EKMS Specialist w/ Active TS Overview The EKMS (Electronic Key Management System) Support Specialist shall have experience and knowledge necessary to manage the day-to-day operation of a Navy EKMS account to include compliance supporting EKMS Visits and Inspections. The EKMS key personnel shall have experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms.  * Active TS Security Clearance Required.  Responsibilities Must have demonstrated experience in the following areas: • Performing EKMS Inspections using EKMS 3 series inspection manuals • Performing EKMS oversight of Local Element Accounts to include ordering, receipt, and distribution of COMSEC keying material and equipment. • Navy experience and/or expertise. • Interacting and coordinating with NSA, NCMS, CMIO, CRF’s, Controlling Authorities, and Local Elements. • Providing EKMS administrative support including material inventory, destruction reports, order placements and tracking. • Performing equipment maintenance, troubleshooting, issuance and operational instruction for COMSEC hardware (e.g. STEs, SKLs, KG-175s, KG-84s, IRIDIUMs and KIV-7s). • Conducting EKMS Spot Checks on Local Elements. • Delivering recurring training on operation of MSC EKMS mechanisms. • Maintaining all current and applicable EKMS Publications and Guidance. • Conducting site visits and traveling to perform training, inspections, equipment maintenance, and re-supply of necessary COMSEC related material or items. • Developing and maintaining Standard Operation Processes (SOPs) and EKMS specific training guides. • Developing and maintaining multiple databases in support of EKMS processes and policy utilizing Microsoft products such as Excel, Access, and Project. • Performing day to day management of multiple personnel in support of a program. • Shall have experience in the controlling policy documents related to COMSEC management.   Qualifications • Active TS Security Clearance • Minimum of four (4) years’ experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. • Ability to obtain and maintain a valid passport.    Required Skills and Certifications: • Security+ • EKMS/LE • Experience with MS Sharepoint   Travel:  Position Requires up to 75% CONUS and OCONUS travel   Clearance:  Top Secret  

Senior Software Developer (Data Engineer) Overview TDI’s Solution Division was established in 2017 with a mission of developing innovative cybersecurity solutions using modern technologies.  Our select and growing team is seeking a talented Senior Software Engineer with a demonstrated passion for software development and problem solving.  This is an exciting start-up opportunity for a team player who wants to have an immediate impact on the development of an emerging cybersecurity product.  Responsibilities A successful Senior Software Developer will be expected to: Work with a modern microservices architecture using Python, Java, and/or Golang to create and deploy enterprise grade software solutions using Concourse CI/CD pipeline Write advanced SQL queries and stored procedures Serve as a Senior developer and a work as part of a team using Agile development methodologies Actively participate in the development of user story creation and sprint planning  Build automation services that integrate with 3rd party APIs and software Interact with customers and development team to gather and define requirements Develop and maintain software technical documentation to assist with software maintenance and upgrades Ensure use of secure coding best practices and DevSecOps Qualifications 2+ years of experience developing in Python, Java, or Go / Golang at an enterprise level to include working with API service discovery; API Gateways preferred 4+ years of full-time software development experience Understanding of microservice architectures or core distributed systems principles, and exposure to Amazon Web Services (AWS) with core services (EC2, VPC, VPN, etc.) required Ability to work with complex data sets and developing PostgreSQL queries Demonstrated ability of strong analysis and problem-solving skills required Experience using Linux and MacOS as development environments required Excellent communication skills, both written and oral required Enthusiastic, self-starter with a passion for growing skills, tackling interesting work and challenging problems required Bachelor's degree in Computer Science, or related field, from accredited university  

Cyber Security Analyst w/ Active Secret Clearance Overview TDI requires a Cyber Security Analyst (CSA) with an Active Secret Clearance to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies within DIACAP C&A and RMF A&A.   Responsibilities Security Architecture analysis and compliance assessment with DoD/DON required configurations Security Operations tools architecture SME, integrator, and operations interface Support required selected sample audits of IAVA, STIGs and CTOs to enforce compliance Firewall and Boundary audit and configuration management Conduct security posture and threat analysis given current security infrastructure, configuration, and employment Coordinate/Collaborate with Ech I/II/III stakeholders and shepherd owners through cybersecurity work flow Qualifications Minimum six (6) years’ experience in Information Systems Operations (ISO), Information Assurance (IA)/Cyber Security (CS) or Information Systems Management Minimum four (4) years’ experience in systems, networks and application analysis applicable to A/CS, INFOSEC, DIACAP, and RMF Possess one of the following from the DoD 8570 IAT Level II/CSWF Designation code 61 Intermediate /Journeyman: Education: Bachelor Degree from accredited University or CNSSI 4012-4016 Certificate or NDU CISO certificate Military training: NEC 2780  or 2779 or 2781 Certifications: CCNA or CAP or Security + (CE) or ENSA Active US Secret Security Clearance

Cyber Security Analyst Overview TDI requires a Cyber Security Analyst (CSA) to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies for DIACAP Certification and Accreditation (C&A) / RMF Assessment and Authorization (A&A).   Responsibilities Reviews, updates, validates and authors Cybersecurity procedures (SOPs) as required. Reviews and maintains an inventory of authorized software. Reviews and maintains an inventory authorized external (USB) devices and media. Audits and validates configurations deployed on laptops, workstations, and servers. Audits and validates configurations of network devices based on DISA STIGs. Provides monitoring, and analysis of laptop, workstation, server and network audit logs. Ensures AV is properly deployed and current signatures are implemented across the laptops, workstations and servers. Monitors, reviews and reports on data restoration capabilities. Familiar with HBSS and ACAS from a compliance and reporting perspective. VRAM management on unclassified and classified networks (two security domains) Basic system knowledge including ability to upload scan data. Reports compliance for Cyber directives including IAVs, TASKORDs, FRAGORDs, etc. Create, implement and maintain system baselines. Provide Cybersecurity analysis, engineering, and C&A/A&A support in accordance with DoD Information Assurance Certification and Accreditation Process (DIACAP), National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), or Platform Information Technology (PIT) methodologies. Conduct technical security test and evaluations of classified and unclassified networks and/or systems to determine compliance with appropriate information assurance (IA) or cyber security controls and risk mitigation strategy. Provide detailed risk mitigation recommendations; conduct risk and vulnerability assessment of IT systems; conduct appropriate network scans utilizing ACAS and coordinate patching as required to gain/maintain accreditation. Prepare Certification and Accreditation/Assessment and Authorization documentation packages in accordance with DIACAP, NIST, RMF, or PIT methodologies. Support local infrastructure / lab cyber security analysis in support of Certification and Accreditation/Assessment and Authorization. Qualifications WORK EXPERIENCE Minimum four (4) years’ experience in IA / C&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, developing contingency plans.   CERTIFICATIONS: DoD 8570 IAT Level II / CSWF Designation Code 61(Intermediate/Journeyman) Desired:  NQV Level II or III   CLEARANCE Secret   All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Options Overview TDI requires a Cyber Security Analyst (CSA) to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies for DIACAP Certification and Accreditation (C&A) / RMF Assessment and Authorization (A&A).   Responsibilities Reviews, updates, validates and authors Cybersecurity procedures (SOPs) as required. Reviews and maintains an inventory of authorized software. Reviews and maintains an inventory authorized external (USB) devices and media. Audits and validates configurations deployed on laptops, workstations, and servers. Audits and validates configurations of network devices based on DISA STIGs. Provides monitoring, and analysis of laptop, workstation, server and network audit logs. Ensures AV is properly deployed and current signatures are implemented across the laptops, workstations and servers. Monitors, reviews and reports on data restoration capabilities. Familiar with HBSS and ACAS from a compliance and reporting perspective. VRAM management on unclassified and classified networks (two security domains) Basic system knowledge including ability to upload scan data. Reports compliance for Cyber directives including IAVs, TASKORDs, FRAGORDs, etc. Create, implement and maintain system baselines. Provide Cybersecurity analysis, engineering, and C&A/A&A support in accordance with DoD Information Assurance Certification and Accreditation Process (DIACAP), National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), or Platform Information Technology (PIT) methodologies. Conduct technical security test and evaluations of classified and unclassified networks and/or systems to determine compliance with appropriate information assurance (IA) or cyber security controls and risk mitigation strategy. Provide detailed risk mitigation recommendations; conduct risk and vulnerability assessment of IT systems; conduct appropriate network scans utilizing ACAS and coordinate patching as required to gain/maintain accreditation. Prepare Certification and Accreditation/Assessment and Authorization documentation packages in accordance with DIACAP, NIST, RMF, or PIT methodologies. Support local infrastructure / lab cyber security analysis in support of Certification and Accreditation/Assessment and Authorization. Qualifications WORK EXPERIENCE Minimum four (4) years’ experience in IA / C&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, developing contingency plans.   CERTIFICATIONS: DoD 8570 IAT Level II / CSWF Designation Code 61(Intermediate/Journeyman) Desired:  NQV Level II or III   CLEARANCE Secret   All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Splunk Engineer Overview The Splunk Engineer will drive complex security focused deployment of Splunk while working side by side with personnel to solve unique issues/integrations across a variety of departments. Responsibilities Work with our customers to understand their needs to facilitate the growth of our security posture and requirements Design and implement dashboards and reports; create rapid prototypes Leverage previous experiences, share best practices and create innovative solutions to push user adoption and maximize the value of Splunk within the organization Architect, deploy, document, and maintain integration between Splunk and external tools Maintain a list of system, application, and other changes and provide appropriate documentation. Build reports and dashboards within Splunk for INFOSEC and other departments Architect the generation, pulling, parsing, and directing of data from external sources into Splunk Monitor the health of data feeds ingested into Splunk Design and configure data alerting and summarization within Splunk Develop and maintain CIM deployment and integration within Splunk Provision and maintain segmented visibility in Splunk for appropriate stakeholders (system owners, etc) Qualifications Ability to work in a high-pressure environment with changing priorities. 3-5 years in architecture, development, deployment, and administration of Splunk Enterprise in Security.  Demonstrable knowledge of Splunk architecture and best practice Understand methods of collection, logging windows, filtering, and tuning baselining data. Understanding detection methods and relevant long analysis for abnormalities, attacker pattern, and behaviors 3-5 years of experience with data analysis, logging solutions, system and network monitoring, and technical consulting Experience in the use of network monitoring tools with a strong understanding of network protocols 2+ years’ experience with scripting languages (bash), application development (Java, Perl, Python, .NET, PowerShell), databases and analytical tools Ability to communicate effectively, both orally and in writing, with information technology professionals, and technical and non-technical users; Ability to perform security analysis, development and implementation of security policies, standards, and guidelines Ability to quickly explore, examine and understand complex security problems and how it affects a customer’s business 3-5 years with both the Unix and Windows operating systems Ability to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to help deliver solutions Self-motivated and self-educating, yet willing and able to work collaboratively Bachelor’s degree in related field (i.e., Computer Science, Information Systems Management) and a minimum of three (3) years of relevant IT security related work experience  In lieu of a Bachelor’s degree, proposed staff should have a total of five (5) or more years of IT experience. Certified Information Systems Security Professional (CISSP) is preferred. Required: Active Public Trust Clearance or ability to pass an equivalent criminal background check

Senior Security Engineer w/ Active Clearance Overview TDI has an immediate requirement for a  Sr. Security Engineer  to perform the following as part of a security operations support team. Responsibilities Coordinate with the Chief Information Security Officer (CISO), Deputy CISO and Information System Security Manager (ISSM) in the development and completion of contract deliverables associated with an agency’s SDLC requirements. Review, edit and implement agency IT security policies and procedures to align with agency/department directives; absent guidance, possess the ability to apply industry best practices to architect recommended solutions. Conduct security audits and assessments of an agency’s systems and networks. Compile metrics and reports relative to the operations and performance of an agency’s systems and networks. Review design, configuration, and implementation documentation to ensure compliance with agency and departmental guidance. Prepare and review change requests specific to an agency’s systems and networks for submission to a change control board (CCB). Attend integrated Product Team meetings and provide technical input in support of CISO and ISSM requirements.  Qualifications Bachelor’s Degree in Cyber Security, Computer Science or related discipline with a minimum of seven (7) years’ experience working in a security operations environment. Experience executing cyber defense activities to include but not limited to intrusion detection/prevention, incident response, network/application security monitoring, and providing technical security operations support. Experience working with and/or configuring network and host-based security applications and tools such as SPLUNK, BigFix, FirePower, EnCase, Tenable, and Tripwire. Demonstrated competency working in a Linux environment. Successful administration of Networking and Security products by Cisco, Juniper, and/or Palo Alto Networks. Working knowledge of NIST and FISMA security requirements. Must have the ability to present complex, technical information to both technical and non-technical audiences Clearance: Active Secret or MBI| T2 adjudicated

  Senior Risk Management Lead w/ Active Secret Clearance Overview As part of a team, the Senior Risk Management Lead is responsible for strategic and operational effectiveness assessments, ensuring systems perform as expected, assessing security risk, and operational effectiveness of the project or program. Responsibilities • Support NIST Risk Management Framework (RMF) based Assessment and Authorization (A&A) activities • Monitor and prepare required actions and documents pertaining to the A&A of the system throughout its lifecycle, to include security evaluation findings and residual risks • Conduct comprehensive reviews of security authorization documents to ensure the appropriate NIST security guidelines were used during the assessments and the selections of security controls are relevant to the confidentiality, integrity, and availability of the systems • Ensure required security authorization activities are completed and the results documented • Review and process Interconnection Security Agreements (ISAs), Policy Waivers, Approval to Test (ATT), and Interim Approval to Operate (IATO) documents • Review IS security plans and other A&A documents for all applications to determine if mandated procedures and tasks are followed • Assist the Government in preparing a written justification, when appropriate, to obtain a written waiver of policy for mandated security features. • Ensure that assigned systems/applications meet the minimum A&A standards before a recommendation is made to the CISO for Authorization. • Attend Compliance Team meetings and provide reports on the status of requested activities in the approved format • Update and upload all pertinent information for all systems within the FISMA portfolio repository • Update relevant FISMA Compliance SOPs on a quarterly basis • Provide guidance and support for all assigned Security Authorization activities. • Conduct Security Authorization entrance conferences. • Develop a preliminary Security Assessment Report (SAR) • Create the CSS Plan, including rules of engagement (ROE) for each major application, information system, or GSS undergoing authorization. • Document the results of the security control assessment, including recommendations for correcting any weaknesses or deficiencies in the controls, analyze findings, and develop risk mitigation techniques to address weaknesses • Conduct assessments of any required security controls Qualifications • Must have 5-7 years of relevant experience as a cybersecurity control assessor • U.S. Federal Information Assurance (IA), and the Risk Management Framework (RMF) • Related Best Practices from FedRAMP, NIST, and other sources • IT Security Engineering Life Cycle and Release Management • Assessment and Authorization (A&A), Certification and Accreditation (C&A), FISMA, FedRAMP, NIST SP 800-53, RMF • Risk and Issue Management and Mitigation • Excellent verbal and written communication skills • Ability to interface with customers at all levels of an organization and prepare presentations for senior executives • Demonstrated leadership and team development skills • Demonstrated success consulting at the senior management level • Superior time management, planning, and ability to scope prospective engagements, develop proposals and project plans • Secret security clearance required Work authorization: • United States (Required)  

Cyber Security Analyst Overview TDI is seeking candidates that will be responsible for researching, examining, reporting, and analyzing security incidents and related reports. Capable of analysis of malicious codes, vulnerable software, security tools, and patches. Develops technical content for technical documents, including content such as incident/vulnerability notes, advisories, and technical guidelines. Works on the development of white papers describing best practices for system and network administrators, technology managers, and other technology professionals. May support development of Certification and Accreditation documentation. Responsibilities Experience executing cyber defense activities to include but not limited to intrusion detection/prevention, incident response, network/application security monitoring, vulnerability management and providing technical security operations support. Experience working with and/or configuring network and host-based security applications and tools such as SPLUNK, Symantec, SCCM, Satellite, BigFix, FirePower, Nessus, or Qualys. Experience working with and/or configuring Networking and Security products by Cisco, Juniper, and/or Palo Alto Networks. Demonstrated competency working in a Linux environment. Qualifications Use of Technical Cyber security tools and techniques to detect vulnerable systems or configurations Plan and execute processes and procedures to improve cyber security posture for the enterprise Research, examine, report, and analyze security incidents and related reports Must have the ability to present complex, technical information to both technical and non-technical audiences Good customer service skills Team player 1-3 years' of experience  

Overview The Communication Security (COMSEC) Electronic Key Management System (EKMS) Specialist shall have experience and knowledge necessary to manage the day-to-day operation of a Navy COMSEC/EKMS account to include compliance supporting COMSEC/EKMS Visits and Inspections. The COMSEC/EKMS key personnel shall have experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. Responsibilities Must have demonstrated experience in the following areas: • Performing COMSEC/EKMS Inspections using EKMS 3 series inspection manuals •Performing EKMS oversight of Local Element Accounts to include ordering, receipt,      and distribution of COMSEC keying material and equipment. • Navy experience and/or expertise. • Interacting and coordinating with NSA, NCMS, CMIO, CRF’s, Controlling Authorities, and Local Elements. • Providing COMSEC/EKMS administrative support including material inventory, destruction reports, order placements, and tracking. • Performing equipment maintenance, troubleshooting, issuance and operational instruction for COMSEC hardware (e.g. STEs, SKLs, KG-175s, KG-84s, IRIDIUMs, and KIV-7s). • Conducting COMSEC/EKMS Spot Checks on Local Elements. • Delivering recurring training on the operation of COMSEC/EKMS mechanisms. • Maintaining all current and applicable COMSEC/EKMS Publications and Guidance. • Conducting site visits and traveling to perform training, inspections, equipment maintenance, and re-supply of necessary COMSEC related material or items. • Developing and maintaining Standard Operation Processes (SOPs) and COMSEC/EKMS specific training guides. • Developing and maintaining multiple databases in support of EKMS processes and policy utilizing Microsoft products such as Excel, Access, and Project. • Shall have experience in the controlling policy documents related to COMSEC management. Qualifications Minimum four (4) years’ experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. • Must be able to obtain and retain a valid passport.  Travel: Position Requires up to 75% CONUS and OCONUS travel Clearance: Top Secret Required Skills and Certifications: • Security+ (Preferred) • Familiar with COMSEC/EKMS • Experience with MS SharePoint Apply for this job online Refer this job to a friend   Share on your newsfeed    

System Administrator Overview TDI is seeking system administrator candidates that will be responsible for assisting NSWCDD personnel with NMCI issues, placing and tracking NMCI seat orders, submitting move/add/change (MAC) requests, and managing users within Navy Enterprise Tool (NET) and Active Directory (AD). Responsibilities Assist users with NMCI issues to determine appropriate next-steps for resolution Place and track NMCI seat orders and monitor delivery of assets Take delivery of new NMCI hardware for further distribution to NSWCDD personnel Assist with the distribution of IT assets transferred between the Dahlgren and Dam Neck sites Coordinate NMCI asset deployment to new users Provide NMCI and legacy equipment support to users by submitting move/add/change (MAC) requests Manage new user accounts requests in the Navy Enterprise Tool (NET) and Active Directory (AD) Assist with NMCI Technical Refresh efforts Assist users with the cleanup of cybersecurity incidents and spillages Manage all aspects of NMCI classified assets, accounts and SIPRNet tokens Support IT data calls for DoD, Navy, NAVSEA, NETWARCOM, and NSWCDD as required to include researching information for routine and complex reports Support scheduled meetings and High Velocity Learning (HVL) events as required Coordinate and meet with offsite vendors, NMCI subcontractors, and industry technicians to coordinate on-site initiatives as well as liaison between Base Operations Technicians and Site Managers Perform basic troubleshooting to assist users with NMCI asset and peripheral issues Validate employee NMCI services invoices Assist with IT initiatives as required Qualifications Knowledge and understanding of NMCI/NGEN contract Familiarity with Navy Enterprise Tool (NET) and Active Directory (AD) Understanding of move/add/change (MAC) request process Exceptional communication skills, both verbally and written Strong attention to detail Ability to work alone and in team environments Critical thinking skills Flexibility/Adaptability 1-3+ years of experience Security + CE Secret Clearance

Overview TDI requires a Cyber Security Analyst (CSA) with an Active Secret Clearance to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies within DIACAP C&A and RMF A&A.   Responsibilities Security Architecture analysis and compliance assessment with DoD/DON required configurations Security Operations tools architecture SME, integrator, and operations interface Support required selected sample audits of IAVA, STIGs and CTOs to enforce compliance Firewall and Boundary audit and configuration management Conduct security posture and threat analysis given current security infrastructure, configuration, and employment Coordinate/Collaborate with Ech I/II/III stakeholders and shepherd owners through cybersecurity work flow Qualifications Minimum six (6) years’ experience in Information Systems Operations (ISO), Information Assurance (IA)/Cyber Security (CS) or Information Systems Management Minimum four (4) years’ experience in systems, networks and application analysis applicable to A/CS, INFOSEC, DIACAP, and RMF Possess one of the following from the DoD 8570 IAT Level II/CSWF Designation code 61 Intermediate /Journeyman: Education: Bachelor Degree from accredited University or CNSSI 4012-4016 Certificate or NDU CISO certificate Military training: NEC 2780  or 2779 or 2781 Certifications: CCNA or CAP or Security + (CE) or ENSA Active US Secret Security Clearance

Overview TDI requires a Cyber Security Analyst (CSA) to provide technical analysis for IA/CS support and integration efforts.  The CSA will perform in-depth analysis in various areas and technologies for DIACAP Certification and Accreditation (C&A) / RMF Assessment and Authorization (A&A).   Responsibilities Reviews, updates, validates and authors Cybersecurity procedures (SOPs) as required. Reviews and maintains an inventory of authorized software. Reviews and maintains an inventory authorized external (USB) devices and media. Audits and validates configurations deployed on laptops, workstations, and servers. Audits and validates configurations of network devices based on DISA STIGs. Provides monitoring, and analysis of laptop, workstation, server and network audit logs. Ensures AV is properly deployed and current signatures are implemented across the laptops, workstations and servers. Monitors, reviews and reports on data restoration capabilities. Familiar with HBSS and ACAS from a compliance and reporting perspective. VRAM management on unclassified and classified networks (two security domains) Basic system knowledge including ability to upload scan data. Reports compliance for Cyber directives including IAVs, TASKORDs, FRAGORDs, etc. Create, implement and maintain system baselines. Provide Cybersecurity analysis, engineering, and C&A/A&A support in accordance with DoD Information Assurance Certification and Accreditation Process (DIACAP), National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), or Platform Information Technology (PIT) methodologies. Conduct technical security test and evaluations of classified and unclassified networks and/or systems to determine compliance with appropriate information assurance (IA) or cyber security controls and risk mitigation strategy. Provide detailed risk mitigation recommendations; conduct risk and vulnerability assessment of IT systems; conduct appropriate network scans utilizing ACAS and coordinate patching as required to gain/maintain accreditation. Prepare Certification and Accreditation/Assessment and Authorization documentation packages in accordance with DIACAP, NIST, RMF, or PIT methodologies. Support local infrastructure / lab cyber security analysis in support of Certification and Accreditation/Assessment and Authorization. Qualifications WORK EXPERIENCE Minimum four (4) years’ experience in IA / C&A analysis support in IA controls analysis, conducting risk assessments, risk mitigation analysis, developing contingency plans.   CERTIFICATIONS: DoD 8570 IAT Level II / CSWF Designation Code 61(Intermediate/Journeyman) Desired:  NQV Level II or III   CLEARANCE Secret   All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Overview The EKMS (Electronic Key Management System) Support Specialist shall have experience and knowledge necessary to manage the day-to-day operation of a Navy EKMS account to include compliance supporting EKMS Visits and Inspections. The EKMS key personnel shall have experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms.  * Active TS Security Clearance Required.  Responsibilities Must have demonstrated experience in the following areas: • Performing EKMS Inspections using EKMS 3 series inspection manuals • Performing EKMS oversight of Local Element Accounts to include ordering, receipt, and distribution of COMSEC keying material and equipment. • Navy experience and/or expertise. • Interacting and coordinating with NSA, NCMS, CMIO, CRF’s, Controlling Authorities, and Local Elements. • Providing EKMS administrative support including material inventory, destruction reports, order placements and tracking. • Performing equipment maintenance, troubleshooting, issuance and operational instruction for COMSEC hardware (e.g. STEs, SKLs, KG-175s, KG-84s, IRIDIUMs and KIV-7s). • Conducting EKMS Spot Checks on Local Elements. • Delivering recurring training on operation of MSC EKMS mechanisms. • Maintaining all current and applicable EKMS Publications and Guidance. • Conducting site visits and traveling to perform training, inspections, equipment maintenance, and re-supply of necessary COMSEC related material or items. • Developing and maintaining Standard Operation Processes (SOPs) and EKMS specific training guides. • Developing and maintaining multiple databases in support of EKMS processes and policy utilizing Microsoft products such as Excel, Access, and Project. • Performing day to day management of multiple personnel in support of a program. • Shall have experience in the controlling policy documents related to COMSEC management.   Qualifications • Active TS Security Clearance • Minimum of four (4) years’ experience in the design, deployment, and operation of COMSEC devices and the supporting key mat distribution and accounting mechanisms. • Ability to obtain and maintain a valid passport.    Required Skills and Certifications: • Security+ • EKMS/LE • Experience with MS Sharepoint   Travel:  Position Requires up to 75% CONUS and OCONUS travel   Clearance:  Top Secret

Overview TDI’s Solution Division was established in 2017 with a mission of developing innovative cybersecurity solutions using modern technologies.  Our select and growing team is seeking a talented Senior Software Engineer with a demonstrated passion for software development and problem solving.  This is an exciting start-up opportunity for a team player who wants to have an immediate impact on the development of an emerging cybersecurity product.  Responsibilities A successful Senior Software Developer will be expected to: Work with a modern microservices architecture using Python, Java, and/or Golang to create and deploy enterprise grade software solutions using Concourse CI/CD pipeline Write advanced SQL queries and stored procedures Serve as a Senior developer and a work as part of a team using Agile development methodologies Actively participate in the development of user story creation and sprint planning  Build automation services that integrate with 3rd party APIs and software Interact with customers and development team to gather and define requirements Develop and maintain software technical documentation to assist with software maintenance and upgrades Ensure use of secure coding best practices and DevSecOps Qualifications 2+ years of experience developing in Python, Java, or Go / Golang at an enterprise level to include working with API service discovery; API Gateways preferred 4+ years of full-time software development experience Understanding of microservice architectures or core distributed systems principles, and exposure to Amazon Web Services (AWS) with core services (EC2, VPC, VPN, etc.) required Ability to work with complex data sets and developing PostgreSQL queries Demonstrated ability of strong analysis and problem-solving skills required Experience using Linux and MacOS as development environments required Excellent communication skills, both written and oral required Enthusiastic, self-starter with a passion for growing skills, tackling interesting work and challenging problems required Bachelor's degree in Computer Science, or related field, from accredited university

Overview The Computer Network Defender will monitor, track, and communicate reported events for numerous different security platforms, operating systems, databases, and management systems. They will investigate and identify the root cause behind security incidents throughout all stages of the cyber kill chain, develop/communicate a timeline for resolution, and identify multiple scenarios based on the investigation. The Computer Network Defender will also perform regular continuous monitoring of events across platforms, operating systems, databases, and management systems.  Responsibilities Analyze raw data sources to extract, institutionalize, and document actionable events Document the flow of data and identify multiple distinct data sources where suspicious behavior can be identified – must also be able to identify supplemental sources where similar data may be found Communicate and collaborate with colleagues to investigate incidents Investigate incidents both from a network and host/application level Improve and implement indicators and protections across platforms, operating systems, databases, and management systems. Generate reports on a scheduled basis to document findings and remediation efforts, to include recommendations to the system owners. Design and implement dashboards and reports; create rapid prototypes Work with the system owners to remediate security issues derived through external and internal assessments. Develop processes to proactively address security risks and develop reporting dashboards in the organization’s security systems to continuously track progress. Work in an Integrated Operations Center with other business units to assist in incidents on behalf of Cybersecurity Reports detailing event results and remediation efforts. Maintain a list of tracked protective measures for applicable systems – both active and removed. Remediation recommendations to systems not controlled by INFOSEC. Document Standard Operating Procedures when performing required duties. Other documentation as needed or requested. Qualifications Demonstrated program level experience supporting network defense and strategies; Concepts of TCP/IP, network fundamental, network security, NetFlow and knowledge of tools such as Wireshark and Snort IDS,  Knowledge of Bro and Security Onion. 2-3 years using Splunk to conduct network forensic analysis and network security monitoring. Knowledge of Fireeye’s product suite such as EMP and HX. A solid understanding of the current threats and tactics being used to attack systems, such as ransomware and phishing analysis. Ability to develop, document, and maintain use cases through Splunk or other SEIM technologies  Working knowledge of the Windows Operating System with the ability to identify common and unexpected processes, network events, etc. Ability to generate a record of an investigation within an incident ticketing/tracking system Ability to safely handle a potentially malicious file and perform basic analysis Proficiency in writing Regular Expressions to extract data in Splunk via search-time and index-time extraction Ability to work in a high-pressure environment with changing priorities. Experience supporting the full lifecycle of indicators of compromise and signature process, to include development of security documentation; Ability to communicate effectively, both orally and in writing, with information technology professionals, and technical and non-technical users; Bachelor’s degree in related field (i.e., Computer Science, Information Systems Management) and minimum of five (5) years of relevant IT security related work experience  In lieu of a Bachelor’s degree, proposed staff should have at least eight (8) years of IT security experience. Certified Information Systems Security Professional (CISSP) and/or Cisco Certified Network Administrator (CCNA) and/or Checkpoint Certified Security Administrator (CCSA) and/or Checkpoint Certified Security Expert (CCSE) certification(s) is a plus. Required: Ability to pass a detailed criminal background check.

Overview The Splunk Engineer will drive complex security focused deployment of Splunk while working side by side with personnel to solve unique issues/integrations across a variety of departments. Responsibilities Work with our customers to understand their needs to facilitate the growth of our security posture and requirements Design and implement dashboards and reports; create rapid prototypes Leverage previous experiences, share best practices and create innovative solutions to push user adoption and maximize the value of Splunk within the organization Architect, deploy, document, and maintain integration between Splunk and external tools Maintain a list of system, application, and other changes and provide appropriate documentation. Build reports and dashboards within Splunk for INFOSEC and other departments Architect the generation, pulling, parsing, and directing of data from external sources into Splunk Monitor the health of data feeds ingested into Splunk Design and configure data alerting and summarization within Splunk Develop and maintain CIM deployment and integration within Splunk Provision and maintain segmented visibility in Splunk for appropriate stakeholders (system owners, etc) Qualifications Ability to work in a high-pressure environment with changing priorities. 3-5 years in architecture, development, deployment, and administration of Splunk Enterprise in Security.  Demonstrable knowledge of Splunk architecture and best practice Understand methods of collection, logging windows, filtering, and tuning baselining data. Understanding detection methods and relevant long analysis for abnormalities, attacker pattern, and behaviors 3-5 years of experience with data analysis, logging solutions, system and network monitoring, and technical consulting Experience in the use of network monitoring tools with a strong understanding of network protocols 2+ years’ experience with scripting languages (bash), application development (Java, Perl, Python, .NET, PowerShell), databases and analytical tools Ability to communicate effectively, both orally and in writing, with information technology professionals, and technical and non-technical users; Ability to perform security analysis, development and implementation of security policies, standards, and guidelines Ability to quickly explore, examine and understand complex security problems and how it affects a customer’s business 3-5 years with both the Unix and Windows operating systems Ability to listen and collaborate with audiences ranging from IT administrators to executive level stakeholders to help deliver solutions Self-motivated and self-educating, yet willing and able to work collaboratively Bachelor’s degree in related field (i.e., Computer Science, Information Systems Management) and a minimum of three (3) years of relevant IT security related work experience  In lieu of a Bachelor’s degree, proposed staff should have a total of five (5) or more years of IT experience. Certified Information Systems Security Professional (CISSP) is preferred. Required: Active Public Trust Clearance or ability to pass an equivalent criminal background check

Overview The Director, Corporate Services is responsible for the direction and management of the general and administrative (G&A) functions at TDI.  Responsibilities include finance & accounting, contracts, human resources, corporate information technology, administrative support and corporate responsibilities as assigned.  This position reports to the CEO. Responsibilities Participating as a member of corporate executive management team Contributing to the development and implementation of corporate Strategic Plans Cradle to grave authority and responsibility for all general ledger accounts; overseeing the function/existing staff who administer finances and bookkeeping Manage and develop – typically in a verification role - payroll, accounts payable, accounts receivable, monthly financial closing and all financial reporting; provide insightful quarterly reporting to entire executive team Manage contracts administration, negotiate on behalf of TDI and bring salient points and risk discussion points to CEO for important decisions Manage human resources function that includes employee relations, benefits administration and recruiting by 3rd party vendor Hiring, supervising, evaluating the performance of, and, as necessary, terminating employment of Corporate Services staff; regular & consistent employee touchpoints expected Developing and training of Corporate Services team Both formal and informal communications and program reviews with CEO regarding contract concerns, financial performance & risks, recruiting status, HR and IT issues, & management updates on a regular basis Principal support for development of pricing strategies and responsible for Pricing as part of TDI’s proposal process Additional proposal support for RFP interpretation, contract clause risk determination, and negotiating teaming and other agreements Serving as TDI point of contact for all Corporate Services related functions, resolving their problems/concerns and maintaining positive employee and customer relations Support individual program-side contracts helping with tracking actual costs, hours and ODCs, developing ETCs, invoice reviews, and ensuring completion of all required contractual requests Implementing policies and procedures relating to corporate Strategic Plan and culture Participating in special projects and performing other tasks as assigned Principal Accountabilities / Objectives: Achieving company financial goals in accordance with generally accepted accounting practices (GAAP) Supporting program management in the achievement of revenue and profitability goals for individual programs and contracts Ensuring good employee relations with project staff, program management, and TDI corporate personnel Achieving all financial and contractual responsibilities in accordance with GAAP, DCAA, and FAR requirements Establishing and implementing human resources best practices Overseeing the identification and hiring of adequate staff to perform contract requirements Supporting Service Delivery’s completion of contract requirements within the negotiated terms Ensuring corporate policies & procedures are communicated Strategic goals as articulated in TDI’s strategic plans; e.g., retention goals, improving the TDI experience for all employees, and ensuring on-time completion of employee reviews Qualifications Extensive experience managing and delivering financial and administrative support services, primarily in a consulting environment, to government and private sector clients At least twelve years of experience in government accounting, FAR contract administration, government proposal pricing, human resources administration, and overall back office organization and management Knowledge of Deltek GCP Premier is highly preferred while understanding and interpreting Deltek reports at a comptroller level is required Strong skills in analyzing, interpreting and reconciling financial data Awareness of Capture Management and Proposal Management, including pricing and its implications Government procurement specifics and how they impact contracts and their execution Bachelors Degree in Business Management, Accounting or Finance

Overview Founded in 2001, TDI has grown into a world-class consulting firm offering cyber security services to government agencies and commercial clients around the world. Our main goal is to bring superior cyber security services to our customers while fostering a challenging and welcoming work environment for our employees. Responsibilities A key to our success in retaining top quality  staff is management through flexibility and individual attention. While TDI continuously implements organization-wide policies and procedures for retention through our industry-leading benefits and career development programs, our policies include the flexibility to adapt to individual needs and concerns. Each staff member is treated as unique. Supervisors mentor job progress, career advancement, and training needs and shape career plans to help each person attain their long-term aspirations. We promote from within whenever possible; Our President & COO started with us as a Program Manager and our VP of Services Delivery also began as a PM! Qualifications The following factors contribute towards making TDI an outstanding place to start, nurture, and grow a career:   An expert workforce — As a consulting company, TDI’s primary strength and sole reason for our success is employees like you. With our focus on cyber, we have become known for having extremely knowledgeable personnel that our clients depend on.   With advanced degrees, an average of 15 years’ experience, cybersecurity certifications, and extraordinary real-life experiences in the field, TDI staff are the best in the business. Join us an experience our culture for yourself   Strong business fundamentals — TDI has remained financially healthy, ensuring a place to work for our team, since inception in 2001. Even in periods of a shaky overall economy, TDI has provided a strong and steady backbone for its personnel. Going forward, TDI will continue its growth.   Small-company collegial environment — TDI takes pride in hiring well-rounded intellectual individuals that also have a personable and friendly personality. We seek to foster a collegial environment within our diverse staff with holiday parties and periodic social events such as kayaking, bowling, and trips to a museum. TDI has season-tickets to sporting events. Employees are offered opportunities to attend games with their friends and/or family using TDI’s tickets. There is an informal mentoring program that helps new employees adjust to TDI and helps to develop them throughout their career.   Providing exceptional value to clients — TDI’s clients — from Department of Defense entities, to civilian government, to commercial firms — all depend on TDI and people like you to help secure their information assets. We value their trust, and take tremendous pride in providing each client with individual and focused attention. We want you to embrace that sense of pride.  You can be part of something unique.

Overview TDI has an immediate requirement for a CDM Security Engineer who can implement and present requirements associated with DHS CDM (Continuous Diagnostics & Mitigation) capabilities. Responsibilities Support the development, testing, implementation, and operations of department and agency Continuous Diagnostics and Mitigation (CDM) solutions. Coordinate with the Chief Information Security Officer (CISO), Deputy CISO and Information System Security Manager (ISSM) in development and completion CDM requirements. Compile metrics and reports relative to the operations and performance of an agency’s systems and networks. Review design, configuration and implementation documentation to ensure compliance with agency and departmental guidance. Prepare and review change requests specific to an agency’s systems and networks for submission to a change control board (CCB). Attend Integrated Product Team meetings and provide technical input in support of CDM requirements. Identify and define system security requirements. Possesses the ability to work with team members to design computer security architectures and develop detailed cyber security designs. Capable of assisting with the design of a dashboard that depicts security structure(s) and risk levels. Qualifications Bachelor’s Degree in Cyber Security, Computer Science or related discipline with a minimum of five (5) years’ experience working in a security operations environment. Recent hands-on experience as a CDM Engineer. (Preferred) Hands-on experience working with and configuring security applications and tools such as SPLUNK, BigFix, FirePower, EnCase, Tenable, Tripwire. Hands-on network and web application penetration testing (Preferred). Hands-on experience with vulnerability and configuration management. Hands-on experience with incident response and digital forensics. Working knowledge of NIST and FISMA security requirements. Must have the ability to present complex, technical information to both technical and non-technical audiences. CLEARANCE: Top Secret (Preferred) MBI | T2 adjudicated (Minimum) Apply for this job online Refer this job to a friend   Share on your newsfeed