DUTY 1: Administers the Information Security Program protecting the enterprise from espionage, terrorism, and threats of unauthorized disclosure and/or compromise of information or material considered vital to enterprise mission interests, national defense or national security.
DUTY 2: Directs the personnel security program to ensure secure accomplishment of the enterprise's missions, goals and objectives through proactive application of security principles, policies, and practices.
DUTY 3: Provides enterprise and subordinate organizations worldwide with authoritative guidance on aspects concerning physical security programs for the protection of classified national security information, both Sensitive Compartmented Information (SCI) and collateral information.
DUTY 4: Manages the Industrial Security Program. Provides effective guidance, training, and direction to subordinate assigned organizations/activities/units on industrial security program matters.
DUTY 5: Exercises supervisory personnel management responsibilities. Advises and provides counsel to employees regarding policies, procedures, and directives of management.

• Serves as COMACC's BLUE FLAG program Security Program Specialist for the collateral security function at the 505 CTS and five contractor organizations, to include security education.
• Implements policies and procedures covering the safeguarding of classified information and implements 505 CCW personnel security investigations/adjudication systems for case management.
• Develops, initiates and disseminates foreign disclosure policy guidance to group, squadron and exercise personnel and assists administration of the Industrial Security Program.
• Makes security program risk assessments and risk management/mitigation strategies/recommendations based on intelligence-derived threat issues for COMACC's BLUE FLAG program, JNTC supported exercises, and assists with wing OPSEC, FDO responsibilities that may require deviations from or synthesis of policies.

As a POLICE OFFICER, GS-0083-8, this position is located in an Air National Guard Wing, Mission Support Group, Security Forces Squadron. The primary purpose of this position is to conduct formal combat arms training and maintenance activities for the Security Forces Squadron and tenant personnel. Control and operate firing ranges; inspect, repair, and maintain ground weapons. To enforce law, maintain law and order, preserve the peace, and protect life and civil rights within the jurisdiction of the military installation. To oversee the work activities of Drill Status Guardsmen (DSG) assigned to the Security Forces Combat Arms function.

(1) Performs Combat Arms Training. Presents repetitive courses or designated blocks of longer courses and presents training material and instruction covering proper use of handguns, rifles, machine guns and other base defense/ground combat skills equipment, in accordance with approved lesson plans and course control documents. Instruction may take place in outdoor or indoor training facilities and will require multiple police/combat agility skill demonstrations. Instructor makes adjustments in presentation or other instructional methods to resolve common classroom problems, to include those of student motivation and communication, as well as, last minute agenda schedule or student changes, student problems, equipment malfunctions, or lack of supplies. Uses training aids and devices in addition to those listed in the POI in a manner that enhances training outcome. Adjusts subject matter discussions to assure material is assimilated by all students. Applies specialized subject matter knowledge in course instruction. Maintains accountability and ensures security for weapons/ammunition/explosives utilized in the course of instruction in accordance with applicable Air Force Instructions.

(2) May oversee the work activities of subordinates and Traditional Guardsmen. Trains employees in assigned duties and responsibilities. Assigns work, establishes priorities, and ensures technical quality of work products.

(3) Manages and oversees the installation ground weapons training and maintenance program; serves as an instructor and inspects ground weapons. Plans, organizes, and directs the activities of the installation s ground weapons training and maintenance program, incorporating safety requirements, and maintains adherence to safety regulations. Promptly evaluates accidents to determine cause and ensure safety guidelines are followed and necessary precautions are taken to prevent further occurrences. Performs self- inspections and presents detailed reports to senior leadership. Ensures compliance with regulatory requirements, policies, and procedures. Monitors special environmental requirements, such as lead removal. Coordinates with the local Civil Engineering Squadron personnel on various issues, to include development of a joint hazardous waste disposal site and procedures that comply with local environmental laws. Monitors the environment for noise hazards, health problems, and all other safety hazards. Directs and monitors security/resources protection program and procedures. Monitors explosive safety and munitions movement s safety procedures. Notifies appropriate unit commanders of current no-shows rates and third time failures, initiates follow-up actions, and briefs data, as directed. Oversees and assists with the maintenance and inspection of all ground weapons assigned to the installation or covered by host tenant support agreements. Submits forecast and requisition for training weapons, equipment, tools, gauges, target material, and expendable items. Validates the annual munitions allocation product.

(4) Represents the Security Forces Squadron (SFS) with a variety of installation and functional area organizations. Provides SFS position on ground combat weapons issued at installation conferences and task group meetings. Coordinates and maintains liaisons with local civilian agencies on matters concerning weapons training and maintenance. Meets with key customer and coordinating officials to assess customer satisfaction, explain organization policy and procedures and resolve problems that arise.

(5) When needed or directed, performs and enforces the full range of security forces duties within the military installation. Incumbent is exposed to the day-to-day dangers associated with law enforcement and security duties. Incumbent has full powers to detain, pursue or direct detaining person(s) who attempt to flee crime scenes, an active shooter, or other means of resisting arrest. Incumbent carries a firearm as required or directed.

(6) Performs other duties as assigned.

*The above description only mentions a limited amount of the position's official duties. For a full comprehensive document that covers all the duties of the position, please contact one of the Recruitment Specialists at the bottom of the announcement.

• As the Wing IP program administrator, is accountable for the successful accomplishment of IP mission goals, objectives and the secure accomplishment of all other Wing mission goals and objectives.
• Implements and administers the overall Wing large-scale, joint DoD and coalition exercise security program.
• Develops, initiates and disseminates foreign disclosure policy guidance to Wing organizations and JFACC exercise personnel.
• Leads and administers the Wing Signature Management Program.
• Implements and administers the Anti-Terrorism and Force Protection Programs for the Wing.

Summary Continued: vehicle passes and Defense Biometric Identification System (DBIDS) cards and passes.

DUTIES:

• Processes applications and issues identification cards contract access badges, vehicle registration, and temporary passes to eligible personnel.
• Maintains controlled forms. Maintains control logs for identification cards and contractor access badges for maintenance and destruction of accountable forms in accordance with applicable AF instructions.
• Carries out routine, miscellaneous clerical tasks.
• Provides general customer service. Focuses on responsive and accurate customer service within the Pass & Registration/Visitors Center environment.

As a Public Affairs Specialist within the Office of Communication and Publishing, some of your specific duties will include:

• Uses a variety of visual storytelling approaches to translate complex scientific charts, maps, or graphics into products designed to engage general audiences.
• Communicate information that involves high visibility issues and may require careful coordination or fast-paced responses to tight deadlines, exercising appropriate professional judgement in handling of sensitive and controversial situations.
• Plans and coordinates the release of newsworthy public information. Maintains relationships with reporters, government officials, stakeholders, and other target audiences. Develops outreach events to help meet communication goals.
• Develops products, campaigns, and posts to reach audiences with a combination of written and visual products for web or social media. Develops a variety of multimedia and interactive products that incorporate photos and videos.
• Independently researches, writes, and prepares content for public dissemination such as new releases, feature stories, talking points, speeches, briefing materials, videos, photographs and social media posts that highlight USGS science and activities.

As a Public Affairs Specialist within the Office of Communication and Publishing, some of your specific duties will include:

• Uses a variety of visual storytelling approaches to translate complex scientific charts, maps, or graphics into products designed to engage general audiences.
• Communicate information that involves high visibility issues and may require careful coordination or fast-paced responses to tight deadlines, exercising appropriate professional judgement in handling of sensitive and controversial situations.
• Plans and coordinates the release of newsworthy public information. Maintains relationships with reporters, government officials, stakeholders, and other target audiences. Develops outreach events to help meet communication goals.
• Develops products, campaigns, and posts to reach audiences with a combination of written and visual products for web or social media. Develops a variety of multimedia and interactive products that incorporate photos and videos.
• Independently researches, writes, and prepares content for public dissemination such as new releases, feature stories, talking points, speeches, briefing materials, videos, photographs and social media posts that highlight USGS science and activities.

Melaksanakan drafting kerja perusahaan dengan pihak eksternal

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Access Management Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (5) personnel within the Information Security Compliance group that are focused on external federation and authentication services, privileged access management, non-privileged access management, identity access auditing, and multifactor authentication services. Effectively supports and executes multiple or more complex IT Security Access Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Access Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Access Management Manager.

Job Function:

• Understands and supports the IT Security Access Management initiatives that support overall IT Security Compliance goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM to safeguard against unauthorized access and threats
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Access Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts for identity and access management in accordance with Guidehouse Policies, Standards, and Procedures
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Access Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Access Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Access Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Access Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system
• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, access management, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM) to safeguard against unauthorized access and threats
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of as Identity and Access Management (IAM) within AWS
• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified Information Systems Auditor (CISA)
  • ISO 27001 Certified Auditor
  • ISO 9001 Certified Auditor
  • Project Management Professional (PMP)
  • CompTIA Security+ (Plus)
• Experience with Threat Intelligence
• Experience working with identity and access management systems
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Security Clearance required:

Do you want to make a difference? 
Cognosante employees are passionate about improving people’s lives. With an innovative mindset and an unwavering commitment to those we serve, we partner with healthcare, civilian and defense agencies to deliver exceptional public services and programs. Our multi-faceted technology and customer experience (CX) solutions achieve program outcomes, solve critical challenges and create meaningful change. Whether we are helping Veterans access healthcare faster, ensuring that members of the military complete their missions safely, or helping people obtain health insurance, our work touches millions of people. Are you ready to make a difference?

Come Join Our Team 
Cognosante is on a mission to transform our country’s healthcare and safety systems. With our health and security-focused solutions, we help public sector organizations achieve the important task of providing the best possible public services to American Citizens. From Enterprise IT, Data Science, and Security Services, to full-scale Consumer Engagement and Interoperability solutions, we are moving government services forward with transformation and innovation. Learn how we are making a difference in people’s lives today
 
What is the position? 
The Security Analyst is responsible for all activities related to designing, selecting, implementing, and maintaining security controls for major information systems supporting federal government contracts, including achieving and sustaining authorization to operate (ATO) following NIST Risk Management Framework procedures and guidance mandated under FISMA. 
 
What will I get to do?  

• Provides content to and collaboration with training staff on training stakeholders on triaging transactions and the reconciliation process.  This includes the continuous process improvement of the reconciliation process.
• Analyze systems, data, and operating environments to determine appropriate security controls.
• Work closely with project team members to make sure that applicable security requirements are incorporated in systems and solutions deployed for the project
• Participate in business, technical, and security reviews of the solution to explain selected security and privacy controls.
• Perform initial and ongoing risk assessments of the system.

 
What qualifications do I need? 

• Bachelor’s Degree or equivalent OR 4 years’ relevant experience in lieu of degree.
• Must be a US Citizen or Authorized to work in the US (if not a citizen) and a resident of the US for at least 3 years within the last 5 years.
• Must be proficient in word processing, spreadsheet, email, database, contact management, internet, and project management software (such as MS Office and Visio)
• Must have familiarity with project management tools and methodologies.
• Excellent communication skills
• Excellent problem-solving skills
• Excellent customer service skills

 
 
What additional characteristics will help me thrive?  

• Experience analyzing data and presenting to stakeholders.
• Formal education or professional experience in information assurance, information security management
• Ability to perform comfortably in a fast-paced, deadline-oriented work environment.
• Ability to successfully execute many complex tasks simultaneously.
• Information security certifications such as: Security +, CASP, CISA, CISM, CISSP

What We Offer  

Our mission is to provide comprehensive and competitive pay, benefits, services, and programs to eligible employees and their dependents that:  

• Ensure optimal health and productivity of our employees   

• Support employee retention and attraction  

• Provide work/life balance to ensure our employees succeed inside and outside of the office  

Compensation

The pay range for this job is determined by various factors, including but not necessarily limited to location, responsibilities of the job, and alignment with market data. When determining a salary for this role, the following factors may be taken into consideration - contract-specific affordability, education, knowledge, skills, competencies and experience. The estimate displayed represents the salary range for this position and is just one component of Cognosante’s total compensation package for employees. It is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee. 

Cognosante will not provide sponsorship for employment-based immigration benefits for this position.

What We Promise  

Cognosante employees are inspired by our bold mission to improve lives. To achieve this mission, we put our people first. No matter where they're located around the nation, our innovative workplaces enable individuals to apply their skills and experience to work toward a greater good.  

We foster a winning culture of solution creators built on innovation, collaboration, flexibility, and work-life balance. And we invest in the next generation of diverse talent to foster an inclusive, progressive, adaptable workplace that prioritizes advancement for all. As an affirmative action employer, we are committed to equal opportunity regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.   

Your safety during your job search is important. Recruiting communications will always be sent through one of the following corporate domain emails (@cognosante.com or @accurate.com).  

We will never send communications through any other domain, including @cognosantecareers.com, @gmail.com or @yahoo.com). We will never request payment from you, nor will we send payment to you, prior to your start date. If you have been asked to send or receive any payment, or if you have any doubt about whether you have been contacted by a Cognosante employee, please contact us at jobs@cognosante.com 

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Governance Sr. Analyst is a member of a service-oriented team with upwards to six (6) personnel within the Information Security Governance team that are focused on policy development/management, Engagement Data Security Plan (EDSP) management, Travel assessments, and documentation management. Effectively supports and executes multiple or more complex IT Security Governance projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse security governance, maintaining, and protecting Guidehouse and Client data to the NIST SP 800-171 standards, managing Engagement Data Security Plan (EDSP) implementation and execution for the Company, and manage the compliance and execution of the IT Travel Security program. Reports directly to the IT Security Governance Manager.

• Achieves operational targets within IT Security Governance area with direct impact on results

• Executes daily work within existing procedures and guidelines

• May influence other technical staff through explanation of facts, policies and practices related to job area

• Communicates with contacts typically within the project area or technical department on matters that involve obtaining or providing information requiring some explanation or interpretation in order to reach agreement

• Entry to established level technical individual contributor

• Builds on knowledge of an industry or segment and works to deepen experience across a range of projects

• Follows operating guidelines and identifies recommended enhancements in processes to improve effectiveness of IT Security Governance area

• Works under close to limited supervision on small to midsize projects or assignments

• Requires general instructions for new lines of work or special projects

• Assists with the implementation and executes on technical initiatives and solutions

• Relies on limited experience and judgment to plan and accomplish assigned tasks and goals

What You Will Need:

• United States Citizenship

• Bachelor's Degree preferred

• Minimum 2-4 years of prior relevant experience desired; (Relevant experience may be substituted for formal education or advanced degree)

• Shall possess one or more of the following certifications (preferred):

  • (ISC)2 Certified Information Security Professional (CISSP)

  • ISACA Certified Information Security Manager (CISM)

  • ISACA Certified Information Systems Auditor (CISA)

  • ISO 27001 Certified Lead Auditor

  • ISO 9001 Certified Lead Auditor

  • Project Management Professional (PMP)

  • Security+

• Must be able to work East Coast US business hours

• Experience documenting processes and procedures to comply with required NIST and IT standards

• Ability to work on many concurrent and changing priorities – flexibility is a must

• Action-oriented and able to manage and meet aggressive timelines and deadlines

• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Experience working with Governance Risk and Compliance tools beyond the manual processes of excel sheets, folders, and emails

• Experience with NIST SP 800-53

• Experience with Microsoft Azure Compliance Center

• Working knowledge of Active Directory, Exchange, SharePoint, and Teams

• Demonstrated ability to learn and document new technologies/solutions

• Experience with ServiceNow is a plus

• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Evotec is a leader in the discovery and development of novel small molecule drugs with operational sites in Europe, Asia and the US. The Company has built substantial drug discovery expertise and an industrialized platform that can drive new innovative small molecule compounds into the clinic. In addition, Evotec has built a deep internal knowledge base in the treatment of diseases related to neuroscience, pain, and inflammation. Leveraging these skills and expertise the Company intends to deliver superior science-driven discovery alliances with pharmaceutical and biotechnology companies.

We are looking for a full-time Senior Network and Security Engineer to join our team.  
 
Key responsibilities:
•    Responsible for the configuration, operation and fault clearance of the corporate WAN and LAN environment.
•    Design and Deployment of new sites and infrastructure.
•    Administration of the infrastructure of the central data centers and the Evotec sites and act as a contact for the network and security services used.
•    Provide 3rd tier support to local administration teams.
•    Plan, control, and implement changes to critical IT security and network infrastructures as part of a managed service.
•    Responsible for the documentation of the changes in the IT security and network environment.
•    Training of other administrators in the day to day functionality of the systems within their remit. 

Qualifications:

•    Completed IT-technical training or university degree.
•    Experience with network and firewall components (e.g. Cisco, Fortinet, Broadcom, F5, HP, Aruba) as well as with Windows networking.
•    Knowledge and experience in operation and troubleshooting in the following areas: Firewalls, VPN, Reverse Proxy, Load Balancers, Cloud Security, Cloud Services.

Evotec (US) Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, gender, age, disability, genetic information, gender expression, gender identity, national origin, religion, sexual orientation, or veteran status.

Evotec (US) Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, gender, age, disability, genetic information, gender expression, gender identity, national origin, religion, sexual orientation, or veteran status.

Who are we?

Product Software, Platform Services

Equinix is a global leader in interconnection and data center services, empowering businesses to connect their digital infrastructure securely and reliably. With a presence in more than 50 markets worldwide, Equinix provides cutting-edge solutions that enable companies to accelerate their digital transformation and thrive in today's interconnected world.

As we continue to prioritize the security of our customers' data and infrastructure, we are seeking a talented and driven Software Security Engineer to join our passionate team of experts at Equinix and help us maintain the highest level of security for our platform services that serve all Equinix’s products and customers.

Job Summary

As a Software Security Engineer at Equinix, you will play a pivotal role in enhancing the security posture of our software systems and services. Your expertise will be instrumental in safeguarding critical data and ensuring the uninterrupted operation of our platform services. You will collaborate closely with product and information security teams, as well as platform services’ engineering teams, architects, and other DevSecOps professionals across the organization.

Together, you will implement robust security measures, address potential vulnerabilities identified by InfoSec stakeholders, and promote security best practices throughout the software development lifecycle. This is a technical, hands-on engineering role designed for security specialists familiar with Java/Spring Boot and microservices architecture. Experience with distributed, highly automated environments and a developer’s understanding of security, coupled with a willingness to learn new concepts, are essential for success in this role.

Responsibilities

• Collaborate with internal InfoSec stakeholders to address security requirements and enhance security awareness across the organization

• Collaborate with platform services’ engineering teams to implement security practices into the software development process, ensuring secure coding standards, design principles, and threat mitigation strategies are followed

• Monitor and analyze security events and incidents, providing timely resolution and implementing preventive measures to protect against future threats

• Adhere to the defined SLOs to address the security vulnerabilities

• Conduct security training and awareness programs for developers and other team members to promote a security-conscious culture within the organization

• Contribute to the development and maintenance of security policies, procedures, and guidelines that align with industry best practices and regulatory requirements

• Conduct comprehensive security assessments, including code reviews, penetration testing, SAST/DAST scanning, and threat modeling, to identify and address potential security risks in the services that the platform team owns

• Manage configurations of security tools for platform services in alignment with other products and InfoSec

• Adopt and improve cloud and infrastructure security controls

• Assess the security of authentication, authorization, and encryption mechanisms to safeguard sensitive data and ensure secure access control.

• Actively research and keep abreast of the latest security threats, vulnerabilities, and industry best practices, and apply this knowledge to continuously improve our security strategies

Qualifications

• Minimum 7 years of professional engineering experience in Software Security , or a related field

• Minimum 5+ years of full-stack expertise in application design & development with Java technologies, with knowledge of Spring, JPA/Hibernate, Message Queues & Workflow Engines in a microservices architecture

• Strong hands-on ability to fixing vulnerable libraries/packages in Java, Spring Boot, ReactJS, NodeJS, Go, Kotlin, Message Queue frameworks or workflow engines

• Strong understanding of software security principles, secure coding practices, and common security vulnerabilities (OWASP Top 10, CWE, etc.)

• Proven work experience as a Software Security Engineer or similar role with a focus on securing large-scale, distributed software systems including secure configuration of AWS, docker, K8s, service mesh, and NACL configuration management

• Hands-on experience with security tools and frameworks for code analysis, vulnerability scanning, and penetration testing in software & network systems

• Hands-on experience with cloud security best practices and technologies using AWS

• Solid knowledge of network protocols, web application security, and data protection mechanisms

• Understanding of compliance frameworks like ISO, GDPR and SOC

• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex security issues to both technical and non-technical stakeholders

• Strong analytical and problem-solving skills with a keen eye for detail

• Passion for staying up-to-date with the latest security trends and technologies to proactively address emerging threats

• Apply now and be a key player in shaping the future of the security of Equinix’s platform services

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.

The Opportunity:

A well-designed secure network is critical to move data and enable the Department of Defense (DoD) to achieve their mission, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That’s why we need you, a Boundary Security Engineer, who knows how to utilize your craft to facilitate the needs of the DoD. As a Security Engineer on our team, you’ll work with the DoD to develop a reliable, secure network to support critical missions.

You’ll collaborate with SMEs, customers, vendors, and users to learn the strategic goals and operational needs that shape the network requirements. You’ll then share your expertise during the planning of acquisition, installation, configuration, and maintenance of the network components. From resolving interoperability issues across platforms, to supporting the acquisition of hardware, you’ll put your hardware and software talents to good use. This is your chance to share your experience with backbone networks, cloud technologies, and core networking, while broadening your security and network engineering work. You’ll dive into challenging hands-on problem-solving, and encounter opportunities to learn new tools and skills. We focus on growing as a team to make the best solutions for our customers.  

As a Boundary Security Architect at Booz Allen, you’ll design and test new boundary security capabilities in a lab environment and implement newly tested boundary security capabilities into production environments. You will need to support implementation teams with remote network firewall and security appliance support. You will also need to be able to identify and support security requirements for switched and routed networks and implement network security best practice configuration and associated hardware and software. Discover and assess complex client enterprise network deployments, apply leading-edge security principles, theories, and concepts, and contribute to the development of new principles and concepts. You’ll work on unusually complex problems, provide highly innovative solutions, operate with substantial latitude for unreviewed action or decision, and mentor or supervise employees in both firm and technical competencies.

Work with us as we secure and protect DoD enterprise networks for the better. 

What You’ll Work On: 

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. 

• Implement infrastructure and cyber security controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.  

• Perform risk and vulnerability assessments in network, system, and application areas; leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise. 

Join us. The world can’t wait. 

You Have:   

• 4+ years of experience with network security and the design of IT systems or networks for large commercial enterprises or government agencies

• 4+ years of experience with firewall and enterprise security design, including device hardening, intrusion detection systems and intrusion prevention systems, SIEM, firewalls, internet protocol security, vulnerability assessment, and intrusion detection

• Experience with Palo Alto firewalls, and Cisco or Juniper firewalls

• Secret clearance

• HS diploma or GED

• Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of hire

Nice If You Have:   

• Experience designing and implementing Cloud-native and over the top networking in AWS, Azure, or GCP

• Knowledge of DoD IT and Cloud security policies, including STIGs and DoD Cloud SRG, and how to apply them to the design and implementation of Cloud solutions

• Possession of excellent verbal and written communication skills, including public speaking, prior publications, and speaking engagements in industry or vendor forums

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career: 

Grow With Us 

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.  

A Place Where You Belong 

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.  

Your Candidate Journey 

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.  

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.