Information Security Architect

Benefits:

• HSA & FSA
• 401(k)
• Employee discounts
• Paid time off
• 401(k) matching
• Competitive salary
• Tuition assistance
• Vision insurance
• Wellness resources

Description

At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued.

We are seeking an experienced Information Security Architect to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both on-premises and AWS cloud security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions.

Responsibilities

• Design, integrate, and implement information systems security infrastructure

• Analyze information systems to ensure appropriate security functions are included in system design and architecture

• Recommend and implement changes to enhance systems security and prevent unauthorized access

• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation

• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information

• Evaluate firewall change requests and assess organizational risk

• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems

• Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach

• Provide guidance and direction on best practices for the protection of information

• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure

• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools

• Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications

• Develop policies and procedures to prevent unauthorized access

• Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies

• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance

• Advise management on the business impact of theft, destruction, alteration, or denial of access to information

• Perform preliminary forensic evaluations of internal systems

• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation

Requirements

• Bachelor’s degree (BA/BS) or equivalent

• Minimum 10 years of IT Security experience

• 3–5 years of experience applying the Risk Management Framework (RMF) in support of the federal government

• Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53

• Experience implementing and configuring IDS, vulnerability scanning, SIEM , and other security tools

• Knowledge of best practices for designing and implementing secure network architecture

• 2+ years of AWS experience (required)

• Clear written and oral communication skills

• Ability to troubleshoot and solve complex technical problems

Required Certifications

Current certification in one or more of the following:

• ISACA – Certified Information Systems Auditor (CISA)

• ISACA – Certified Information Security Manager (CISM)

• (ISC)² – Certified Information Systems Security Professional (CISSP)

• (ISC)² – Certified Cloud Security Professional (CCSP)

DANE LLC is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.