Sherpa

Security Engineer

• Maintain the security posture of the organization’s internal information systems
• Ensure compliance with applicable cybersecurity frameworks
• Manage system vulnerabilities through scanning, prioritization, and remediation
• Support patching and configuration enforcement through endpoint management solutions
• Continuously monitor information systems and identify and mitigate anomalous activity
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services
• Configure and tune alerting and automated response capabilities for security events
• Perform incident response and reporting for malware, phishing, unauthorized access, and data exfiltration
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Keep system security documentation, including SSPs, baselines, policies, and procedures, current and audit-ready
• Assist with developing and maintaining security policies, standards, and technical controls
• Review and assess the security impact of system changes during change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms
• Conduct user activity monitoring and support investigations involving potential insider threats or policy violations
• Run security awareness initiatives, including phishing simulations and training activities
• Prepare reports on vulnerabilities, incidents, and overall security posture
• Collaborate with Security, IT, leadership, and compliance stakeholders

Information Security Specialist

• Maintain the security posture of the organization’s internal information systems
• Ensure compliance with applicable cybersecurity frameworks
• Manage system vulnerabilities through scanning, prioritization, and remediation
• Support patching and configuration enforcement through endpoint management solutions
• Continuously monitor information systems and identify and mitigate anomalous activity
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services
• Configure and tune alerting and automated response capabilities for security events
• Perform incident response and reporting for malware, phishing, unauthorized access, and data exfiltration
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Keep system security documentation, including SSPs, baselines, policies, and procedures, current and audit-ready
• Assist in developing and maintaining security policies, standards, and technical controls
• Review and assess the security impact of system changes through change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms
• Conduct user activity monitoring and support investigations related to potential insider threats or policy violations
• Run security awareness initiatives, including phishing simulations and training activities
• Prepare reports on vulnerabilities, incidents, and overall security posture
• Collaborate with Security, IT, leadership, and compliance stakeholders

• Maintain the security posture of the organization’s internal information systems
• Ensure compliance with applicable cybersecurity frameworks
• Collaborate with Security, IT, leadership, and compliance stakeholders
• Manage system vulnerabilities through scanning, prioritization, and remediation
• Support patching and configuration enforcement through endpoint management solutions
• Continuously monitor information systems and identify and mitigate anomalous activity
• Collect, review, analyze, and correlate logs from endpoints, servers, identity systems, and cloud services
• Configure and tune alerting and automated response capabilities for security events
• Perform incident response and reporting for malware, phishing, unauthorized access, and data exfiltration
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Keep security documentation, including SSPs, baselines, policies, and procedures, current and audit-ready
• Assist in developing and maintaining security policies, standards, and technical controls
• Review and assess security impacts of system changes during change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms
• Conduct user activity monitoring and support potential insider-threat or policy-violation investigations
• Run security awareness initiatives, phishing simulations, and training activities
• Prepare reports on vulnerabilities, incidents, and overall security posture

Systems Engineer

• Integrate requirements traceability across multiple programs, primarily linked to software development and associated tools and processes
• Work with the software development team on requirements traceability and development collaboration
• Support customer requirements documentation
• Identify and track program risks
• Facilitate design, development, and integration of technologies in systems fielded to warfighters
• Integrate requirements traceability with Jira-based software development processes
• Work with subject matter experts and software developers
• Document requirements according to customer-driven priorities
• Improve processes necessary to achieve CMMI certification

Information Security Specialist

Information Security Specialist

Information Security Specialist

Requirements – Systems Engineer