthusiastic, self-starter with a passion for growing skills, tackling interesting work and challenging problems required Bachelor's degree in Computer Science, or related field, from accredited university  

Cyber Security Analyst w/ Active Secret Clearance Overview TDI requires a Cyber Security Analyst (CSA) with an Active Secret Clearance to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies within DIACAP C&A and RMF A&A.   Responsibilities Security Architecture analysis and compliance assessment with DoD/DON required configurations Security Operations tools architecture SME, integrator, and operations interface Support required selected sample audits of IAVA, STIGs and CTOs to enforce compliance Firewall and Boundary audit and configuration management Conduct security posture and threat analysis given current security infrastructure, configuration, and employment Coordinate/Collaborate with Ech I/II/III stakeholders and shepherd owners through cybersecurity work flow Qualifications Minimum six (6) years’ experience in Information Systems Operations (ISO), Information Assurance (IA)/Cyber Security (CS) or Information Systems Management Minimum four (4) years’ experience in systems, networks and application analysis applicable to A/CS, INFOSEC, DIACAP, and RMF Possess one of the following from the DoD 8570 IAT Level II/CSWF Designation code 61 Intermediate /Journeyman: Education: Bachelor Degree from accredited University or CNSSI 4012-4016 Certificate or NDU CISO certificate Military training: NEC 2780  or 2779 or 2781 Certifications: CCNA or CAP or Security + (CE) or ENSA Active US Secret Security Clearance

Cyber Security Analyst Overview TDI requires a Cyber Security Analyst (CSA) to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies for DIACAP Certification and Accreditation (C&A) / RMF Assessment and Authorization (A&A).   Responsibilities Reviews, updates, validates and authors Cybersecurity procedures (SOPs) as required. Reviews and maintains an inventory of authorized software. Reviews and maintains an inventory authorized external (USB) devices and media. Audits and validates configurations deployed on laptops, workstations, and servers. Audits and validates configurations of network devices based on DISA STIGs. Provides monitoring, and analysis of laptop, workstation, server and network audit logs. Ensures AV is properly deployed and current signatures are implemented across the laptops, workstations and servers. Monitors, reviews and reports on data restoration capabilities. Familiar with HBSS and ACAS from a compliance and reporting perspective. VRAM management on unclassified and classified networks (two security domains) Basic system knowledge including ability to upload scan data. Reports compliance for Cyber directives including IAVs, TASKORDs, FRAGORDs, etc. Create, implement and maintain system baselines. Provide Cybersecurity analysis, engineering, and C&A/A&A support in accordance with DoD Information Assurance Certification and Accreditation Process (DIACAP), National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), or Platform Information Technology (PIT) methodologies. Conduct technical security test and evaluations of classified and unclassified networks and/or systems to determine compliance with appropriate information assurance (IA) or cyber security controls and risk mitigation strategy. Provide detailed risk mitigation recommendations; conduct risk and vulnerability assessment of IT systems; conduct appropriate network scans utilizing ACAS and coordinate patching as required to gain/maintain accreditation. Prepare Certification and Accreditation/Assessment and Authorization documentation packages in accordance with DIACAP, NIST, RMF, or PIT methodologies. Support local infrastructure / lab cyber security analysis in support of Certification and Accreditation/Assessment and Authorization. Qualifications WORK EXPERIENCE Minimum four (4) years’ experience in IA / C&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, developing contingency plans.   CERTIFICATIONS: DoD 8570 IAT Level II / CSWF Designation Code 61(Intermediate/Journeyman) Desired:  NQV Level II or III   CLEARANCE Secret   All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Options Overview TDI requires a Cyber Security Analyst (CSA) to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies for DIACAP Certification and Accreditation (C&A) / RMF Assessment and Authorization (A&A).   Responsibilities Reviews, updates, validates and authors Cybersecurity procedures (SOPs) as required. Reviews and maintains an inventory of authorized software. Reviews and maintains an inventory authorized external (USB) devices and media. Audits and validates configurations deployed on laptops, workstations, and servers. Audits and validates configurations of network devices based on DISA STIGs. Provides monitoring, and analysis of laptop, workstation, server and network audit logs. Ensures AV is properly deployed and current signatures are implemented across the laptops, workstations and servers. Monitors, reviews and reports on data restoration capabilities. Familiar with HBSS and ACAS from a compliance and reporting perspective. VRAM management on unclassified and classified networks (two security domains) Basic system knowledge including ability to upload scan data. Reports compliance for Cyber directives including IAVs, TASKORDs, FRAGORDs, etc. Create, implement and maintain system baselines. Provide Cybersecurity analysis, engineering, and C&A/A&A support in accordance with DoD Information Assurance Certification and Accreditation Process (DIACAP), National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), or Platform Information Technology (PIT) methodologies. Conduct technical security test and evaluations of classified and unclassified networks and/or systems to determine compliance with appropriate information assurance (IA) or cyber security controls and risk mitigation strategy. Provide detailed risk mitigation recommendations; conduct risk and vulnerability assessment of IT systems; conduct appropriate network scans utilizing ACAS and coordinate patching as required to gain/maintain accreditation. Prepare Certification and Accreditation/Assessment and Authorization documentation packages in accordance with DIACAP, NIST, RMF, or PIT methodologies. Support local infrastructure / lab cyber security analysis in support of Certification and Accreditation/Assessment and Authorization. Qualifications WORK EXPERIENCE Minimum four (4) years’ experience in IA / C&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, developing contingency plans.   CERTIFICATIONS: DoD 8570 IAT Level II / CSWF Designation Code 61(Intermediate/Journeyman) Desired:  NQV Level II or III   CLEARANCE Secret   All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Splunk Engineer Overview The Splunk Engineer will drive complex security focused deployment of Splunk while working side by side with personnel to solve unique issues/integrations across a variety of departments. Responsibilities Work with our customers to understand their needs to facilitate the growth of our security posture and requirements Design and implement dashboards and reports; create rapid prototypes Leverage previous experiences, share best practices and create innovative solutions to push user adoption and maximize the value of Splunk within the organization Architect, deploy, document, and maintain integration between Splunk and external tools Maintain a list of system, application, and other changes and provide appropriate documentation. Build reports and dashboards within Splunk for INFOSEC and other departments Architect the generation, pulling, parsing, and directing of data from external sources into Splunk Monitor the health of data feeds ingested into Splunk Design and configure data alerting and summarization within Splunk Develop and maintain CIM deployment and integration within Splunk Provision and maintain segmented visibility in Splunk for appropriate stakeholders (system owners, etc) Qualifications Ability to work in a high-pressure environment with changing priorities. 3-5 years in architecture, development, deployment, and administration of Splunk Enterprise in Security.  Demonstrable knowledge of Splunk architecture and best practice Understand methods of collection, logging windows, filtering, and tuning baselining data. Understanding detection methods and relevant long analysis for abnormalities, attacker pattern, and behaviors 3-5 years of experience with data analysis, logging solutions, system and network monitoring, and technical consulting Experience in the use of network monitoring tools with a strong understanding of network protocols 2+ years’ experience with scripting languages (bash), application development (Java, Perl, Python, .NET, PowerShell), databases and analytical tools Ability to communicate effectively, both orally and in writing, with information technology professionals, and technical and non-technical users; Ability to perform security analysis, development and implementation of security policies, standards, and guidelines Ability to quickly explore, examine and understand complex security problems and how it affects a customer’s business 3-5 years with both the Unix and Windows operating systems Ability to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to help deliver solutions Self-motivated and self-educating, yet willing and able to work collaboratively Bachelor’s degree in related field (i.e., Computer Science, Information Systems Management) and a minimum of three (3) years of relevant IT security related work experience  In lieu of a Bachelor’s degree, proposed staff should have a total of five (5) or more years of IT experience. Certified Information Systems Security Professional (CISSP) is preferred. Required: Active Public Trust Clearance or ability to pass an equivalent criminal background check

Senior Security Engineer w/ Active Clearance Overview TDI has an immediate requirement for a  Sr. Security Engineer  to perform the following as part of a security operations support team. Responsibilities Coordinate with the Chief Information Security Officer (CISO), Deputy CISO and Information System Security Manager (ISSM) in the development and completion of contract deliverables associated with an agency’s SDLC requirements. Review, edit and implement agency IT security policies and procedures to align with agency/department directives; absent guidance, possess the ability to apply industry best practices to architect recommended solutions. Conduct security audits and assessments of an agency’s systems and networks. Compile metrics and reports relative to the operations and performance of an agency’s systems and networks. Review design, configuration, and implementation documentation to ensure compliance with agency and departmental guidance. Prepare and review change requests specific to an agency’s systems and networks for submission to a change control board (CCB). Attend integrated Product Team meetings and provide technical input in support of CISO and ISSM requirements.  Qualifications Bachelor’s Degree in Cyber Security, Computer Science or related discipline with a minimum of seven (7) years’ experience working in a security operations environment. Experience executing cyber defense activities to include but not limited to intrusion detection/prevention, incident response, network/application security monitoring, and providing technical security operations support. Experience working with and/or configuring network and host-based security applications and tools such as SPLUNK, BigFix, FirePower, EnCase, Tenable, and Tripwire. Demonstrated competency working in a Linux environment. Successful administration of Networking and Security products by Cisco, Juniper, and/or Palo Alto Networks. Working knowledge of NIST and FISMA security requirements. Must have the ability to present complex, technical information to both technical and non-technical audiences Clearance: Active Secret or MBI| T2 adjudicated

  Senior Risk Management Lead w/ Active Secret Clearance Overview As part of a team, the Senior Risk Management Lead is responsible for strategic and operational effectiveness assessments, ensuring systems perform as expected, assessing security risk, and operational effectiveness of the project or program. Responsibilities • Support NIST Risk Management Framework (RMF) based Assessment and Authorization (A&A) activities • Monitor and prepare required actions and documents pertaining to the A&A of the system throughout its lifecycle, to include security evaluation findings and residual risks • Conduct comprehensive reviews of security authorization documents to ensure the appropriate NIST security guidelines were used during the assessments and the selections of security controls are relevant to the confidentiality, integrity, and availability of the systems • Ensure required security authorization activities are completed and the results documented • Review and process Interconnection Security Agreements (ISAs), Policy Waivers, Approval to Test (ATT), and Interim Approval to Operate (IATO) documents • Review IS security plans and other A&A documents for all applications to determine if mandated procedures and tasks are followed • Assist the Government in preparing a written justification, when appropriate, to obtain a written waiver of policy for mandated security features. • Ensure that assigned systems/applications meet the minimum A&A standards before a recommendation is made to the CISO for Authorization. • Attend Compliance Team meetings and provide reports on the status of requested activities in the approved format • Update and upload all pertinent information for all systems within the FISMA portfolio repository • Update relevant FISMA Compliance SOPs on a quarterly basis • Provide guidance and support for all assigned Security Authorization activities. • Conduct Security Authorization entrance conferences. • Develop a preliminary Security Assessment Report (SAR) • Create the CSS Plan, including rules of engagement (ROE) for each major application, information system, or GSS undergoing authorization. • Document the results of the security control assessment, including recommendations for correcting any weaknesses or deficiencies in the controls, analyze findings, and develop risk mitigation techniques to address weaknesses • Conduct assessments of any required security controls Qualifications • Must have 5-7 years of relevant experience as a cybersecurity control assessor • U.S. Federal Information Assurance (IA), and the Risk Management Framework (RMF) • Related Best Practices from FedRAMP, NIST, and other sources • IT Security Engineering Life Cycle and Release Management • Assessment and Authorization (A&A), Certification and Accreditation (C&A), FISMA, FedRAMP, NIST SP 800-53, RMF • Risk and Issue Management and Mitigation • Excellent verbal and written communication skills • Ability to interface with customers at all levels of an organization and prepare presentations for senior executives • Demonstrated leadership and team development skills • Demonstrated success consulting at the senior management level • Superior time management, planning, and ability to scope prospective engagements, develop proposals and project plans • Secret security clearance required Work authorization: • United States (Required)  

Cyber Security Analyst Overview TDI is seeking candidates that will be responsible for researching, examining, reporting, and analyzing security incidents and related reports. Capable of analysis of malicious codes, vulnerable software, security tools, and patches. Develops technical content for technical documents, including content such as incident/vulnerability notes, advisories, and technical guidelines. Works on the development of white papers describing best practices for system and network administrators, technology managers, and other technology professionals. May support development of Certification and Accreditation documentation. Responsibilities Experience executing cyber defense activities to include but not limited to intrusion detection/prevention, incident response, network/application security monitoring, vulnerability management and providing technical security operations support. Experience working with and/or configuring network and host-based security applications and tools such as SPLUNK, Symantec, SCCM, Satellite, BigFix, FirePower, Nessus, or Qualys. Experience working with and/or configuring Networking and Security products by Cisco, Juniper, and/or Palo Alto Networks. Demonstrated competency working in a Linux environment. Qualifications Use of Technical Cyber security tools and techniques to detect vulnerable systems or configurations Plan and execute processes and procedures to improve cyber security posture for the enterprise Research, examine, report, and analyze security incidents and related reports Must have the ability to present complex, technical information to both technical and non-technical audiences Good customer service skills Team player 1-3 years' of experience  

Overview The Communication Security (COMSEC) Electronic Key Management System (EKMS) Specialist shall have experience and knowledge necessary to manage the day-to-day operation of a Navy COMSEC/EKMS account to include compliance supporting COMSEC/EKMS Visits and Inspections. The COMSEC/EKMS key personnel shall have experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. Responsibilities Must have demonstrated experience in the following areas: • Performing COMSEC/EKMS Inspections using EKMS 3 series inspection manuals •Performing EKMS oversight of Local Element Accounts to include ordering, receipt,      and distribution of COMSEC keying material and equipment. • Navy experience and/or expertise. • Interacting and coordinating with NSA, NCMS, CMIO, CRF’s, Controlling Authorities, and Local Elements. • Providing COMSEC/EKMS administrative support including material inventory, destruction reports, order placements, and tracking. • Performing equipment maintenance, troubleshooting, issuance and operational instruction for COMSEC hardware (e.g. STEs, SKLs, KG-175s, KG-84s, IRIDIUMs, and KIV-7s). • Conducting COMSEC/EKMS Spot Checks on Local Elements. • Delivering recurring training on the operation of COMSEC/EKMS mechanisms. • Maintaining all current and applicable COMSEC/EKMS Publications and Guidance. • Conducting site visits and traveling to perform training, inspections, equipment maintenance, and re-supply of necessary COMSEC related material or items. • Developing and maintaining Standard Operation Processes (SOPs) and COMSEC/EKMS specific training guides. • Developing and maintaining multiple databases in support of EKMS processes and policy utilizing Microsoft products such as Excel, Access, and Project. • Shall have experience in the controlling policy documents related to COMSEC management. Qualifications Minimum four (4) years’ experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. • Must be able to obtain and retain a valid passport.  Travel: Position Requires up to 75% CONUS and OCONUS travel Clearance: Top Secret Required Skills and Certifications: • Security+ (Preferred) • Familiar with COMSEC/EKMS • Experience with MS SharePoint Apply for this job online Refer this job to a friend   Share on your newsfeed    

System Administrator Overview TDI is seeking system administrator candidates that will be responsible for assisting NSWCDD personnel with NMCI issues, placing and tracking NMCI seat orders, submitting move/add/change (MAC) requests, and managing users within Navy Enterprise Tool (NET) and Active Directory (AD). Responsibilities Assist users with NMCI issues to determine appropriate next-steps for resolution Place and track NMCI seat orders and monitor delivery of assets Take delivery of new NMCI hardware for further distribution to NSWCDD personnel Assist with the distribution of IT assets transferred between the Dahlgren and Dam Neck sites Coordinate NMCI asset deployment to new users Provide NMCI and legacy equipment support to users by submitting move/add/change (MAC) requests Manage new user accounts requests in the Navy Enterprise Tool (NET) and Active Directory (AD) Assist with NMCI Technical Refresh efforts Assist users with the cleanup of cybersecurity incidents and spillages Manage all aspects of NMCI classified assets, accounts and SIPRNet tokens Support IT data calls for DoD, Navy, NAVSEA, NETWARCOM, and NSWCDD as required to include researching information for routine and complex reports Support scheduled meetings and High Velocity Learning (HVL) events as required Coordinate and meet with offsite vendors, NMCI subcontractors, and industry technicians to coordinate on-site initiatives as well as liaison between Base Operations Technicians and Site Managers Perform basic troubleshooting to assist users with NMCI asset and peripheral issues Validate employee NMCI services invoices Assist with IT initiatives as required Qualifications Knowledge and understanding of NMCI/NGEN contract Familiarity with Navy Enterprise Tool (NET) and Active Directory (AD) Understanding of move/add/change (MAC) request process Exceptional communication skills, both verbally and written Strong attention to detail Ability to work alone and in team environments Critical thinking skills Flexibility/Adaptability 1-3+ years of experience Security + CE Secret Clearance