Information Security Engineer

ABOUT US:

Purple Jay is a veteran-owned IT and Info Sec company that guides government agencies and private organizations into the right balance of business productivity and implements security measures to help maximize their outcomes and achieve their mission. We believe that effective cybersecurity solutions must go beyond simply protecting data and systems – they must align with the mission to enable and empower progress.

Our teams are built to provide cross-domain services with highly skilled and trained personnel supported by cross-matrix, agile teams and our proprietary digital solutions that have a track record of success. Our positively charged approach intends to exceed client’s minimum requirements, reduce client and organizational risk, and maximize the return on investment.

• have a curious and intellectual mind who are inclined to ask “why”.
• use creative thinking and adaptive decision-making to solve problems.
• value their contribution and the contribution of others on the team.
• are passionate about learning and developing skills to overcome challenges.
• look to leverage their knowledge or experience to advance within the Info Sec Industry.
• can connect with people of diverse backgrounds and communication styles, through empathy and clear verbal, visual, and written communication.

We are looking for someone with strong information system security engineering skills with demonstrated project management experience, who want to use their knowledge and skill set to support and enable enterprise mission. A current Public Trust Clearance is preferred and eligibility for a clearance is a MUST
. This is a self-starter position that requires the ability to integrate strategic and innovative thinking while working with our team members and clients daily. The primary focus is on the delivery of Info Sec outcomes that improve organizational security posture, reducing risk and threat landscapes, ensuring system compliance, and enhance process efficiency. Through the technical assessment of information systems, Info Sec Engineers are expected to provide strategic guidance on increasing control efficacy, developing and improving security policy and procedures, streamlining compliance activities, and risk analysis that consider environmental factors.

They will provide tactical direction and support on areas such as vulnerability management, risk impact and likelihood, organizational policies/procedures, ongoing authorization, and emerging requirements.

Purple Jay teams are cross-functional and cross-matrixed to aid in the effective delivery of services and digital solutions. This role responsibilities include but are not limited to:

• Designs, develops, implements and maintains:
  • security measures to protect an organization's systems and networks.
  • security products and tools (e.g., firewalls, intrusion detection and prevention systems, and anti-virus software).
  • security policies that ensure compliance to regulatory requirements
  • process and procedures that enhance and optimize execution and outcomes
  • mechanisms and digital solutions that support client initiatives and address expectations
• Identify, assess, and monitor:
  • security risks and threats for enterprise and system boundaries.
  • system’s ATO package hygiene and applicable artifacts to support RMF process
  • system issues and gaps providing appropriate alternatives and solution recommendations
• Develop, report, and evaluate:
  • strategies to track, remediate, and mitigate risks.
• New security technologies and tools
  • Process and procedures that support emerging requirements
• Monitor and analyze information security data sources in support of:
  • -security incidents and events investigation and response.
  • -continuous monitoring of system risk, authorization status, and security KPI thresholds
• Collaborate with all stakeholders and teams to ensure security control efficacy.
• Conducts analysis of work plan completeness, prepares status reports, and supports quality control practices.
• Performs analyses of client issues, assesses appropriate alternatives, and recommends…