EnDyna Inc

General

• Support grants management, compliance, and internal control assessment activities across OAR grant programs, including documenting control design, roles and responsibilities, and how controls are implemented in practice.
• Support reviews of grant files, recipient documentation, and monitoring activities to assess compliance with federal requirements and program expectations.
• Participate in walkthroughs of grant disbursement, monitoring, and oversight processes to understand workflow, judgment points, and documentation practices.
• Assist with identification of operational, compliance, and internal control risks across the grant lifecycle, including understanding where risks may arise within the grant lifecycle and how controls are intended to mitigate those risks.
• Contribute to synthesis of observations across programs to support leadership planning, sequencing of future work, and audit readiness discussions.

Federal Grants Management Specialist – Internal Controls

Security Engineer

• Perform cybersecurity assessments including Penetration Testing
• Perform external network penetration testing
• Perform internal network penetration testing
• Perform web application penetration testing
• Perform cloud security assessments
• Perform wireless security assessments
• Perform mobile application testing
• Perform container security assessments
• Perform AI system security assessments
• Conduct phishing and social engineering assessments
• Perform information gathering and reconnaissance
• Enumerate hosts, services, operating systems, applications and network devices
• Identify vulnerabilities and attack paths
• Exploit vulnerabilities using approved methodologies
• Perform post-exploitation activities
• Demonstrate persistence techniques
• Evaluate data access and exfiltration opportunities
• Document countermeasures encountered during testing
• Validate remediation activities
• Analyze vulnerability scan results
• Correlate findings from multiple tools
• Eliminate false positives
• Prioritize vulnerabilities based upon risk
• Map findings to NIST, CVE, OWASP and Federal guidance
• Develop mitigation recommendations
• Prepare professional technical documentation including Rules of Engagement review, Attack confirmation lists, Penetration testing reports, Executive summaries, Technical findings, Risk analyses, Recommendations, Supporting evidence, Screenshots, Logs, Testing artifacts
• Participate in planning meetings
• Conduct entrance conferences
• Present technical findings
• Participate in status briefings
• Explain vulnerabilities to both technical and executive audiences
• Support audit teams throughout engagements
• Provide cybersecurity expertise supporting OIG auditors by performing vulnerability scans, analyzing scan results, advising auditors on security findings, supporting remote assessments, participating in technical discussions

Penetration Testing – Mid-Level/Senior

• Lead penetration testing engagements
• Develop attack strategies
• Review Rules of Engagement
• Provide technical oversight
• Review testing methodologies
• Ensure technical quality
• Mentor penetration testers
• Validate technical findings
• Serve as cybersecurity advisor to OIG auditors
• Develop and deliver penetration testing courses
• Conduct hands-on laboratories and live exploit demonstrations
• Produce executive briefings and penetration test reports

Federal Grants Management Specialist – Internal Controls

Penetration Testing – Mid-Level/Senior

Penetration Testing – SME