General Dynamics Information Technology

Security Analyst

• Maintain various EPA System security and privacy control implementation deliverables based on a NIST 800-53 rev5 control framework.
• Update, maintain, and drive security and privacy documentation designed to protect the cloud- and host-based systems from both internal and external threats.
• Review identified cyber security vulnerabilities and assist with the recommendation, documentation, and implementation of appropriate mitigations or countermeasures.
• Conduct and support periodic reviews of the information system to ensure compliance with the security and privacy authorization package.
• Review, create, and enhance security and privacy documentation to ensure continued compliance with security and privacy requirements.
• Coordinate the response to the annual continuous monitoring assessment audit.
• Ensure audit evidence are collected, reviewed, and documented, including any risk determinations and plans of actions and milestones.
• Identify and notify the program manager when changes occur that might affect the authorization determination for the information system.
• Provide analysis of systems, hardware, software, and maintenance needs.
• Create and review annually the security- and privacy-related documentation.
• Develop, coordinate, and conduct training and tabletop exercises related to continuity of operations, contingency planning, incident handling, awareness, etc.
• Update control implementation tools like XACTA to maintain compliance against NIST 800-53 rev 5.

Senior Cyber Security Analyst

Engineer

• Provide technical support for shipboard installations and solutions
• Design, evaluate, plan, test, and operate mechanical and/or computer components, equipment and systems
• Evaluate system designs and drawings to identify problems during project planning
• Perform technical evaluations on system designs and propose resolutions
• Develop system test and evaluation plans and execute test plans to verify performance of equipment
• Identify risks and issues that may affect project success and propose mitigation strategies
• Collaborate with project management and installation teams to resolve issues
• Generate Condition Found Reports (CFRs) and Liaison Action Requests (LARs) summarizing problems
• Aid industrial installation teams in applying developed solutions on-site
• Ensure successful installation of next-generation equipment on Naval Vessels without compromising quality or safety

Engineer Associate

Security Engineer

• Perform security hardening for client’s cloud environment
• Implement necessary security measures for AI operations such as Data encryption in transit and at rest, Access control and identity management
• Adhere to risk management principles in NIST AI Risk Management Framework and agency policy
• Operate within FedRAMP(moderate) authorized services appropriate for the agency’s data
• Comply with FISMA, implement controls aligned to NIST SP 800-53, adopt Zero Trust patterns (NIST SP 800-207), and ensure audit logging and continuous monitoring
• Implement Zero Trust principles, least privilege, and role/persona-based access-controlled workspaces
• Support Section 508 accessibility for user interfaces and documentation
• Support clients ATO requirements
• Provide an annual risk assessment on how security controls are being followed
• Review and document the external systems security assessment report in the above-mentioned risk assessment on an annual basis

Cybersecurity Lead

Technical Program Manager

• Lead and manage the development team to modernize and migrate legacy mainframe-based systems to the cloud
• Collaborate with the USPS Government representatives to enable mission readiness and success for the critical applications at the point of need
• Ensure business processes that exist in the legacy system are successfully migrated
• Collaborate with stakeholders and product architects to introduce AI/ML capabilities throughout the development process
• Play a critical role in modernizing applications to optimize operations and sustainment in the cloud

ServiceNow

• Recommending best solutions to automate existing and new functionality based on ServiceNow offered applications and modules.
• Activation and configuration of ServiceNow applications to meet business needs.
• Development of workflows and scripts to personalize existing ServiceNow applications.
• Development of ServiceNow custom applications from inception to completion to automate and improve processes.
• Working closely with customers to research, design, develop and deliver innovative solutions to improve their business processes.
• Assisting in the identification of best practices for development of new and existing ServiceNow applications.
• Troubleshoot and resolve issues related to software applications, systems integration, and multiple platforms.
• Involved in planning of system and development deployment as well as responsible for meeting software compliance standards.
• Evaluating interface between hardware and software, operational requirements, and characteristics of overall system.
• Documents testing and maintenance of system corrections.

Junior ServiceNow Software Developer

Customer Support

• Provides assistance of grant processing in eBRAP
• Coordinate with P2RMIS and EGS teams to troubleshoot data transfer and other ad-hoc system issues
• Perform setup of all funding opportunities within eBRAP per client requirements
• Serve as POC with program task leads to provide training and troubleshooting on eBRAP/Compliance issues/questions
• Serve as resource for helpdesk team to provide technical support.
• Assist helpdesk team supporting as overflow support for email responses and potential inbound calls.
• Provide tracking of appeals and application data changes within eBRAP
• Develop, maintain, and enhance data and system workflows
• Communicate system/process changes with relevant teams and update SOPs
• Serve as primary POC for ad-hoc data requests
• Support multiple programs with overlapping tasks and deliverables with aggressive time lines
• Post through eBRAP all official correspondences and decisions made by the client to proposal stakeholders

Project Support Specialist

Manager

• Provide direct supervision to the Security Operations and Compliance teams, fostering a collaborative environment that integrates real-time threat defense with long-term risk management
• Provide day-to-day leadership, mentorship, and resource management for the SecOps and Compliance teams
• Act as the primary liaison between the technical teams and the AOTO Information Security Officer (ISO) and Government Leads
• Develop and execute strategic security plans that align technical capabilities (SIEM, Firewalls) with policy requirements (NIST 800-53, JISF)
• Synthesize data from Security Operations and Compliance activities to provide executive-level reporting on the organization's risk posture, security trends, and program health
• Oversee the 24/7/365 efficacy of security tools and operational activities, including Incident Response (IR), Intrusion Detection/Prevention, and SIEM management (Splunk)
• Ensure timely triage, investigation, and remediation of security events, serving as the escalation point for critical incidents
• Direct the Vulnerability Management program, ensuring scans are conducted, analyzed, and remediation efforts are coordinated effectively across cross-functional IT teams
• Manage the implementation and maintenance of security infrastructure (Next-Gen Firewalls, Endpoint Protection, Web Gateways)
• Supervise the full lifecycle of Assessment & Authorization (A&A) activities, ensuring systems maintain Authority to Operate (ATO) in accordance with the Judiciary Information Security Framework (JISF) and NIST RMF
• Oversee the development and maintenance of System Security Plans (SSPs), POA&Ms, and other critical security documentation in the CSAM tool
• Ensure that new and existing systems integrate security controls early in the SDLC (Security by Design) and meet auditing requirements
• Review and approve policy updates, Standard Operating Procedures (SOPs), and Concept of Operations (CONOPS) documents
• Manage the IT Security Awareness Training and Phishing Simulation program, ensuring continuous improvement and high user engagement
• Collaborate with AOTO project managers and system owners to ensure security resources are appropriately allocated to ongoing projects
• Maintain awareness of emerging threat intelligence and regulatory changes to proactively adapt the program’s defense and compliance strategies

InfoSec Manager

• Conducting and coordinating security reviews and audits of federal and non-federal data exchange partners
• Providing security engineering support to the Security Team
• Assisting OCSE staff in preparing audit responses and providing documentation for audits
• Participating in routine and on-demand vulnerability scanning
• Documenting and tracking internal POAMs for DFS systems
• Assisting in the development and delivery of Security Awareness Training
• Supporting incident response activities and ensuring proper collection of digital evidence
• Developing policies and procedures for information systems reliability and security

Cybersecurity Engineer

Backend Engineer

• Assist with the development and implementation and modernization of an existing platform consistent with enterprise architecture reference standards.
• Work closely with the technical team and leadership to actively identify and log technical issues or risks associated with a project, escalating them, as appropriate, and possibly support the implementation of mitigation strategies for risk prevention and timely resolution.
• Your contributions as a Software Developer will be vital to providing a positive, high-quality benefits delivery to our nation’s veterans.

Software Developer – Java, Grails, Python

Marketing

• Develop strategic marketing assets and create visually engaging materials spanning digital campaigns, presentations, infographics, reports, posters, and print collateral
• Apply core marketing and advertising principles to translate program strategies, milestones, and goals into effective, action-driven visual communications
• Design visually engaging and marketing-ready materials to support HITMOD communications, outreach, and change management efforts
• Collaborate with program leadership, marketing, communications, and technical teams to translate HITMOD strategies, milestones, and messaging into effective visual storytelling
• Apply marketing and advertising principles to ensure designs support program objectives, stakeholder engagement, and user adoption
• Develop and maintain visual consistency in alignment with IHS branding and federal design standards
• Support internal and external campaigns related to health IT modernization
• Ensure all materials meet federal quality, branding, accessibility, and approval requirements
• Manage multiple design and marketing projects simultaneously while meeting deadlines

Graphics and Marketing Specialist

Business Analyst

• Analyze raw vulnerability scan results and provide clear, actionable findings to system owners and stakeholders
• Validate vulnerabilities, identify false positives, and confirm technical risk and exploitability
• Provide practical remediation guidance aligned with system architecture and operational constraints
• Track vulnerability remediation status and support risk-based prioritization
• Works closely with the risk management and other teams to determine system risks based upon vulnerability results and ensure compensating and/or mitigating controls are in place
• Operate and support vulnerability scanning tools across multiple platforms, including Tenable Security Center, Tenable.io, Nessus Manager, Nessus Network Monitor, NetSparker/Invicti Enterprise, CodeDX, Coverty, Black Duck, Seeker, and Guardium Database Scanner.
• Develop and adhere to Standard Operating Procedures (SOP)
• Comfortable with interfacing the customer, cross-functional teams and application owners on vulnerability metrics and findings
• Adhere to Service Level Agreements (SLA) for service request support
• Mentor and train team members & program successors
• Participates in special projects, as needed
• Works with Program and Project management throughout the period of performance
• Supports technical problems that occur and on-call support for non-business hours
• Provide Weekly and on-demand Status Reports on work performed

Cyber Vulnerability Management Analyst

Supply Chain

• Support the Department of Veteran Affairs on the Conversion Services project
• Ensure resources for digitization move through the supply chain efficiently and reliably
• Enhance customer/stakeholder satisfaction while maintaining continuity of operations and risk mitigation
• Become a strategic partner that strengthens customer relations and enables successful project completion
• Network with offsite scanning vendors, onsite NPRC stakeholders, and stakeholders from the Department of Veteran Affairs
• Engage Facility Managers stationed at various onsite/offsite scanning locations to ensure successful Logistics for the project are obtained
• Monitor and review all aspects of the logistics piece of the contract for Extraction, Re-Shelving, Shipping, Receiving, Reporting to ensure Client/Customer expectations are achieved
• Use Customer Service skills to engage with the customer on requirements/deliverables for the logistics piece of the contract
• Engage with team members to ensure successful Logistics Goals are met
• Facilitate resolution of data discrepancies for Logistics and ensure success in Extraction, Re-shelving, Shipping, and Receiving activities for the project and project deliverables

Logistics Manager

• Develop, configure, and maintain custom reports, dashboards (using PA/Reporting), and KPIs for ITSM (Incident, Problem, Change, Request) to visualize performance and trends
• Build and customize applications, workflows, Business Rules, UI Policies, and Client Scripts within ITSM modules
• Work with end users, stakeholders, and management to define and create reports, dashboards, and data analysis products
• Customize user interfaces, forms, and workflows to align with business needs
• Script and automate processes, data imports, and report generation to enhance efficiency
• Connect ServiceNow with other systems using REST/SOAP APIs
• Perform platform health checks, upgrades, and user/role management
• Ensure solutions adhere to ServiceNow best practices, minimize technical debt, and support platform governance
• Provide end-user support and troubleshooting for issues related to integrated processes and platform functionality
• Participate in IT-related technical processes reviews, postmortems, and continual process improvement
• Maintain current ServiceNow and industry certifications, while obtaining additional certifications

Senior ServiceNow Developer – Electronic Health Records

• Own your opportunity to serve as a critical component of our nation’s safety and security
• Assist with Personnel Security processing; submission of paperwork, monitoring clearance processing status; outreach with USG security reps from other Agencies and companies as necessary
• With Government direction, prepare and deliver security indoctrinations and briefings on all security procedures and topics
• Conduct and prepare security briefings, program indoctrination/debriefs, and annual refresher briefings as needed
• Help create and maintain the internal clearance database and file systems
• Assist in the development of the security policies and procedures and to ensure compliance with those policies and procedures
• Assist with maintaining correspondence suspense files, records, files for reports, operating procedures, internal memorandums, and compose correspondence

Security Support Specialist – TS/SCI w/Poly

Project Manager

• Manage day-to-day operations of the production support team (Tier 2 and Tier 3).
• Work with the customer project manager to develop production support schedule for weekend and evening support.
• Collaborate with US Court’s National Support Desk (NSD) for channeling and prioritizing critical issues for the T2/T3 team.
• Organize and facilitate SCRUM ceremonies: daily standups, Sprint Planning/Grooming, Sprint Reviews/Demos, and Retrospectives.
• Analyze internal business processes and methodologies to recommend process engineering/re-engineering for efficient operation, growth, and transformation.
• Maintain JIRA and other information radiators for the teams.
• Enable team to become self-organizing and self-managing to achieve its goals.
• Motivate teams to perform and ensure team members are collectively responsible for all aspects of production support work (root cause analysis, development, testing, documentation, etc.).
• Identify, address, and communicate project risks, dependencies, and team impediments.
• Ensure the team’s “definition of done” is well defined on the story, sprint, and release levels.
• Facilitate productivity through discussion, decision making, and conflict resolution.
• Shield the team from external interferences.
• Assist with internal and external communication, and improving transparency.
• Build a trusting and safe environment where problems can be raised with an emphasis on problem solving.
• Coach a continuous improvement mindset and recommend adjustments to established delivery practices.
• Establish and maintain strong working relationships with all stakeholders, including customers.