Information Security Engineer

Job Description

ABOUT US:

\n

Purple Jay is a veteran-owned IT and InfoSec company that guides government agencies and private organizations into the right balance of business productivity and implements security measures to help maximize their outcomes and achieve their mission. We believe that effective cybersecurity solutions must go beyond simply protecting data and systems – they must align with the mission to enable and empower progress. Our teams are built to provide cross-domain services with highly skilled and trained personnel supported by cross-matrix, agile teams and our proprietary digital solutions that have a track record of success. Our positively charged approach intends to exceed client’s minimum requirements, reduce client and organizational risk, and maximize the return on investment.

\n

\n

OUR COMPANY CULTURE IS BUILT WITH TEAM MEMBERS THAT…

\n

\n
• have a curious and intellectual mind who are inclined to ask “why”.
\n
• use creative thinking and adaptive decision-making to solve problems.
\n
• value their contribution and the contribution of others on the team.
\n
• are passionate about learning and developing skills to overcome challenges.
\n
• look to leverage their knowledge or experience to advance within the InfoSec Industry.
\n
• can connect with people of diverse backgrounds and communication styles, through empathy and clear verbal, visual, and written communication.
\n

\n

\n

ABOUT THE INFORMATION SECURITY ENGINEER:

\n

ROLE OVERVIEW:

\n

We are looking for someone with strong information system security engineering skills with demonstrated project management experience, who want to use their knowledge and skill set to support and enable enterprise mission. A current Public Trust Clearance is preferred and eligibility for a clearance is a MUST . This is a self-starter position that requires the ability to integrate strategic and innovative thinking while working with our team members and clients daily. The primary focus is on the delivery of InfoSec outcomes that improve organizational security posture, reducing risk and threat landscapes, ensuring system compliance, and enhance process efficiency. Through the technical assessment of information systems, InfoSec Engineers are expected to provide strategic guidance on increasing control efficacy, developing and improving security policy and procedures, streamlining compliance activities, and risk analysis that consider environmental factors. They will provide tactical direction and support on areas such as vulnerability management, risk impact and likelihood, organizational policies/procedures, ongoing authorization, and emerging requirements.

\n

\n

RESPONSIBILITIES:

\n

Purple Jay teams are cross-functional and cross-matrixed to aid in the effective delivery of services and digital solutions. This role responsibilities include but are not limited to:

\n

\n
• Designs, develops, implements and maintains:
\n

\n

- security measures to protect an organization's systems and networks.

\n

- security products and tools (e.g., firewalls, intrusion detection and prevention systems, and anti-virus software).

\n

- security policies that ensure compliance to regulatory requirements

\n

- process and procedures that enhance and optimize execution and outcomes

\n

- mechanisms and digital solutions that support client initiatives and address expectations

\n

\n
• Identify, assess, and monitor:
\n

\n

- security risks and threats for enterprise and system boundaries.

\n

- system’s ATO package hygiene and applicable artifacts to support RMF process

\n

- system issues and gaps providing appropriate alternatives and solution recommendations

\n

\n
• Develop, report, and evaluate:
\n

\n

- strategies to track, remediate, and mitigate risks.

\n

\n
• New security technologies and tools
\n
• Process and procedures that support emerging requirements
\n
• Monitor and analyze information security data sources in support of:
\n

\n

-security incidents and events investigation and response.

\n

-continuous monitoring of system risk, authorization status, and security KPI thresholds

\n

\n
• Collaborate with all stakeholders and teams to ensure security control efficacy.
\n
• Conducts analysis of work plan completeness, prepares status reports, and supports quality control practices.
\n
• Performs analyses of client issues, assesses appropriate alternatives, and recommends solutions.
\n

\n

\n

TECHNICAL SKILLS

\n

\n
• Knowledge of information security principles, such as confidentiality, integrity, availability, and cybersecurity regulations.
\n
• Knowledge of security compliance frameworks and regulations, such as NIST SP 800-53, ISO 27001, PCI DSS, and SOC 2.
\n
• Knowledge of cloud security concepts and technologies, such as virtualization, containerization, and software-defined networking (SDN).
\n
• Knowledge of security tools and technologies such as firewalls, intrusion detection and prevention systems, vulnerability scanners, and encryption technologies.
\n
• Knowledge and experience with network and system administration, including knowledge of operating systems, network protocols, and network security.
\n
• Knowledge of network and system security, including TCP/IP, routers, switches, and server operating systems (e.g., Linux, Windows).
\n
• Knowledge of incident response and disaster recovery planning, including developing and implementing response plans and procedures.
\n
• Knowledge of threat intelligence and threat hunting methodologies, including collecting and analyzing data to identify emerging threats and trends.
\n
• Ability to identify and assess security risks, develop risk management strategies, and implement risk mitigation plans.
\n
• Ability to design, implement, and manage security controls and countermeasures to protect against security risks and threats.
\n
• Ability to analyze security incidents and data to identify patterns and trends and improve security controls.
\n
• Ability to design and implement security architectures and solutions that meet business and compliance requirements.
\n
• Ability to develop and implement security policies, procedures, and standards to ensure compliance with regulations and best practices.
\n
• Skill in programming and scripting languages such as Python, PowerShell, and Bash is a plus
\n

\n

\n

PROFESSIONAL SKILLS

\n

\n
• Demonstrated excellence in collaboration, facilitation, planning, and negotiation skills that influence colleagues to the best outcomes.
\n
• Strong sense of personal accountability regarding decision-making and coordinating across different project and department teams
\n
• Demonstrated excellence in time management and organizational skills.
\n
• Demonstrated experience establishing procedures and guidelines for others.
\n
• Experience working in a high-level collaborative environment and promoting a teamwork mentality.
\n
• Ability and talent for problem-solving and critical thinking that supports delivery, integration, and customer adoption.
\n

\n

\n

ABOUT THE BENEFITS

\n

PURPLE JAY IS ALL ABOUT THE BENEFITS! WE OFFER…

\n

\n
• Medical, Dental & Vision benefits as well as company-paid Life & Disability Insurance policies.
\n
• Optional 401k, additional Disability, Life, and Voluntary AD&D plans available.
\n
• Paid Federal holidays and up to two weeks of accrued PTO (Paid Time Off).
\n
• An opportunity for career growth with training and boot camps.
\n
• The required technical equipment will be provided by Purple Jay.
\n
• An empowering culture that values your voice while challenging you to get better every day.
\n

\n

\n

Purple Jay, LLC is an Equal Opportunity Employer. All applicants are considered without regard

\n

to race, color, ancestry, national origin, gender/gender identity, sexual orientation, marital and family status, religion and religious belief, age, disability, results of genetic information, and service in the military.