Security Engineer

• Lead and manage nationwide BIA, DRP, ISCP, and contingency planning initiatives from program planning and rollout through implementation, quality assurance, approval, and final delivery
• Lead and manage multiple geographically dispersed and cross-functional teams by establishing priorities, coordinating resources, monitoring progress, and ensuring timely completion of deliverables
• Develop and execute national implementation and rollout strategies, including methodologies, templates, procedures, schedules, training, communications, milestones, and completion criteria
• Coordinate with facility leadership, business owners, system owners, IT personnel, cybersecurity teams, COOP personnel, and executive stakeholders
• Track nationwide BIA and DRP completion, identify gaps and risks, resolve issues, and provide status reporting and escalation to senior leadership
• Lead development, review, and maintenance of BPA, BIA, DRP, ISCP, and related continuity documentation
• Analyze BIA results to identify critical functions, systems, dependencies, recovery priorities, RTOs, RPOs, MTD, and enterprise-wide risks
• Serve as senior cybersecurity SME for DRCP and continuity activities, addressing cybersecurity risks, system dependencies, data protection, access controls, and critical technology requirements
• Develop and maintain cybersecurity and DRCP policies, SOPs, procedures, standards, templates, and governance documentation
• Apply NIST standards to contingency planning, business impact, system criticality, risk management, and recovery activities
• Plan, facilitate, and document tabletop exercises, continuity tests, disaster recovery exercises, and plan reviews, including corrective actions through closure
• Perform quality assurance and technical reviews; support audits, assessments, compliance reviews, evidence collection, findings remediation, and executive reporting
• Develop technical reports, executive briefings, policy memoranda, status reports, meeting materials, and other communications
• Maintain program schedules, repositories, inventories, dashboards, and tools supporting recurring DRCP reviews, exercises, testing, and program activities
• RELI Group partners with government agencies to solve complex challenges, improve public health, strengthen national security, and improve government services

Senior Cybersecurity Disaster Recovery, Contingency Planning SME

• Act as an ISSO for a large software development program involving software maintenance and development, IT support, systems integration, lifecycle support, enterprise application development, network engineering, and information systems security
• Work with security professionals to develop and implement strategies to detect and mitigate threats to information systems
• Protect critical data sets and provide assessments of system and network vulnerabilities
• Support implementation and enforcement of information systems security policies, standards, and methodologies
• Evaluate security solutions to ensure they meet security requirements for processing multiple types of information
• Support configuration management for information system security software, hardware, and firmware
• Analyze threats and develop and implement methodologies for incident detection, reporting, and vulnerability remediation
• Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and system upgrades
• Maintain the operational security posture for information systems
• Support the ISSM in maintaining the appropriate operational IA posture for a system, program, or enclave
• Develop and maintain Certification & Accreditation documentation in accordance with specified policies
• Develop and update system security plans and other IA documentation
• Support IAVA management, including initiating IAVA responses and system security scans, completing remediation, extending IAVA patches and security updates to designated sites
• Develop system security policy and ensure compliance
• Administer user identification and authentication mechanisms of the Information System

Senior Information System Security Officer

• Support a long-term DIA-NDOC DOMEX Technology Platform contract
• Collaborate with Systems Engineers, Software Engineers, Architects, and Operations Engineering/Management
• Support centralization and standardization of TCPED for OSINT across Defense and Intelligence Community enterprises
• Collect, review, assess, and provide feedback on cybersecurity, architecture, engineering, and Body-of-Evidence artifacts
• Conduct compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems
• Implement and manage security controls for containerized applications and cloud infrastructure
• Collaborate with DevSecOps, infrastructure, and software development teams on secure coding and engineering practices
• Integrate security measures into software development processes, CI/CD pipelines, and engineering tools
• Develop, maintain, and execute shell commands, scripts, and automation code for STIG compliance and validation
• Implement and manage continuous monitoring solutions for cloud-based architectures
• Support government cybersecurity officials and program personnel in preparing IATT, ATO, and Change Request packages
• Stay current with emerging cloud security threats, technologies, and best practices

Staff Cyber Security Engineer – TS/SCI

• Conduct a thorough audit of the Google Workspace for Education Plus tenant via the Google Admin Console
• Analyze configurations against industry best practices
• Review and harden Gmail settings, including SPF, DKIM, DMARC, compliance routing, and advanced anti-phishing rules
• Review and harden Google Drive settings, including external sharing policies, link defaults, and DLP rules
• Evaluate mandatory MFA and design a transition plan toward phishing-resistant MFA, including FIDO2 security keys, Passkeys, and Context-Aware Access policies
• Analyze account compromise patterns and investigate session hijacking methodologies
• Recommend automated controls to detect and block internal spam blasts
• Deliver a prioritized findings report with immediate remediation, medium-term configurations, and long-term security governance recommendations

Google Workspace Security Subject Matter Expert

• Conduct third-party, vendor, service provider, and software risk assessments while meeting SLAs and communicating with stakeholders
• Contribute to the creation and maturation of information security policies and processes
• Identify opportunities to automate manual processes and engineer process improvements
• Develop and deliver Disaster Recovery and Continuity of Operations risk assessments and establish resiliency plans
• Assist with governance of the enterprise Policy Exception process and provide reports visible to senior leaders
• Create, adapt, and enhance weekly metrics to measure program effectiveness
• Evaluate security architectures, identify risks and compensating controls, and develop mitigation plans
• Develop and deliver security awareness and phishing campaigns
• Perform and maintain litigation and data retention holds using eDiscovery and support Legal requests
• Collaborate with stakeholders, business partners, third parties, Legal, Privacy, and IT
• Deliver live training sessions to diverse audiences
• Evaluate and recommend products, maintain knowledge of emerging technologies, and maximize existing tool value
• Respond to information security tickets and requests according to team SLA
• Collaborate with third parties to remediate risks and minimize attack surface
• Design, document, and implement procedures for analyzing and evaluating risk
• Research emerging technologies and provide options to leadership
• Identify security team improvements and optimize processes and techniques
• Support an enterprise security program through security engineering, investigations, vulnerability remediation, policy enforcement, and AI or automation engineering

Senior Information Security Engineer

• Define and execute the application and AI security strategy, policies, and roadmap across software development teams
• Lead integration of AI-powered security capabilities across the software development lifecycle
• Partner with engineering teams to embed security and AI controls into coding platforms, CI/CD pipelines, and applications
• Serve as technical lead for AI security initiatives across web, mobile, API, and third-party AI service consumption
• Develop application and AI security standards for technology that consumes, integrates, or builds AI/ML capabilities
• Establish governance, guardrails, and security requirements for GenAI, LLMs, and agentic solutions
• Evaluate, pilot, and operationalize emerging AI security technologies
• Define acceptable use policies, code review requirements, data protection controls, and validation processes for AI-generated code
• Mentor developers, architects, and engineering leaders on secure application development practices
• Build AI-based security capabilities and leverage industry-leading solutions to protect customer applications and data

Lead Application and AI Security Engineer

• Execute consistent and compliant Risk Management Framework procedures for information system authorization, accreditation, and reaccreditation activities
• Maintain asset records, System Security Plans, CONOPS, POA&Ms, and other information assurance documentation according to ODNI and DoD policies
• Monitor, audit, detect, and respond to non-compliance, security gaps, and unmitigated risk across assigned systems
• Assess and improve system security posture with ISSMs, mission stakeholders, technical teams, and program leadership
• Evaluate security solutions for classified-information processing requirements
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
• Provide configuration management support for security-relevant software, hardware, and firmware
• Assist with day-to-day security operations, including user identification and authentication administration
• Research and analyze security information, identify gaps, and recommend actions to strengthen controls and reduce risk
• Support program service-level agreements and respond to after-hours requests in a 24x7 mission environment

Information Systems Security Officer – ISSO2

• Own and drive the RMF process for assigned systems
• Develop, maintain, and update System Security Plans (SSPs)
• Support systems through ATO, reauthorization, and continuous monitoring
• Interpret and document implementation of NIST SP 800-53 security controls
• Work with DISA STIGs, findings, remediation, and compliance documentation
• Prepare and maintain required RMF documentation and authorization artifacts
• Gather and organize control implementation evidence
• Identify documentation, control, and evidence gaps and coordinate their resolution
• Develop and maintain POA&Ms and associated remediation documentation
• Work with engineers and system administrators to understand and document technical control implementations
• Support government security reviews and assessment activities
• Communicate directly with government customers, assessors, technical teams, and other stakeholders
• Maintain authorization documentation as systems and environments change

Information System Security Officer (ISSO)

• Lead vulnerability management efforts across a portfolio of client applications
• Analyze vulnerability findings and identify affected versions
• Provide remediation guidance, assign issues to teams, and track vulnerabilities through closure
• Build and maintain working relationships with business, engineering, and security teams
• Validate fixes, resolve blockers, and support timely remediation
• Support POA&M activities, patching timelines, remediation deadlines, and federal cybersecurity and compliance requirements
• Develop and maintain automated vulnerability reports, dashboards, KPIs, and metrics
• Track remediation progress, compliance gaps, and asset risk
• Prepare reports and briefings for leadership and federal oversight stakeholders
• Monitor suspicious activity and security alerts in Splunk and coordinate follow-up actions
• Support secure development through security documentation, secure coding guidance, annual training support, and evaluation of security tools and processes
• Provide cybersecurity subject matter expertise during information security audits and assessments

Cybersecurity Consultant

• Lead cyber risk management efforts across a portfolio of client applications
• Manage the end-to-end POA&M lifecycle, including creation, tracking, validation, and closure of identified security weaknesses
• Prioritize remediation activities based on risk severity, compliance requirements, and operational impact
• Conduct regular POA&M status reviews and coordinate with system owners and O&M teams to track milestone progress
• Perform BIAs to identify critical systems, functions, dependencies, and recovery time/objectives
• Collaborate with stakeholders to validate system criticality and align with continuity and contingency planning requirements
• Build and maintain relationships with business, engineering, and security teams to validate fixes, resolve blockers, and support timely remediation
• Prepare reports and briefings for leadership and federal oversight stakeholders
• Provide cyber subject matter expertise during information security audits and assessments
• Maintain and update BIA documentation in alignment with evolving system architecture and mission priorities