Total 16 information technology job vacancies in Legal / Public / Security category in USA, Wright Patterson AFB, 2145 Monahan Way, Building 28, Ohio

Make banking a Fifth Third better®

We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.

The Principal Information Security Engineer on our EVM team will be supporting the continuous vulnerability remediation process and reduce the Fifth Third Bank’s attack surface across cloud and traditional infrastructure, endpoints, and applications. This role is responsible for managing vulnerabilities from various scanning tools, analyzing, prioritizing, and communicating relevant, actionable information across the bank and our lines of business (LOBs).

• ESSENTIAL DUTIES AND RESPONSIBILITIES:
• Own processes related to reporting and timely remediation for vulnerabilities from infrastructure scans, cloud, containers, penetration testing, source code (SAST/SCA) and Bug Bounty.
• Report and track metrics, KPIs and KRIs with proactive escalations to maintain risk within acceptable appetite.
• Communicate effectively to engage and collaborate with key stakeholders on remediation, provide guidance, escalations and follow through vulnerability closure.
• Perform data analysis at scale and drive informed decisions with vulnerability prioritization and remediation campaigns.
• Design and implemented capabilities to enable Self-Service for remediation teams.
• Manage requests for False Positives, Exceptions and Risk Acceptance for vulnerabilities.
• Prioritize emerging threats and 0day vulnerabilities as they surface through Threat Intelligence.
• Consistently seek opportunities to improve EVM processes and demonstrate measurable impact towards reducing inefficiencies through implementation of Lean practices.
• Stay abreast of emerging technologies, actively engage in continuous learning to master new skills, and contribute to culture of continuous improvement and professional growth.
• Mentor junior team members.

MINIMUM KNOWLEDGE, SKILLS AND ABILITIES REQUIRED:

• Bachelor’s degree or equivalent with 10+ years of related hands-on experience in Vulnerability Management, Security Engineering, Governance or similar Information Security domains.
• Expert knowledge of security concepts, best practices, and articulate risk.
• Solid understanding of IS/IT GRC principles, such as ISO and NIST.
• Skill in effective oral and written communication, including presentations to Senior management, various levels of business and IT stakeholders, and technical resources.
• Able to work with a high level of autonomy in a dynamic environment with minimal supervision.
• Strong analytical and problem-solving skills, collaboration, and teamwork.
• Experience working with scripting (Python, Pandas, Groovy, etc.) is a major plus.
• Basic understanding of Agile methodologies and PI Planning.
• Industry Standard Certifications such as, but not limited to: CompTIA Security+, CISSP, CISM, GIAC and AWS are preferred.

Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.

Key Role:

Work alongside supervisors and managers as well as alongside technical personnel such as Network Engineers and System Administrators. Participate in the development or modification of computer environment security program plans and requirements. Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered. Ensure that cybersecurity requirements are integrated into the Continuity of Operations Plan (COOP) for that system or DoD Component. Ensure that cybersecurity requirements are appropriately identified in computer environment operation procedures. Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network systems operations. Develop security requirements specific to an IT acquisition for inclusion in procurement documents. Develop security requirements for hardware, software, and services acquisitions specific to cybersecurity programs. Ensure that IA and IA-enabled software, hardware, and firmware comply with appropriate security configuration guidelines, policies, and procedures. Review cybersecurity plans and identify alternative functional cybersecurity strategies to address organizational security concerns. Ensure that cybersecurity inspections, tests, and reviews are coordinated. Evaluate the presence and adequacy of security measures proposed or provided in response to requirements contained in acquisition documents. Advise the Authorizing Official of any changes affecting any systems’ security posture.

Basic Qualifications:

• 6+ years of experience working in cybersecurity
• 2+ years of experience using Enterprise Mission Assurance Support Service (eMASS)
• Experience with authorization actions concerning software development and testing, and the interpretation of patterns of non-compliance to determine their impact on levels of risk or overall effectiveness of the enclave’s cybersecurity program
• Experience evaluating risk analysis in the decision-making process, and evaluating proposals to determine if proposed security solutions effectively address enclave requirements, as detailed in solicitation documents
• Experience reviewing cybersecurity policies
• Knowledge of the configuration management (CM) of DoD software, including source code, documentation, and fieldable products, and DoD security and program protection and declassification operations
• Knowledge of DoD 8500, AR 25-2, AR 70-1, and DA PAM 70-3 Army Acquisition Implementation
• Secret clearance
• Bachelor’s degree
• DoD 8570 or 8140, and CompTIA Security+ Certification

Additional Qualifications:

• TS/SCI clearance
• ISC2 Certified Information Systems Security Professional (CISSP) Certification
• Microsoft IT Professional (MCITP), Microsoft Certified Systems Engineer (MCSE), Microsoft Certified Professional (MCP) on Windows 2016 or 2019 Server, Windows 10 MCSE, or equivalent Operating Systems Certifications
• Linux Certifications
• Cisco Networking Certifications

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services.  Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results.  We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.  Join our dynamic team and make your mark on the payments technology landscape of tomorrow. 

Summary of This Role

Develops, configures, documents, and maintains information security solutions.  Installs and configures web proxies, SIEMs, web application firewalls, intrusion detection systems, endpoint monitoring software, and vulnerability scanning systems.  Monitors and responds to alerts.  Ensures that threats and vulnerabilities to the organization’s business systems and applications (both in-house and cloud-based) are minimized.  Evaluates web application security controls and performs validation testing as needed.  Evaluates information security configurations when intrusions have occurred and monitors the effectiveness of implemented changes.  Monitors overall compliance with security standards and conducts periodic security reviews.

What Part Will You Play?

• Assists others delivering secure solutions and/or secure remediation solutions for moderately complex projects to the enterprise with good technical applications included.
• Supports others installing tools to specifically secure each level within security frame work for moderate projects.
• Researches and develops skills regarding new security technologies and trends while also helping to validate corporate conformance to industry standards utilizing set analysis criteria.
• Provides support for investigating intrusion incidents, conduct forensic investigations for moderate projects and helps others who provide incident responses.

What Are We Looking For in This Role?

Minimum Qualifications

• Bachelor's Degree
• Relevant Experience or Degree in: in Information Security or Computer Science preferred. Other majors will be considered.
• Typically Minimum 2 Years Relevant Exp
• Experience within Information Security or Information Technology. Experience managing projects. Additional 4 years related experience may be considered in lieu of a degree.
• Must be a US Citizen eligible to complete a Public Trust Background Check

Preferred Qualifications

• Cloud security experience
• DevSecOps
• Scripting knowledge such as Python and PowerShell
• One or more of the following-CISSP, CEH, CISA, CISM, eWPTX, OSWE, CRISC, CGEIT

What Are Our Desired Skills and Capabilities?

• Skills / Knowledge - Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity - Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgment within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.
• Supervision - Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Network Engineering - Develops an understanding of TCP/IP network connectivity, subnet segmentation, security zones, secure ports/protocols, network authentication/authorization, security tools and their applicability (WAF, IPS, Sandbox, etc.).
• Vulnerability testing, risk analyses and security assessments - Knowledge of vulnerability testing, risk analyses and security assessments
• Technical industry acumen - Knowledge of Industry regulatory audit requirements and solutions and Authentication, authorization, and encryption solutions

This position is eligible to be considered for remote hiring

#LI-Remote

Global Payments Inc. is an equal opportunity employer.

Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.

The Opportunity: 

Are you looking for an opportunity to share your experience in system security engineering to help our country and assist our clients with critical missions? As a systems security and network security engineer, you can identify the Information System Security Manager needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to lead the development and implementation of security solutions that will protect our military.

On our team, you’ll troubleshoot and analyze complex challenges for customers using your knowledge of network and security devices, applications, and identifying tools. You’ll use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience, you’ll assess security threats and implement infrastructure controls. In this role, you’ll closely impact the DoD by protecting infrastructure. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect critical AI/ML networks for vital client missions and operations.

What You’ll Work On:

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.

• Implement infrastructure and cyber security controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. 

• Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.

Join us. The world can’t wait.

You Have:

• 5+ years of experience working as an Information Systems Security Officer (ISSO) or Information System Security Engineer (ISSE)

• 2+ years of experience with guiding a client through the entire Risk Management Framework (RMF) process

• Experience with achieving system certification, accreditation, assessment, and authorization, including IATTs and ATOs

• Experience with engineering and integration of security controls and data-centric architectures to enable selective and secure information-sharing based on role, identity, and need to know IAW ODNI standards

• Knowledge of the systems and software engineering management process and its implementation, as applied to DoD acquisition processes throughout all life cycle phases

• Active TS/SCI clearance; willingness to take a polygraph exam

• Bachelor's degree

• IAT or IAM Level II minimum Certification, including GSEC, Sec+, CASP+, GICSP, CEH, CISM, or CISSP

Nice If You Have:

• Experience with STIGs, interpretation, and mitigation of results

• Experience with DevSecOps

• Knowledge of U.S. Army or DoD communication, cybersecurity, and IT systems

• Ability to apply Cybersecurity engineering methods to solutions development life cycle activities

• Ability to research emerging technology and apply it to cutting edge problems

• Possession of excellent presentation and collaboration skills

• Possession of excellent interpersonal skills

• TS/SCI clearance with a polygraph

• Bachelors' degree in a Science, Technology, Engineering, or Mathematics (STEM) field preferred; Master's degree in Computer Science or Cybersecurity a plus

• CISSP-ISSEP, CCSP, or CISM Certification preferred

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career: 

Grow With Us 

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.  

A Place Where You Belong 

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.  

Your Candidate Journey 

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.  

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

What Information Security and Risk contributes to Cardinal Health

This role of Identity Engineer on Associates Solution IAM team within Cardinal Health’s Global Identity and Access Management organization. This role will be responsible for leading complex initiatives integrating Cardinal Health’s Client facing Applications with IAM identity services. Strong partnership with the application and business stakeholders along with other IT Shared Services teams is required to ensure IAM services, technology, and processes adhere to Cardinal Health’s security policies, audit, and security controls while also maintaining and improving on client experience. The candidate should have an extensive background in IT security with experience in designing, implementing, and supporting IAM services for associates. The candidate will also leverage AGILE project management skills to drive improvements in IAM services and processes to improve the overall security posture. The right candidate must have team-oriented approach that balances adherence to security policies with client experience to provide best-in-class identity security to the organization.

Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure or destruction. This job family develops system back-up and disaster recovery plans. Information Technology also conducts incident response, threat management, vulnerability scanning, virus management and intrusion detection and completes risk assessments.

Job Summary

This role of Identity Engineer on Associates Solution IAM team within Cardinal Health’s Global Identity and Access Management organization. This role will be responsible for leading complex initiatives integrating Cardinal Health’s Client facing Applications with IAM identity services. Strong partnership with the application and business stakeholders along with other IT Shared Services teams is required to ensure IAM services, technology, and processes adhere to Cardinal Health’s security policies, audit, and security controls while also maintaining and improving on client experience. The candidate should have an extensive background in IT security with experience in designing, implementing, and supporting IAM services for associates. The candidate will also leverage AGILE project management skills to drive improvements in IAM services and processes to improve the overall security posture. The right candidate must have team-oriented approach that balances adherence to security policies with client experience to provide best-in-class identity security to the organization.

Job Duties

Subject matter expert for Associates Solution, providing identity services to Employees and Contractors. Primarily focused on forward engineering, POC design patterns and automation of existing manual processes to drive efficiencies.

• Apply advanced knowledge and an understanding of Associates Identify and Access Management (IAM) concepts, principles, and technical capabilities to manage a wide variety of projects and tasks
• Play a key role in development of IAM security policies and standards to improve Cardinal Health security posture
• Responsible for working independently with the vendor partners, security architecture, application architecture and business stakeholders to enable and integrate client facing applications into the Cardinal Health suite of IAM capabilities through existing or new IAM patterns
• Identify information required to analyze a problem, capturing that information from appropriate sources, analyzing the captured information, and using skillful questioning to understand and provide solutions to complex issues
• Possesses excellent verbal and written communication skills to ensure our internal partners and customers can understand technical solutions
• Fosters Innovation and Automation within the organization by developing and/or supporting new or improved products, procedures, metrics, or technologies
• Review and publish knowledge articles for IAM partners to effectively integrate with IAM solutions
• Responsible for training, mentoring, and providing technical guidance to the other team members and partners
• Showcase strong interpersonal, analytical, problem-solving, influencing, prioritization, decision-making, and conflict resolution skills

Responsibilities

• Technical leader in IAM organization accountable for leading IAM initiatives for client facing applications
• Responsible to implement end-to-end solutions to support identity governance and robust access control models (e.g., Developing build map rules, LCM Events and workflows) and ensure maintainability and supportability of the solution.
• Proven engineering experience in SailPoint IIQ Role Policy Management, Applications Onboarding, Analytics and Reporting, Rules, Email Templates, Certification and Access Provisioning
• Drive continuous improvement in IAM standards, procedures, security patterns and governance
• Lead and partner closely with key stakeholders on the application and business teams to ensure the organization meets or exceeds client satisfaction with innovative IAM solutions
• Work with vendor partners to deliver initiatives on time and within budget
• Educate internal partners on Cardinal Health IAM technologies and services

Qualifications

• Minimum 5 years of experience in IAM with SailPoint IIQ preferred.
• 3+ years of experience developing applications (java, python) preferred. 3+ years of using Identity Access Management solutions (SailPoint preferred) preferred
• Minimum 3 years of experience leading and supporting technical integrations. I.e. Broad knowledge of network, Database, Server, Cloud computing preferred.
• Experience working with Agile processes like Kanban, Scrum preferred
• Hands on experience in Java technologies including Core Java, Spring boot, spring data JMS, preferred
• Experience in scripting languages like Python, Powershell etc.
• Working knowledge of DevOps preferred
• Experience working within regulatory standards and requirements such as SOX, HIPAA, GDPR, HITRUST preferred
• Proven track record of successful IAM implementations including large scale enterprise deployments.
• Strong IAM domain knowledge

What is expected of you and others at this level

• Applies comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects

• May contribute to the development of policies and procedures

• Works on complex projects of large scope

• Develops technical solutions to a wide range of difficult problems. Solutions are innovative and consistent with organization objectives

• Completes work independently receives general guidance on new projects

• Work reviewed for purpose of meeting objectives

• May act as a mentor to less experienced colleagues

Anticipated salary range: $92,100 - $131,600

Bonus eligible: No

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 05/06/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

The Opportunity:  

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—an information security risk specialist who will break down complex threats into manageable plans of action.  

As an information security risk specialist on our team, you’ll use your experience to work with the DoD and Navy to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from SMEs, Engineers, and Program Managers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems and critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity and the Risk Management Framework.   

Work with us as we protect our nation's cyber infrastructure.  

Join us. The world can’t wait. 

You Have:  

• 5+ years of experience in cybersecurity

• 3+ years of experience with Risk Management Framework supporting the Navy

• Experience as an Information Systems Security Officer

• Experience with developing supporting artifacts for Navy authorization packages, including Categorization Forms, HW/SW Lists, Authorization Boundary Diagrams, and Security Control policy documentation

• Experience with Navy Risk Management Framework and analyzing policies, procedures, and standard operating procedures 

• Experience with Enterprise Mission Assurance Support Service (eMASS)

• Experience in creating and managing POA&Ms

• TS/SCI clearance

• Bachelor’s degree

• DoD 8570 IAT or IAM Level II Certification

Nice If You Have: 

• Experience as an Operating System Administrator, Systems Engineer, Requirements Analyst, Information Systems Security Manager, or Information Systems Security Engineer

• Experience with using Microsoft Office products, including Word, Excel, PowerPoint, and Visio

• Experience with Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), and Host Based Security System

• Experience with eMASSTer 

• Ability to identify security requirements for connected and non-connected systems and unclassified and classified systems 

• Ability to create tactics, techniques, procedures, white papers, standard operating procedures, workflows, system data flows, and architectural diagrams

• Master’s degree

• Navy Qualified Validator Level I, II, or III Certification

Clearance: 

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity:

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action.

As an information security risk specialist on our team, you’ll work with Navy programs to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from engineers and subject matter experts to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, white papers, and milestones.

You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical networks and systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity, security and network tools, systems engineering, and data science.

Work with us as we protect our military's cybersecurity posture.

Join us. The world can’t wait.

You Have: 

• 3+ years of experience with steering packages through all stages of the Risk Management Framework (RMF) process and developing artifacts, including security assessment plans, systems security plans, and plans of action and milestones

• Experience with achieving system certification, accreditation, and assessment and authorization, including IATTs and ATOs

• Experience with using cyber hardening, vulnerability management, SCAP, STIGs, and scanning tools

• Experience with the analysis and maintenance of security policies, evaluating assessment documentation, and providing written security recommendations

• Knowledge of the systems and software engineering management process, and its implementation as applied to the DoD acquisition processes throughout all lifecycle phases

• Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders

• TS/SCI clearance

• HS diploma or GED

• CompTIA Security+ Certification

Nice If You Have: 

• Experience with DOD or Navy cybersecurity and acquisition processes

• Experience with technical writing, acquisition documentation, cybersecurity requirements, and contract language

• Experience with security tools and devices, including network firewalls, ports and protocols, web proxies, intrusion prevention systems, vulnerability scanners, or penetration tools

• Experience with operating systems, platforms, and technologies, including Windows, Linux, cloud, or virtualization

• Knowledge of Navy networks

• Ability to brief senior leadership on complex cybersecurity issues

• Master’s degree

• CISSP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity:

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action.

As an information security risk specialist on our team, you’ll work with Navy programs to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll get technical, environmental, and personnel details from engineers and subject matter experts to assess the entire threat landscape. Then, you’ll help your team guide your client through a plan of action with presentations, whitepapers, and milestones.

You’ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical networks and systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity, security and network tools, systems engineering, and data science.

Work with us as we protect our military's cybersecurity posture.

Join us. The world can’t wait.

You Have: 

• 3+ years of experience steering packages through all stages of the Risk Management Framework (RMF) process and developing artifacts, including security assessment plans, systems security plans, and plans of action and milestones
• Experience achieving system certification, accreditation, and assessment and authorization, including IATTs and ATOs
• Experience using cyber hardening, vulnerability management, SCAP, STIGs, and scanning tools
• Experience with the analysis and maintenance of security policies, evaluating assessment documentation, and providing written security recommendations
• Knowledge of the systems and software engineering management process, and its implementation as applied to the DoD acquisition processes throughout all lifecycle phases
• Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders
• Secret clearance
• HS diploma or GED
• CompTIA Security+ Certification

Nice If You Have: 

• Experience with DoD or Navy cybersecurity and acquisition processes
• Experience with technical writing, acquisition documentation, cybersecurity requirements, and contract language
• Experience with security tools and devices, including network firewalls, ports and protocols, web proxies, intrusion prevention systems, vulnerability scanners, or penetration tools
• Experience with operating systems, platforms, and technologies, including Windows, Linux, cloud, or virtualization
• Knowledge of Navy networks
• Ability to brief senior leadership on complex cybersecurity issues
• TS/SCI clearance
• Master’s degree
• CISSP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.  

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Title:

KBR is seeking an Information System Security Officer. The successful candidate will assist and support the Tanker Division (AFLCMC/WL) located at Wright-Patterson Air Force Base in the development and delivery of documentation, reports, technical data and other product deliverables necessary to support system security analysis and certification analysis in the management, and platforms supported by the Tanker program.  The candidate should be knowledgeable in developing and maintain security and accreditation packages for standalone classified networks; implementing information system security requirements, system security plans, and ensure all auditing requirements are completed; ensuring all system security procedures are followed including updates to system security software (patches), updates to antivirus definition files, and ensuring audit files are maintained and reviewed; researching, advising on, and generating documentation as required for requesting permission to waive any cybersecurity requirements that are determined by the government customer to inhibit the foreign materiel exploitation mission to an unacceptable level.

ESSENTIAL DUTIES & RESPONSIBILITIES

• Support Risk Management Framework (RMF) Assessment and Authorization (A&A) processes leading to successful Authority to Operate decisions across multiple platforms
• Conduct vulnerability and risk assessments
• Perform key cybersecurity analyses and use technical risk management principles to assess Air Force Platform Information Technology (PIT) systems
• Review program documentation (e.g. concept, requirements, design, manuals, reports, deficiency/change reports and program schedules) to ensure that established security requirements are adequately addressed and sustained
• Perform document review and editing, as requested
• Support, coordinate, and assist with Program Management/Milestone driven events, etc., including Program Protection requirements as requested
• Perform other duties as assigned by management

BASIC QUALIFICATIONS:

• 2-4 years of experience in systems analysis and/or cybersecurity
• DoD 8570.01-M (IAM Level I- Security+) is required
• Active Secret Clearance with ability to gain Top Secret, SAP/SAR
• U.S. Citizenship is required

PREFFERED QUALIFICATIONS: Bachelor’s Degree in related field

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Job Description:

Parsons is looking for an amazingly talented Information System Security Engineer to join our team! In this role you will get to support services to advanced customer mission systems throughout the full systems lifecycle.

What You'll Be Doing:

• Define system security requirements in coordination with security stakeholders including system engineers, program managers, security control assessors, and authorizing officials.

• Provide independent cybersecurity advice and guidance to government stakeholders.

• Develop or review system security designs and architectures.

• Support testing of systems during development, reaccreditation and provide evaluation to program stakeholders. 

• Review results from system security scans and advise system engineers on best methods to remediate findings.

• Support engineering analysis of alternatives, tradeoffs, and risk treatment decisions.

• Develop and/or review cybersecurity documentation in support of customer Risk Management Framework (RMF) process; in accordance with NIST SP 800-37 Rev 5.

• Coordinate RMF processing with program and developer staffs.

• Work with interdisciplinary teams to deliver trustworthy and secure systems.

What Required Skills You'll Bring:

• Active TS/SCI Clearance with CI Polygraph and ability to maintain one.

• 5 years minimum of system and/or security engineering work performed in support of U.S. Government customers subject to the Risk Management Framework (NIST 800-53) or Intelligence Community Directive (ICD) 503.

• ​​(ISC)2 Certified Information System Security Professional (CISSP) or Certified Cloud Security Professional (CCSP) certification OR ability to obtain within six months of hire.

• Review and development of RMF Assessment and Authorization (A&A) documentation, e.g. System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs).

• Strong initiative and communication skills.

• Experience implementing NIST SP 800-53 Revision 5 security requirements and NIST SP 800-53A security assessment procedures.

What Desired Skills You'll Bring:

• Cybersecurity work performed in support of mission-essential space/ground system acquisitions and implementations.

• Ability to explain complex cybersecurity issues to a diverse audience in layman's terms

• Experience with the cyber security of SIGINT solutions.

• Experience implementing or assessing cybersecurity solutions using technologies such as:

  • Nessus, WebInspect, Splunk, Open SCAP

  • Microsoft Windows Server Active Directory

  • RedHat Linux

  • Virtualization Platforms: Hyper-V, VMware

  • Real Time Operating Systems (RTOS) (i.e. QNX, VxWorks)

  • VDI (Desktop), Citrix

  • Experience securing cloud-hosted assets in AWS/Azure/etc.

• Network engineering/design of LANs, WANs, MANs, including underlying routing protocols, and implementation. (TCP/IP, BGP, OSPF)

• Experience presenting verbal/written communications to Senior leadership including ISSMs, ISOs, security directors

• Experience with systems engineering  lifecycle processes

• Act as an advisor to the Government ISSM on ATO extensions, body of evidence reviews

• Experience guiding systems through the approval process per NIST-800-37  RMF

• Although not explicitly required, successful candidates typically have a B.S. or M.S. degree in a technical field

Minimum Clearance Required to Start:

Salary Range: 

The position may require a COVID vaccination or an approved accommodation/exemption for a disability/medical condition or religious belief as required by customer requirements and some cases federal, state, provincial or local mandates.

Title:

KBR is hiring an Information Systems Security Officer / RMF expert in San Antonio, TX. The individual is responsible for providing advice and assistance to the Government regarding secure configuration, authorization, and operation of the client’s IT assets.

RESPONSIBILITIES

• Conduct risk management framework (RMF) assessment and authorization activities of current and future systems
• Mitigate and eradicate malicious activity
• Apply knowledge and experience with standard information systems security concepts, practices, and procedures
• Implement common information systems security practices, policies, and technologies.
• Prepare reports on the status of security safeguards applied to computer systems
• Gather pertinent security documentation and artifacts for inclusion into system authorization packages.
• Establish continuous monitoring plans in accordance with customer guidance
• Use professional experience with controlling, labeling, virus scanning, and appropriately transferring data

(uploading/downloading) between information systems at varying classification levels

QUALIFICATIONS

• Bachelor’s Degree in Computer Science or related STEM discipline
• 5 – 10+ years’ experience in related field
• Understanding of systems methodologies including but not limited to client server, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, LAN, switches, and routers
• Working knowledge of configuration management, system maintenance, and integration testing
• Proficient in the use of tools used to prevent and/or negate malicious code
• Understanding of COTS tools that scan at the physical layer of all removable and fixed media types including but not limited to: (CDs, hard drives, thumb drives, Zip/Jazz, etc.)
• Working knowledge of all applicable client policies, procedures and operating instructions related to Information Technology, Information Assurance, Information Management (IT/IA/IM)

Travel:  Travel may be required.   

Security Requirements:  Active TS-SCI/w CI Poly security clearance required. 

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

The Opportunity:

Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies and military organizations.  In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is you – an information security risk specialist who will break down complex threats into manageable plans of action.

As an information security risk specialist on our team, you’ll use your experience to work with the DoD to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from subject matter experts, engineers, and program managers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission critical systems or critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity and Risk Management Framework. Join us as we protect our military’s communications and our nation's cyberinfrastructure. 

Empower change with us.

You Have:

• 3+ years of experience with DoD Risk Management Framework and analyzing procedures and standard operating procedures

• Knowledge of Microsoft and Linux Operating Systems

• Ability to identify security requirements for connected and nonconnected systems and unclassified and classified systems

• Secret clearance

• Bachelor's degree

• DoD 8570 IAT or IAM Level I Certification

Nice If You Have:

• Experience as an operating system administrator, systems engineer, requirements analyst, information systems security officer, information systems security manager, or information systems security engineer

• Experience with using Microsoft Office products, including Word, Excel, PowerPoint, and Visio

• Experience with Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), and Host Based Security System

• Ability to create tactics, techniques, procedures, white papers, standard operating procedures, workflows, system data flows and architectural diagrams, and RMF policies

• Navy Qualified Validator Level I, II, or III Certification

• DoD 8570 IAT or IAM Level II or III Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career: 
Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Make banking a Fifth Third better®

We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.

The Lead Information Security Engineer on our EVM team will be supporting the continuous vulnerability remediation process and reduce the Fifth Third Bank’s attack surface across cloud and traditional infrastructure, endpoints, and applications. This role is responsible for managing vulnerabilities from various scanning tools, analyzing, prioritizing, and communicating relevant, actionable information across the bank and our lines of business (LOBs).

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Manage reporting and timely remediation for vulnerabilities from infrastructure scans, cloud, containers, penetration testing, source code (SAST/SCA) and Bug Bounty.
• Report and track metrics, KPIs and KRIs with proactive escalations to maintain risk within acceptable appetite.
• Communicate effectively to engage and collaborate with key stakeholders on remediation, provide guidance, escalations and follow through vulnerability closure.
• Perform data analysis at scale and drive informed decisions with vulnerability prioritization and remediation campaigns.
• Create and maintain dashboards to enable Self-Service for remediation teams.
• Manage requests for False Positives, Exceptions and Risk Acceptance for vulnerabilities.
• Prioritize emerging threats and 0days as they surface through Threat Intelligence
• Consistently seek opportunities to improve EVM processes and demonstrate measurable impact towards reducing inefficiencies through implementation of Lean practices.
• Stay abreast of emerging technologies, actively engage in continuous learning to master new skills, and contribute to culture of continuous improvement and professional growth.

MINIMUM KNOWLEDGE, SKILLS AND ABILITIES REQUIRED:

• At least 6 years of related hands-on experience in Vulnerability Management, IS Engineering or similar Information Security domains.
• Strong understanding of security concepts, best practices, and articulate risk.
• Skill in effective oral and written communication, including presentations to Senior management, various levels of business and IT stakeholders, and technical resources.
• Strong analytical and problem-solving skills.
• Experience working with scripting (Python, Pandas, Groovy, etc.) is a major plus.
• Strong collaboration skills.
• Bachelor’s degree in computer science/information systems or equivalent combination of education and experience. Master's degree a plus.
• Industry Standard Certifications such as, but not limited to: CompTIA Security+, CISSP, CISM, GIAC and AWS are preferred.

Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.

Job Description:

Basic Qualifications:

• Active Top Secret/SCI clearance with Polygraph.
• Security+ |CE certification.
• Associate’s Degree or higher + 0-3 years of experience OR HS/GED + 4 years of experience.

Responsibilities include, but are not limited too:

• Develops, maintains, and implements information security standards, procedures, and guidelines for applications and databases.
• Ensures that systems and organizational databases are protected from unauthorized access and use.
• Monitors systems, identifies threats, and handles disaster recovery operations.
• Assists in the implementation of required government policy (e.g.,, NISPOM, DCID 6/3), and makes recommendations on process tailoring.
• Performs analyses to validate established security requirements and recommends additional security requirements and safeguards where required.
• Supports the formal Security Test & Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Periodically conducts a review of each system’s audits and monitors corrective actions until all actions are closed.
• Exhibits technical and operational proficiency in the primary duties of the job family. Plays a key role in implementing projects and programs in the function.
• Acts as a resource to managers and employees in the organization.

Desired Qualifications:

• Familiarity with conducting research and analysis.
• Familiarity with network and information system security principles and best practices.
• Familiarity with controlling, labeling, virus scanning, and appropriately transferring data (uploading/downloading) between information systems at varying classification levels.
• Ability to work with the military, civilians, and other contractors at all levels.
• Ability to prioritize tasks.
• Familiarity with applicable IC and DoD policies, procedures and operating instructions related to Information Technology, Information Assurance, Information Management (IT/IA/IM).

Minimum Clearance Required to Start:

Salary Range: 

The position may require a COVID vaccination or an approved accommodation/exemption for a disability/medical condition or religious belief as required by customer requirements and some cases federal, state, provincial or local mandates.