Total 19 Senior Executive level Legal / Public / Security job vacancies in Client Office: Reston, VA

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Access Management Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (5) personnel within the Information Security Compliance group that are focused on external federation and authentication services, privileged access management, non-privileged access management, identity access auditing, and multifactor authentication services. Effectively supports and executes multiple or more complex IT Security Access Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Access Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Access Management Manager.

Job Function:

• Understands and supports the IT Security Access Management initiatives that support overall IT Security Compliance goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM to safeguard against unauthorized access and threats
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Access Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts for identity and access management in accordance with Guidehouse Policies, Standards, and Procedures
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Access Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Access Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Access Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Access Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system
• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, access management, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM) to safeguard against unauthorized access and threats
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of as Identity and Access Management (IAM) within AWS
• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified Information Systems Auditor (CISA)
  • ISO 27001 Certified Auditor
  • ISO 9001 Certified Auditor
  • Project Management Professional (PMP)
  • CompTIA Security+ (Plus)
• Experience with Threat Intelligence
• Experience working with identity and access management systems
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Who are we?

Product Software, Platform Services

Equinix is a global leader in interconnection and data center services, empowering businesses to connect their digital infrastructure securely and reliably. With a presence in more than 50 markets worldwide, Equinix provides cutting-edge solutions that enable companies to accelerate their digital transformation and thrive in today's interconnected world.

As we continue to prioritize the security of our customers' data and infrastructure, we are seeking a talented and driven Software Security Engineer to join our passionate team of experts at Equinix and help us maintain the highest level of security for our platform services that serve all Equinix’s products and customers.

Job Summary

As a Software Security Engineer at Equinix, you will play a pivotal role in enhancing the security posture of our software systems and services. Your expertise will be instrumental in safeguarding critical data and ensuring the uninterrupted operation of our platform services. You will collaborate closely with product and information security teams, as well as platform services’ engineering teams, architects, and other DevSecOps professionals across the organization.

Together, you will implement robust security measures, address potential vulnerabilities identified by InfoSec stakeholders, and promote security best practices throughout the software development lifecycle. This is a technical, hands-on engineering role designed for security specialists familiar with Java/Spring Boot and microservices architecture. Experience with distributed, highly automated environments and a developer’s understanding of security, coupled with a willingness to learn new concepts, are essential for success in this role.

Responsibilities

• Collaborate with internal InfoSec stakeholders to address security requirements and enhance security awareness across the organization

• Collaborate with platform services’ engineering teams to implement security practices into the software development process, ensuring secure coding standards, design principles, and threat mitigation strategies are followed

• Monitor and analyze security events and incidents, providing timely resolution and implementing preventive measures to protect against future threats

• Adhere to the defined SLOs to address the security vulnerabilities

• Conduct security training and awareness programs for developers and other team members to promote a security-conscious culture within the organization

• Contribute to the development and maintenance of security policies, procedures, and guidelines that align with industry best practices and regulatory requirements

• Conduct comprehensive security assessments, including code reviews, penetration testing, SAST/DAST scanning, and threat modeling, to identify and address potential security risks in the services that the platform team owns

• Manage configurations of security tools for platform services in alignment with other products and InfoSec

• Adopt and improve cloud and infrastructure security controls

• Assess the security of authentication, authorization, and encryption mechanisms to safeguard sensitive data and ensure secure access control.

• Actively research and keep abreast of the latest security threats, vulnerabilities, and industry best practices, and apply this knowledge to continuously improve our security strategies

Qualifications

• Minimum 7 years of professional engineering experience in Software Security , or a related field

• Minimum 5+ years of full-stack expertise in application design & development with Java technologies, with knowledge of Spring, JPA/Hibernate, Message Queues & Workflow Engines in a microservices architecture

• Strong hands-on ability to fixing vulnerable libraries/packages in Java, Spring Boot, ReactJS, NodeJS, Go, Kotlin, Message Queue frameworks or workflow engines

• Strong understanding of software security principles, secure coding practices, and common security vulnerabilities (OWASP Top 10, CWE, etc.)

• Proven work experience as a Software Security Engineer or similar role with a focus on securing large-scale, distributed software systems including secure configuration of AWS, docker, K8s, service mesh, and NACL configuration management

• Hands-on experience with security tools and frameworks for code analysis, vulnerability scanning, and penetration testing in software & network systems

• Hands-on experience with cloud security best practices and technologies using AWS

• Solid knowledge of network protocols, web application security, and data protection mechanisms

• Understanding of compliance frameworks like ISO, GDPR and SOC

• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex security issues to both technical and non-technical stakeholders

• Strong analytical and problem-solving skills with a keen eye for detail

• Passion for staying up-to-date with the latest security trends and technologies to proactively address emerging threats

• Apply now and be a key player in shaping the future of the security of Equinix’s platform services

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.

Address:

MUST HAVE: Experience with SAST/DAST tools and relevant experience performing Application Security Testing; working as security consultant with application teams.

About the role:

The Application Security Testing Engineer reports to the Senior Manager and assists with the security testing activities for BMO based applications. The role will be responsible for the execution and coordination of Static and Dynamic Application Security Testing (SAST/DAST), provides information security consulting services (SAST/DAST Scanning) for BMO overall and businesses/groups. Liaises with stakeholders to understand problems and opportunities and enables BMO to meet its goals by understanding business vision, objectives and KPIs. Participates in the execution of information security strategy.

What will you do:

• Subject Matter Expertise - Provides technical leadership to business areas as a Security Testing subject matter expert. Assists with efforts on the execution of security testing operations to include pre-engagement (scoping), engagement (testing) and post-engagement activities (reporting).
• Secure Testing - Assists in delivery of security testing projects according to a structured process, to include writing test reports. This may include oversight and/or execution of the configuration and deployment of security testing software and application of results to security analysis.
• Information Security Risk Management - Works with leadership to mature security testing team capabilities including reporting and remediation guidance in alignment with local and global regulatory requirements. Identifies security gaps and deficiencies by conducting risk assessments; able to recommend corrective action of identified vulnerabilities and weaknesses. Assists with the execution of planning, testing, tracking, and advises on necessary risk acceptance for identified security risks. 
• Secure Application Development - Assists with the execution of highly technical/analytical security assessments of custom web applications, mid-tier application services, backend mainframe applications and databases, including manual, custom and industry known attack methods using a risk-based intelligence-led methodology. Identifies potential misuse scenarios. Advises on secure development practices.

What you need to succeed:

• Typically between 5 - 7 years of relevant experience and a post-secondary degree in Computer Science or Information Systems or a related field of study or an equivalent combination of education and experience.
• Experience in testing web applications, APIs, mobile applications to identify vulnerabilities and weaknesses.
• Hands-on experience with dynamic application security (DAST) tools such as Burp Suite, OWASP ZAP, etc. Hands-on experience with static source code analysis (SAST) tools.
• Knowledge of coding languages (e.g. C#, JAVA, JavaScript, TypeScript, Python etc.) and can code with little oversight
• Knowledge of different rapid development processes, e.g. Waterfall, Agile, etc.
• Knowledge of coding vulnerabilities, frameworks, patching processes, Information Security risk and industry best practices, defense concepts, risk-based assessment approach
• Knowledge of OWASP Top 10, and the OWASP Testing Guide or other secure coding frameworks, NIST Cyber Security Framework (CSF)
• Understands the principles of secure coding techniques and secure code reviews, code scanning software and vulnerability code scanning processes, network protocols and connectivity.
• Industry certification is an asset - CISSP, CISSLP, CCSK, GIAC etc.
• Experience working in an Agile development environment, and ability to work effectively with cross-functional teams.

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We’re here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Information Protection Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (4) personnel within the Information Security Operations group that are focused on data loss prevention (DLP), data aggregation/sharing monitoring, sensitive information management, cryptographic services, and secure file transfer services. Effectively supports and executes multiple or more complex IT Security Information Protection projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Information Protection security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Information Protection Manager.

Job Function:

• Understands and supports the IT Security Information Protection initiatives that support overall IT Security Operations goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM), Amazon Cognito, AWS Key Management Service (KMS), and AWS Shield to safeguard against unauthorized access and threats
• Manages AWS specialized data classifications and data protection mechanisms
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Information Protection team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts using AWS Security Hub in accordance with Guidehouse Policies, Standards, and Procedures
• Assists with the development of incident response strategies and efforts to address security incidents and breaches, minimizing impact on business operations
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Information Protection leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Information Protection leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Information Protection team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Incident Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system

• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, network security, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM), Amazon Cognito, AWS Key Management Service (KMS), and AWS Shield to safeguard against unauthorized access and threats

• Working knowledge of the MITRE ATT&CK framework
• Experience working with Security Operation Centers, physically or virtually
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Experience using a SIEM, such as Splunk or Sentinel to do analysis of security anomalies and events
• Experience creating writing queries with Search Processing Language (SPL) or Kusto Query Language (KQL)
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of data loss protection (DLP) and sensitive information management within AWS

• Experience in one or more of the following cryptographic capabilities:
  • S/MIME generation
  • Code signing certificates
  • HSM cryptographic key generation
  • Key encryption keys
  • Key material supersession procedures
  • NIST SP 800-88 cryptographic erasure procedures
  • Cryptographic Key Management

• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• This position is open to candidates in India only, preference is within the Chennai or Trivandrum areas
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • SANs GIAC certification (e.g., GPEN or GW APT)
  • Offensive-Security Certified Professional (OSCP)
  • EC-Council Certified Ethical Hacker (CEH)
  • Microsoft Security (Operations Analyst/Engineer/Administrator) Associate
  • Microsoft Information Protection Administrator Associate
  • CompTIA Security+ (Plus)
• Experience working with firewalls/web application firewalls, secure file transfer systems, implementing changes, and monitoring status
• Experience with Threat Intelligence
• Experience conducting Incident Response and Security Investigations
• Experience working with secure file transfer systems, such as: Kiteworks, IBM Aspera, Globalscape EFT, WinSCP, or other Secure File Transfer tools
• Experience working with file share monitoring systems, such as: Varonis, SolarWinds, Atera, Netwrix, ManageEngine, or other file share monitoring tools
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment
• Experience with Kiteworks
• Experience with Varonis

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

The Opportunity: 

Everyone is trying to “harness the power of the cloud,” but not everyone knows how. As a Cloud Computing Infrastructure Architect, you know how to take advantage of cloud capabilities. On our team of experts, you’ll use cutting-edge enterprise cloud platforms to support your clients as they modernize their IT infrastructure and meet their most challenging missions. We’re looking for an engineer who can create advanced network security solutions in the cloud that will stand up to even the most advanced cyber threats.

As a senior cloud network security engineer at Booz Allen, you’ll research, design, and implement network security solutions to protect our client's most sensitive information in AWS, Azure, and GCP. You’ll coordinate with investment teams, executives, clients, and industry-leading vendors to identify the right mix of tools and techniques to translate your customer’s goals into a plan that will enable secure and effective cloud-hosted solutions. We need to come up with the best solution, so you’ll investigate new techniques, break free from the legacy model, and go where the industry is going. You’ll lead the team through a critical approach to design, including providing alternatives and customizing solutions to maintain a balance of security and mission needs. This is a chance to make a difference in the security of our country's financial markets, warfighters, citizen services, and healthcare. Your technical expertise will be vital as you help customers overcome their most difficult challenges by integrating cloud-native network security, next-generation firewalls (NGFW), Transport Layer Security (TLS), intrusion detection and prevention systems (IDS/IPS), packet capture (PCAP), web application firewalls (WAF), and network monitoring and analytics capabilities. You’ll be able to broaden your skillset into advanced and emerging areas of cybersecurity like zero trust networks, software-defined networking, and container security to support dynamic and immutable cloud infrastructure. Join our team as we deliver innovative cybersecurity solutions to protect our client's information in the cloud.

Join us. The world can’t wait.  

You Have:  

• 5+ years of experience with the government, public, or private industry
• Experience with firewall, network security, or network monitoring solutions, including leading firewall vendors, such as Palo Alto, Checkpoint, Fortinet, Cisco Firepower, or ASA
• Knowledge of network security concepts, including packet capture, intrusion detection, encryption in transit, break-and-inspect, and OWASP
• Knowledge of the OSI model, TCP/IP, TLS, FISMA, FedRAMP, PCI, RMF, DoD cybersecurity policies and control frameworks, modern encryption algorithms, IPSec, and TLS
• Knowledge of cloud-native and 3rd party network solutions to protect information hosted in Cloud providers, including AWS and Microsoft Azure, web application firewalls, and application delivery solutions, such as F5-BIG IP, Citrix ADC, and NGINX
• Ability to analyze requirements, design, implement, and operate highly available and scalable firewall and network security solutions in cloud environments
• Ability to educate and inform clients on network security concepts and how they can be applied to protect information, communicate and convey complex network solutions and concepts to a wide range of stakeholder audiences, and create technical artifacts, including logical and physical network diagrams, technical specifications, system installation procedures, and bills of materials
• Ability to obtain a security clearance
• HS diploma or GED

Nice If You Have:  

• Experience with AWS cloud-native network and solutions, including Security Groups and ACLs, VPC, Transit Gateway, VPC FlowLogs, PrivateLink, and Direct Connect
• Experience with software-defined network and WAN solutions
• Experience with network monitoring and security solutions for containerization technologies, including Docker, Kubernetes, and OpenShift
• Experience with writing proposals, whitepapers, and other technical marketing materials to compete for and win new business
• Experience with Git, Jenkins, and Ansible for implementing CI/CD pipeline solutions, infrastructure as code, and automation solutions
• Ability to develop code or scripts using Python, JavaScript, or programming languages
• Ability to lead a team of engineers in the development of complex integrated solutions
• Secret clearance
• Bachelor's degree in Mathematics, Science, or Engineering
• Security+, Cisco CCNA, Cisco CCNP, Palo Alto PCNSE, Palo Alto PCNSA, CISSP, AWS, GCP, or Microsoft Azure Certification

Clearance:  

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Key Role:

Provide advanced technical knowledge and analysis of highly specialized applications and operational environment, high-level functional systems analysis, design, integration, documentation, training, and implementation advice on complex problems which require doctorate level knowledge of cybersecurity for effective implementation. Apply principles, methods, and knowledge of specific functional areas of expertise to specific task order requirements. Provide advice on esoteric problems which require extensive knowledge of the subject matter. Design and prepare technical reports, studies, and related documentation, create executive level charts and graphs to record results, and prepare and deliver presentations, training, and briefings, as required.

Basic Qualifications:

• Experience with cyber operations and information security in a Joint environment 
• Experience with military operations
• Knowledge of Risk Management Framework and its functionality
• TS/SCI clearance
• HS diploma or GED and 12+ years of experience with information technology, Bachelor's degree and 8+ years of experience with information technology, or Master's degree in IT and 4+ years of experience with information technology
• DoD-8570 IAM Level 2 Certification 

Additional Qualifications:

• Experience with the Knowledge Management/Decision Support tool and Functional Capability Boards (FCB)
• Knowledge of Joint Force systems, operations, cyber mission planning, and execution
• Knowledge of JCIDS
• Completion of DAU training

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Opportunity:

Everyone is trying to “harness the cloud,” but not everyone knows how to secure it. As a security engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission critical applications for the Intelligence Community (IC)? We need you to help us develop cloud-based security architectures for some of the IC's most critical systems.

As a security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining an organizations’ state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements. Your technical experience will be vital as you work with IC clients to ensure standards are met with IA and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.

Join us. The world can’t wait.

You Have:  

• Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans

• Experience with cloud security architecture design, evaluations, guidance development, and troubleshooting

• Experience with the RMF

• Experience working in an Agile development environment using the JIRA tracking tool

• TS/SCI clearance with a polygraph

• HS diploma or GED

• Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC Certification within 6 months of hire​

Nice If You Have:  

• Experience with the software development life cycle (SDLC)

• Experience with cloud technologies

• Possession of excellent team leadership, development, and client relationship skills

• Possession of excellent interpersonal skills to successfully interact with clients, engineers, and managers

• Possession of excellent verbal and written communication skills

• Security+ CE, SSCP, CCNA-Security, or GSEC Certification

Clearance:  

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Job Summary

Job Description

• Experience Required: 5 to 10 years in either cyber security or information security.
• Experience Desired: Five years+ experience with open source security software and information security specific tools.
• Education Desired: Bachelors Degree preferred in IT/ CS.
• Certification or Licensing Desired: CISSP, GIAC, CISA
• Travel Required: Regional - Daily, Less than 10%

Job Responsibilities

• Design network and application vulnerability assessment programs and testing methodologies.
• Perform technical risk assessments for enterprise systems and report gaps and remediation actions. Analysis includes automated testing using standard tools as well as manual testing and interrogation of web-based applications.
• Design and configure Intrusion Prevention Systems and passive Intrusion Detection Systems. Create and test custom signatures based on emerging threats or business needs. Perform signature updates and reviews and tuning of sensors. Configure automated reporting and develop escalation procedures.
• Configure SIEM (Security Information and Event Management) platforms to include obtaining data from endpoints and network devices and generating reports. Create automated workflow to address security related incidents.
• Perform regulatory compliance audits including SOX, PCI and HIPAA. Report findings and advise on remediation efforts. Assist in preparing business application owners prior to external audits.
• Lead advisement and interpretation of emerging regulations and legal requirements. Research, monitor and advise on emerging security threats and developments that affect business systems or network infrastructure.
• Lead and advise on security related updates for endpoint applications and server applications, as well as vendor-supplied or proprietary security patches. Responsible for coordination with various teams to ensure patches are deployed in a timely manner based on risk assessment to the organization.
• Design and maintain various cryptographic solutions including x.509 based certificate cryptography, PGP/GPG PKI infrastructure, TLS/SSL tunneling solutions, endpoint encryption and other cryptographic solutions on multiple platforms, both at rest and in motion.
• Perform penetration testing on multiple platforms and network environments including wireless (RF), wired, physical, social and the like, following frameworks such as the OSSTMM and ISSAF.
• Review firewall rules and access control lists for appropriate access — this may include port and protocol analysis to best determine scope of access rules.
• Assist in creating and maintaining information security policies, including technical and administrative policies.
• Have availability for 24/7 rotational support.
• Conduct research on new security technologies and products, both open source and vendor proprietary.

Build your best future with the Johnson Controls team

As a global leader in smart, healthy and sustainable buildings, our mission is to reimagine the performance of buildings to serve people, places and the planet.  Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience, focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard – your next great opportunity is just a few clicks away!

What we offer:

• Competitive salary

• Paid vacation/holidays/sicktime

• Comprehensive benefits package including 401K, medical, dental, and vision care

• On the job/cross training opportunities

• Encouraging and collaborative team environment

• Dedication to safety through our Zero Harm policy

What you will do 

The Commercial Security Account Executive will promote and sell Johnson Controls Security services and technology within an assigned territory, establishing relationships, closing new business, and ensuring customer retention. You are a "brand steward", charged with telling our story and clearly demonstrating that Johnson Controls is the leading electronic security provider. Secures profitable sales and upgrades to new, existing and discontinued customers while improving customer happiness and retention through post installation follow-ups.

How you will do it 

• Build new market share by selling to new local commercial customers.  

• Sell additional products and services to existing accounts that continue to present new sales opportunities.  

• Sell add-ons, amend, and convert existing customer systems to meet the customers' expectations.  

• Renew existing customer agreements.  

• Responsible for resale opportunities within an assigned territory. 

• Identify prospects using creative lead-generating techniques and maintain productive working relationships with existing customers.  

• Independently establish call plans and customer follow-up strategies and tactics, and consistently apply time and territory management techniques.  

• Follow up with prospects.  

• Maintain an in-depth knowledge of complete line of products/services and customers' issues and needs through in-house training and reading/research.   

• Acquire referrals and work with Centers of Influence.  

• Process work order and complete all paperwork in accordance with approved and standardized procedures.  

• Conduct post-installation follow-up by contacting customer, ensuring commitments were met and affirming customer happiness once the customer has been in service   

What we look for 

Required:

• High school diploma or equivalent required.  

• Experience in security sales or service. 

• Valid Driver’s License with good driving record. 

• Available for local travel.  

Preferred:

• Minimum of 2 years’ experience in outside sales of commercial security systems. 

• Ability to meet and exceed quota.  

• Excellent oral, written and presentation skills with the ability to present to senior level executives. 

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, sexual orientation, gender identity, status as a qualified individual with a disability or any other characteristic protected by law. To view more information about your equal opportunity and non-discrimination rights as a candidate, visit EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit here.

The Opportunity:

Everyone is trying to “harness the cloud,” but not everyone knows how to secure it. As a cloud security architect, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your advanced cloud security skills to improve the analysis of Intelligence Community (IC) performance? We need you to guide the development of cloud-based security architectures for some of our IC client’s most critical systems.

As a cloud security architect on our team, you’ll deliver program management, define and execute plans for system maintenance, operation and upgrades, manage user access, deliver recommendations associated with cloud system use and resource consumption, assist in the design, build, and deployment of additional capabilities, and more. You’ll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address the risk management framework (RMF). Your technical expertise will be vital as you work with client security staff and analytic teams to ensure standards are met with information assurance and security requirements.

This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment. You’ll continue to strengthen your skills in AWS, Kibana, Tableau, JupyterLab, and more while mentoring tomorrow’s cloud security experts.

Help us transform and secure mission performance measurement with cloud technology.

Join us. The world can’t wait.

You Have:  

• 5+ years of experience with securing applications in AWS or Azure Cloud
• Experience with the Risk Management Framework (RMF)
• Experience with implementing resource management security in the Cloud
• Experience with developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans
• Experience working in an Agile development environment using the JIRA tracking tool
• Experience with securing data at rest and in transit
• TS/SCI clearance with a polygraph
• Bachelor’s degree

Nice If You Have:  

• Experience with applying current and emerging technology integration solutions and trends, including AI/ML, Natural Language Processing (NLP), and FedRAMP and regulatory requirements
• Experience with DevOps methods and tools
• Experience with the Software Development Life Cycle (SDLC)
• Ability to analyze broad Enterprise business needs, research possible cloud solutions and patterns, and define solution implementation approaches
• Security+ CE, SSCP, CCNA-Security, or GSEC Certification

Clearance:  

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.
 

Create Your Career: 

Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Leidos has an immediate need for a Senior Microsoft Security Engineer for a new customer on a highly-visible and strategic Cybersecurity Task Order. The Senior Microsoft Security Engineer will need to be a self-starter with excellent analytical and problem-solving skills, flexibility, good judgment, and the ability to coordinate multiple, concurrent tasks in an effective manner. This individual will work with internal team members to ensure that systems are functional, secure, and scalable. The systems and networks developed will be used to collect and process data and improve the customer’s security infrastructure. The Senior Security Engineer will support the design and development of cybersecurity tools and technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide systems and networks.

Primary Responsibilities:

• Conceptualize, design, build, and maintain current and future customer-supported tools and platforms

• Manage multiple assignments and work independently with minimal oversight

• Produce system design documents.  Support architectural analysis of cyber security features and existing system related to future needs and trends

• Review and provide input to system requirements based on cybersecurity posture

• Compile industry best practices and lessons learned into future iterations and new designs

• Provide broad-based experience in IT Service Management and apply the experience to specific cyber security initiatives relating to system design, development, and operations and maintenance

• Employ measures to ensure the deployed infrastructure is secure and available

• Advise and assist team members to deploy and configure collection services and tools

• Develop processes to evaluate and improve all operating systems, hardware, software, and firmware solutions

• Work closely with stakeholders to solve technical problems at the network, system and application levels

• Collaborate, coordinate, and build relationships with customer representatives and external stakeholders

• Conduct periodic architectural reviews of installed sensors to assess effectiveness and propose optimal installation alternatives as required

• Draft technical documentation, reports, and presentations as needed for customer or internal use.

• Manage physical and virtual infrastructure and troubleshoot problems to successful completion

• Create and manage shell scripts for task automation and log extraction

• Develop solutions to complex technical issues

• Provide follow-up reports (technical findings, feedback, resolution steps taken) for root cause analysis, engineering technical assessments, and process improvement initiatives

• Provide training and documentation for customer and internal teams

• Review and approve documentation and diagrams (e.g., system specifications).

• Identify tasks and issues that may have an impact on service levels or schedules and provide realistic schedule and cost estimates

• Maintain a current working knowledge of IT development methodology, architecture design, security best practices, and technical standards.

• Communicate with other technical leads, IT groups, and customer reps so they understand all aspects of proposed changes/solutions.

Basic Qualifications:

• 3-5 years of experience with Microsoft/Office 365, including at least 1-2 years of experience with securely configuring/engineering Microsoft/Office 365

• 3-5 years of experience with Microsoft Azure, including at least 1-2 years of experience with securely configuring/engineering Microsoft Azure

• BS degree in Science, Technology, Engineering, Math or related field and 12-15 years of prior relevant experience with a focus on cybersecurity OR Masters with 8-10 years of prior relevant experience.

• Expertise with Azure services and components to build, manage, and maintain Azure Cloud environments

• Experience deploying, maintain and troubleshooting Microsoft/Office 365 at an enterprise level

• Extensive automation experience with PowerShell and Shell Scripting for automating repeatable tasks and installations

• Extensive knowledge of server operations and maintenance

• Extensive experience managing enterprise networks

• Understanding of cloud terminology, architecture, and tools to include installing, provisioning and monitoring.

• Experience installing, configuring, and maintaining tools such as Tanium, Nessus, Forescout, and Cyberark in a hybrid-cloud environment

• Department of Homeland Security (DHS) Entry on Duty (EOD) is required to support this program

• Candidate Must posses the following Microsoft certifications:

  • MS 365 Certified: Security Administrator

  • Microsoft Certified Azure Security Engineer (Associate)

• Candidate must also possess one of the below certifications:

  • CompTIA: CASP

  • SANS:  GCIH, GCWN, GISF, GISP, GSSP, GICSP, GSSP

  • Carnegie Mellon:  SEI

  • ISC2:  CCSP, CISSP, CSSLP, SSCP

  • Cisco:  CCNP, CCNP Security, CCIE Security

  • EC_Council:  CEH, ECSP

  • Red Hat:  RHCA, RHCE

  • Splunk:  Certified Splunk Architect

Preferred Qualifications

• Experience automating management tasks with Ansible, Puppet, or Chef

• Experience working among different Cloud Provider environments (Azure)

• Experience developing in Powershell

• Experience working with SIEM tools such as Splunk to ingest, normalize, store, and maintain data from endpoint, network, and application sourcetypes.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Job Family:

Travel Required:

Clearance Required:

** Please note that this job posting is for a proposal of a potential client and is not reflective of an awarded job. In addition, we are only collecting resumes and interviewing based off the skillset and qualifications listed.  ***

Senior Consultants In this role, the candidate will support the Security and Compliance team in its efforts to assist clients with cyber and physical security, grid reliability, risk management and/or utility wildfire mitigation. The candidate will be expected to immediately contribute to client program design, process improvement, regulatory compliance, project management, and the development of reports/spreadsheets/presentations deliverables. Senior Consultants work closely with, Managing Consultants, Associate Directors, and Directors to keep them abreast of project progress and important developments.

What You Will Do

• Supporting workstreams that enable the assessment, development, and enhancement of business strategies, operating plans, business processes, organizational structures, and supporting infrastructure for clients.

• Applying cybersecurity, process improvement, & risk management framework knowledge to support the design of client deliverables.

• Applying technical competencies “on the ground” with clients.

• Communicating solutions and new strategies to clients through reports and presentations.

• Performing data collection, analysis, statistical & risk analyses in support of project objectives.

• Providing detailed fact finding, research, and analysis to further support delivery.

We encourage career development and hiring for the long term. As a Senior Consultant, you will be able to design your career path and continue to develop your hard and soft skills. As you are ready drive strategic solutions across multiple complex workstreams and become more involved in business development, you will have the opportunity to progress to a Managing Consultant and beyond.

What You Will Need:
 

• Bachelor’s degree in a business, policy, engineering (esp. mechanical, electrical/power systems), economics, finance, science or related discipline

• Strong project management skills

• Strong communications skills, including both written and verbal

• Strong critical analysis and problem-solving skills

• Ability to manage multiple time-sensitive priorities without diminished effectiveness

• Ability to travel as required

• No sponsorship available for this position

• The successful candidate must not be subject to employment restrictions from a former employer (such as a non-compete) that would prevent the candidate from performing the job responsibilities as described.

• Authorization to work in Canada.

What Would Be Nice To Have

• Master’s or MBA degree in an engineering, science, business and/or economics discipline; Combinations of engineering and business ideal

• Previous experience as a consultant (external/Internal) or management consultant

• Working experience in a Reliability Compliance field for an electric utility, a Region, NERC, FERC, or equivalent

• Utility experience

• Regulatory experience

• Experience working for Provincial or local governments

• Specific working experience related to any of the following:

  • Cyber security especially working with Operations Technology (OT) or Industrial Control Systems (ICS)

  • Bulk Electric System (BES) and power systems

  • NERC/FERC Enforcement or Auditing

  • Critical Infrastructure Protection standards (CIP)

  • Physical Security

  • Utility wildfire mitigation

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Leidos has an immediate need for a Senior Security Engineer for a new customer on a highly-visible and strategic Cybersecurity Task Order. The Senior Security Engineer will need to be a self-starter with excellent analytical and problem-solving skills, flexibility, good judgment and the ability to coordinate multiple, concurrent tasks in an effective manner. This individual will work with internal team members to ensure the systems are functional, secure, and scalable. The systems and networks developed will be used to collect and process data and improve the customer’s security infrastructure. The Senior Security Engineer will support the design and development of cybersecurity tools and technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide systems and networks.

Primary Responsibilities:

• Provides technical leadership and support to a team of Senior/Junior Security Engineers with a broad scope of capabilities and tools, including Splunk, Tanium, Cyberark, SOAR, security stacks, networking protocols, Threat Intelligence Platforms, Cloud technology, and other security operations-related technologies.
• Manage multiple assignments, changing priorities, and work independently with little oversight
• Tackles large security projects, both of a technical and compliance nature. The senior engineer is expected to tackle difficult technical issues and changes with minimal oversight
• Support all support, guidance and develop processes to evaluate and improve all operating systems, hardware support, software, firmware solutions and provide advisement concerning future purchase of the same
• Work closely with senior engineers, other team members and application owners to solve technical problems at the network, system and application levels
• Conduct periodic architectural reviews of installed sensors to assess effectiveness and propose optimal installation alternatives as required
• Documentation, Visio Diagrams and reporting along with presentation, teamwork and DHS wide collaboration are among the expected duties and mission of the task order
• Resolve Linux system errors and crashes, disk space problems, huge file system and full disk errors
• Experience in backend solution, day to day system admin and monitoring, file system management and disk management and creation of shell scripts for the automation of tasks and the extraction of logs
• Hardware and software installations, upgrades, maintenance, security analysis and network performance and tuning of Windows and Linux servers in a virtual infrastructure
• Define system security & design requirements to meet FISMA and FedRAMP compliance standards
• Maintain a current working knowledge of IT development methodology, architecture design, security best practices, and technical standards
• Communicate with other technical leads, IT groups, and customer reps so they understand all aspects of proposed changes/solutions
• Provide follow-up reports (technical findings, feedback, resolution steps taken) for Root Cause analysis, engineering technical assessment and process improvement initiatives
• Communicate security vulnerability reports and trends to ensure appropriate corrective action is taken
• Develop, implement, communicate, and enforce security policies and/or processes for data, software applications, and cloud infrastructure
• Superior attention to detail with excellent written and verbal communication, problem solving, researching and follow-up skills
• Communicates with other technical leads, IT groups, and clients so they understand the project's technical implications, dependencies, and potential conflicts. Evaluates the impacts of change requests on own/shared technologies and effectively persuades and influences others on ideas
• Understanding network security (firewalls and IDS) design and implementation

Basic Qualifications:

• BS degree in Science, Technology, Engineering or related field and 12-15 years of prior relevant experience with a focus on cybersecurity OR Masters with 8-10 years of prior relevant experience.
• Experience installing, configuring, securing, and troubleshooting Microsoft Windows Server and Red Hat Enterprise Linux or similar Linux distributions
• Extensive automation experience with PowerShell and Shell Scripting for automating repeatable tasks and installations
• Extensive knowledge of server operations and maintenance
• Experience managing Active Directory (AD) and Azure Active Directory
• Experience managing Active Directory Federation Services (AD FS) and single sign-on using SAML and PIV/CAC
• Experience with Active Directory Group Policy management
• Knowledge and experience supporting public key infrastructure (PKI)
• Knowledge and experience implementing and supporting Active Directory Certificate Services (AD CS) and Azure Dedicated HSM
• Knowledge and experience managing keys, certificates, certificate requests, and format conversions with OpenSSL
• Understanding of cloud terminology, architecture, and tools to include installing, provisioning and monitoring
• Experience installing, configuring, and maintaining tools such as Tanium, Nessus, Axonius, CrowdStrike, and CyberArk in a hybrid-cloud environment
• Extensive knowledge of Ansible and Red Hat Satellite
• Perform analysis of security posture by reviewing vulnerability and compliance scans and making recommendations for remediations and managing POA&Ms
• Excellent problem solving, research, and follow-up skills
• Ability to obtain an Entry of Duty (EOD) Public Trust
• Candidate must, at a minimum, meet one of these certifications: CISSP, CCSP, CCNP, CCIE Security, CEH, RHCSA, RHCA, RHCE, MCSE, COMPTIA Security+, GCIH, GPEN, OSCP, OSCE, Azure Solutions Architect Expert

Preferred Qualifications:

• Experience managing Palo Alto Networks VM-Series firewalls, AWS Network Firewall, AWS Network ACLs, AWS security groups, Azure Firewall, Azure network security groups, and related network resources
• Experience managing Azure Virtual Desktop service
• Solid understanding of developing and leveraging CI/CD pipelines (Continuous Integration/Continuous Deployment)

Additional Requirements:

• Expertise with Microsoft Azure or AWS Cloud Platforms
• Experience automating management tasks with Ansible, Puppet, or Chef
• Experience working between different Cloud Provider environments (AWS, Azure, GCP)
• Experience developing in Bash, Python, PowerShell

Experience working with SIEM tools such as Splunk to ingest, normalize, store, and maintain data from endpoint, network, and application source types

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

• This senior consultant role is to lead and execute projects supporting a federal civil rights office. The role involves working in the federal civil rights regulatory space, learning and applying federal civil rights requirements and administrative priorities, managing close client relationships with executive leadership and staff throughout the office, proactively understanding and managing ambiguous and changing client needs, developing and managing project plans, developing and implementing strategic and operational solutions, leading junior staff, and supporting management. Our teams greatly impact mission-oriented programs in the federal civil rights space in areas such as Title VI, Disadvantaged Business Enterprise, Equal Employment Opportunity, and the Americans with Disabilities Act.

• A strong fit for the role is someone with a passion for civil rights, a great amount of curiosity, comfort with retaining, summarizing, and dynamically responding to new and changing priorities in the moment, a strong ability to think critically and clearly communicate professional skepticism with tact and conviction, and who brings proactivity and emotional intelligence to leading people and managing projects.  

• Manage the scope, schedule, and quality of client-facing projects.

• Develop a deep understanding of and manage client relationships, including shifting and ambiguous priorities.

• Flexibly facilitate meetings, presentations, and retreats with executive-level clients

• Analyze and propose program improvement recommendations to a federal civil rights office.

• Develop and implement business process improvements to existing office processes.

• Develop and propose an office-wide strategy for client leadership.

• Provide actionable and right-sized change management and implementation recommendations to clients.

• Provide guidance, coaching, and quality assurance to junior and peer staff while maintaining a collaborative atmosphere.

What You Will Need:

• 3+ years of experience in management consulting

• Bachelor’s Degree from an accredited college/university

• Proficiency in Microsoft Word, PowerPoint, and Excel

• Strong written and verbal communication skills

• Ability to meet requirements and be issued a U.S. Public Trust

• This position requires US citizenship.

What Would Be Nice To Have:

• Experience with or interest in federal civil rights regulation/compliance in the areas of:

• ADA Americans with Disabilities Act of 1990

• Title VI Title VI of the Civil Rights Act of 1964

• DBE Disadvantaged Business Enterprise

• EEO Equal Employment Opportunity

• Experience with or interest in Diversity, Equity, Inclusion, and Accessibility programs.

• Experience with or interest in the transportation industry.

• Experience with or interest in federal consulting.

• Experience with managing projects with ambiguous and changing scope.

• Experience working in a fast-paced, dynamic, demanding environment.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

The Opportunity:

Everyone is trying to “harness the cloud,” but not everyone knows how to secure it. As a security engineer, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. What if you could use your cloud security skills to improve mission critical applications for the Intelligence Community (IC)? We need you to help us develop cloud-based security architectures for some of the IC's most critical systems.

As a security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining an organizations’ state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the environment and knowledge of various on-premises, cloud-based, and hybrid resources to address Risk Management Framework (RMF) security requirements. Your technical experience will be vital as you work with IC clients to ensure standards are met with IA and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts.

Join us. The world can’t wait.

You Have:  

• Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans

• Experience with security architecture evaluations, guidance development, and troubleshooting

• Experience with the RMF

• Experience working in an Agile development environment using the JIRA tracking tool

• TS/SCI clearance with a polygraph

• HS diploma or GED

• Ability to obtain a Security+ CE, SSCP, CCNA-Security, or GSEC Certification within 6 months of hire​

Nice If You Have:  

• Experience with the software development life cycle (SDLC)

• Experience with cloud technologies

• Possession of excellent team leadership, development, and client relationship skills

• Possession of excellent interpersonal skills, to successfully interact with clients, engineers, and managers

• Possession of excellent verbal and written communication skills

• Security+ CE, SSCP, CCNA-Security, or GSEC Certification

Clearance:  

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Create Your Career:

Grow With Us

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.

A Place Where You Belong

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time.

Support Your Well-Being

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.

Your Candidate Journey

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.