Information Security Architect

DANE LLC•ARLINGTON, VA

1d•$160,000 - $180,000

About The Position

At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued. We are seeking an experienced Information Security Architect to design and strengthen the security infrastructure that supports our mission. Bringing expertise in both on-premises and AWS cloud security architecture, this individual will design, integrate, and implement security solutions, configure and operate security tools, and advise on securing web applications and cloud-based solutions.

Requirements

Bachelor’s degree (BA/BS) or equivalent
Minimum 10 years of IT Security experience
3–5 years of experience applying the Risk Management Framework (RMF) in support of the federal government
Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53
Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security tools
Knowledge of best practices for designing and implementing secure network architecture
2+ years of AWS experience (required)
Clear written and oral communication skills
Ability to troubleshoot and solve complex technical problems
Current certification in one or more of the following: ISACA – Certified Information Systems Auditor (CISA), ISACA – Certified Information Security Manager (CISM), (ISC)² – Certified Information Systems Security Professional (CISSP), (ISC)² – Certified Cloud Security Professional (CCSP)

Responsibilities

Design, integrate, and implement information systems security infrastructure
Analyze information systems to ensure appropriate security functions are included in system design and architecture
Recommend and implement changes to enhance systems security and prevent unauthorized access
Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
Evaluate firewall change requests and assess organizational risk
Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
Provide guidance and direction on best practices for the protection of information
Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications
Develop policies and procedures to prevent unauthorized access
Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies
Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
Advise management on the business impact of theft, destruction, alteration, or denial of access to information
Perform preliminary forensic evaluations of internal systems
Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation