Maveris

Security Engineer

• Develop and implement robust database security protocols to protect data from unauthorized access or compromise.
• Lead security initiatives for databases across production, development, and testing environments.
• Integrate database security tools with SIEM systems to enhance real-time monitoring and incident detection.
• Manage and maintain database systems, ensuring high availability, performance, and compliance with security requirements.
• Provide technical leadership and mentorship to engineering and security teams on database protection best practices.
• Conduct regular vulnerability assessments and audits of database environments.
• Collaborate with cross-functional teams to strengthen enterprise data security posture and respond to incidents.
• Document database configurations, policies, and procedures for compliance and operational consistency.

Database Security SME

Database Administrator

• Oversee the technical direction, coordination, and execution of assigned database tasks.
• Provide day-to-day support for large ADABAS instances.
• Perform daily, weekly, monthly, and quarterly security and maintenance tasks, including index, partition, and patch management.
• Collaborate with development teams to ensure optimal query configuration, tuning, and response times.
• Plan, install, configure, customize, and implement the SAG suite of ADABAS products, including:
• Adabas, Adabas zIIP, Natural (CICS, TSO, RPC, zIIP), NET-WORK, Predict, EntireX, Adabas SQL Gateway, Natural Development Server, and Natural ONE.
• Plan and execute disaster recovery strategies for ADABAS and related products.
• Configure and implement ADABAS Cluster Services and associated tools.
• Implement new DBMS technologies in accordance with the DCSA Change Control process.
• Support ADABAS integration with structured and unstructured data.
• Configure and implement ADABAS support for SQL.
• Configure and implement Natural under CICS, TSO, and Batch environments.
• Configure and implement Natural Security, Predict Application Control, and Predict.
• Install, configure, and implement ADABAS SAF Security.
• Configure and optimize ADABAS data and index buffering in main memory to improve performance.
• Install and configure ADABAS Online System (AOS).
• Implement ADABAS Nucleus 64-bit processing support.
• Configure ADABAS to report performance and resource consumption data through SMF.
• Ensure ADABAS environments meet audit and regulatory compliance requirements.
• Provide technical assistance to PMOs, DBMS programming teams, and system design staff.
• Assist in evaluating and setting database parameters to ensure optimal performance.

ADABAS Database Administrator

• Lead Cybersecurity Operations:
• Direct day-to-day SOC operations, including threat detection, incident response, and continuous monitoring activities.
• Manage, mentor, and guide local and remote cybersecurity analysts and engineers.
• Serve as the escalation point for high-priority incidents and complex security events.
• Technical Oversight:
• Design, implement, and optimize security infrastructure and tools, including Firewalls, VPNs, IDS/IPS, SIEM, EDR, NDR, A/V, Email and Web Content Filtering, and Virtualization technologies.
• Ensure integration and interoperability between systems to enable centralized monitoring and response.
• Develop and maintain automation scripts, dashboards, and playbooks to streamline threat detection and response processes.
• Threat Analysis & Response:
• Oversee advanced threat hunting, malware analysis, and vulnerability management activities.
• Coordinate and lead containment, eradication, and recovery efforts for cybersecurity incidents.
• Apply data analytics and machine learning techniques to enhance proactive threat identification.
• Leadership & Collaboration:
• Provide authoritative cybersecurity guidance to senior executives, technical leads, and federal stakeholders.
• Foster collaboration between operations, architecture, and compliance teams to align operational efforts with policy objectives.
• Communicate operational risks, trends, and remediation progress to leadership in clear, actionable terms.
• Process & Continuous Improvement:
• Drive the implementation of federal and NIST-based cybersecurity frameworks (NIST SP 800-53, 800-61, 800-137, etc.).
• Establish metrics, reporting standards, and best practices for SOC performance and cyber defense maturity.
• Champion the integration of AI, automation, and orchestration tools to improve SOC efficiency and resilience.
• Technical Innovation:
• Support proof-of-concept (POC) efforts for new security technologies.
• Identify opportunities to leverage machine learning and advanced analytics to enhance cyber defense capabilities.

Senior Cybersecurity Engineer

• Configure data classification engine scanning, leveraging Varonis Policy Pack and rule customization for specific compliance use cases.
• Remediate data risk and exposure leveraging the Varonis Automation Engine; validate all remediation rules; perform and present post-remediation Data Risk Assessment.
• Optimize threat models by reviewing and maintaining accurate privileged account discovery; tune threat models based on business needs, and impact and severity of issue; integrate alerts from Varonis in other systems such as Splunk.
• Provide support in configuring, troubleshooting, and maintaining common infrastructure and applications (ESXi, Windows, Linux/RedHat, AWS, ServiceNOW).
• Collaborate with the VA Cyber Security Operations Center Team and various Storage Teams in working sessions to help stand up, implement or monitor the Varonis DSP Product.
• Assist with creating and maintaining technical documentation, including SOPs, implementation plans, and policy updates.
• Create and manage ServiceNow (SNow) tickets and create/support dashboard/report creation for tracking and visualization of security activities.
• Support the development of Zero Trust (ZT) implementation strategies that are directed by ZT memorandums.
• Use Excel and PowerPoint create presentations, charts and trending graphs as required.

Cybersecurity Engineer

• Implement robust DLP solutions designed to enforce effective data protection policies.
• Provide engineering and architecture support for projects related to the implementation of the Zero Trust Architecture (ZTA) Data Pillar for the Data Loss Prevention (DLP) program.
• Help review DLP threats to assess security risks and provide support for mapping solutions to mitigate these risks.
• Support the development of DLP use cases/requirements and work with stakeholders to build and measure solutions that align to those use cases/requirements.
• Participate in Agile ceremonies such as sprint planning, daily stand-ups, sprint reviews, and retrospectives.
• Support data sensitivity labeling to ensure correct classification of information.
• Architect and deploy comprehensive DLP solutions tailored to organizational needs.
• Establish and maintain incident response policies to protect critical data.
• Collaborate closely with the risk management team to promote a culture of data responsibility.
• Advise cross-functional teams on DLP best practices and data security measures.
• Conduct thorough reviews to enhance DLP product development.
• Conduct pilot programs, gather feedback, and iterate to reduce false positives/negatives.
• Provide expert troubleshooting and debugging for DLP-related issues and support other security solutions as needed.
• Contribute to engineering frameworks, practices, and templates focusing on DLP.
• Drive customer outcomes by applying technical knowledge related to data loss prevention.
• Work independently on initiatives that align with the broader DLP strategy.
• Engage in collaborative sessions to provide technical expertise and eliminate obstacles.
• Assist in product planning and implementation, helping teams better understand project scope.
• Mentor junior engineers to develop foundational skills related to DLP technologies.
• Share domain expertise on DLP solutions to foster team growth and contribution.
• Provide technical support for various tasks, including DLP Gap Analysis, Requirements Review, Technology Re-Alignment, Reporting, Operational Response Documentation, Policy and Governance Establishment, and Training within the Talent Management System.
• Stay current on threat landscape, new DLP techniques, and industry best practices

Security Analyst

• Support the Authorization and Accreditation (A&A) process within the VA Cybersecurity Operations Center (CSOC).
• Coordinate and assist in obtaining Authority to Operate (ATO) for various systems used by the VA CSOC.
• Work closely with VA teams, system owners, and Subject Matter Experts (SMEs) to ensure compliance with VA policies, security controls, and standards.
• Maintain accurate records of CSOC ATOs including status, award date, expiration date, POAMs, VA CSOC SME, and system owner.
• Conduct vulnerability assessments and request/submit vulnerability scans, tests, or quality checks per NIST SP 800-53 Rev 4.
• Provide eMASS support and coordinate documentation efforts with data center partners.
• Collaborate with Field Security Services ISOs and OCS SCA team to meet ATO requirements.
• Create and maintain POAMs for unresolved findings or vulnerabilities.
• Identify, document, and maintain A&A artifacts to support ATO requests in accordance with VA policy and federal guidelines.
• Review and respond to security controls and provide required evidence throughout the ATO lifecycle.
• Process intake requests for ATO support and maintain effective communication with VA CSOC.
• Conduct meetings with System Owners and SMEs as needed.

Cybersecurity Analyst, A&A Support

Systems Engineer

• Own Windows Server/AD services (GPO, DNS/DHCP, OU design, patching, monitoring) across production enclaves.
• Automate at scale with PowerShell; document runbooks and change procedures; participate in change windows/on-call.
• Troubleshoot complex infrastructure issues end-to-end (networking/TLS/certs/identity).
• Contribute to Exchange 2016/2019 operations (DAG health checks, CU planning, hybrid touch-points) in partnership with a messaging SME.

Windows Systems Engineer

Engineer

• Own Windows Server/AD services (GPO, DNS/DHCP, OU design, patching, monitoring) across production enclaves.
• Own core Windows/AD services, automation, and change operations; leverage or develop messaging/Exchange expertise to improve availability and hybrid posture.
• Automate at scale with PowerShell; document runbooks and change procedures; participate in change windows and on-call rotations.
• Troubleshoot complex infrastructure issues end-to-end (networking, TLS, certificates, identity).
• Contribute to Exchange 2016/2019 operations (DAG health checks, CU planning, hybrid touch-points) in partnership with a messaging SME.

Lead Exchange Engineer – Tier 3, Windows/AD, Enterprise Messaging

Program Manager

• Attend Program related meetings and record meetings through MS Teams.
• Review and update MS Teams meeting minutes, capture meeting attendees list, and route finalized meeting minutes for review.
• Develop documentation to include but not limited to; Meeting Minutes, Agendas, NIST SP 800-53 Security Control Change Requests, Power Point Presentations deliverables, and Reports.
• Work with NIST SP 800-53 Security Control Change Requestors to properly update Security control policy to reflect current operations and security best practices.
• Monitor and provide formal responses to emails in a Program level email box in Outlook.
• Send meeting invites from a shared Program email box in Outlook.
• Distribute meeting agendas and meeting notes to distribution lists.
• Grant access to MS Teams documents and MS Teams spaces to approved individuals.
• Upload Meeting Recordings to MS Teams relevant project spaces.
• Coordinate the effort to gather updates for taskings and ensure they are provided in the required timeframe.
• Create draft templates and store them on internal shared spaces for team members to add input.
• Attend daily, weekly and monthly meetings as required and support the team as needed.
• Create contract deliverables, process reviews, and deliverable submissions.
• Conduct Cybersecurity Policy research to support ongoing efforts throughout the program.

Technical Program Analyst

Customer Support

• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP) covering all aspects of Vulnerability Scanning Services and Support.
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (primarily nights and weekends) to minimize impact to network users.
• Maintain and manage Government owned enterprise scanning solution and infrastructure (currently Redhat Operating Systems and Tenable Software), and scan analysis and reporting software.
• Provide backend support systems and maintain Vulnerability Databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data to determine if the system is performing as designed and review application/scanner logs for anomalies.
• Review scanner repositories for malfunctioning scanners and analyze trends in vulnerability findings.
• Review and update scan policies and produce periodic operation analysis, trending, impact reports, and recommendation papers as required.
• Manage and maintain backend system software and vulnerability scanning process-related documents.
• Coordinate CSOC-managed network scan operations, review and verify IP ranges, select appropriate scan policies, and coordinate with VA network and CSOC personnel.
• Respond to inquiries and distribute reports as required by CSOC Government team.
• Conduct initial system/data checks upon scan initiation, monitor and react to concurrent scans, troubleshoot issues during scans, and verify accuracy of data upon completion.
• Develop new testing programs to expand and deepen scans and operations.
• Verify/edit report templates, produce Scan Findings Reports, conduct quality assurance checks of final reports, and produce compliance and testing data to appropriate repositories.

Mid-Level Cyber Infrastructure Support Specialist

• Operate as the primary security point of contact for the system and acts as a liaison between the system team and the agency's security and authorizing officials.
• Develop and maintain the System Security Plan (SSP), which is the core document for the ATO package.
• Ensure that a comprehensive Contingency Plan (CP) is developed to outline procedures for system recovery in the event of a security incident or disaster.
• For systems handling personally identifiable information (PII), the ensure a Privacy Impact Assessment (PIA) is completed to assess and mitigate privacy risks.
• Based on the system's security categorization (low, moderate, or high), work with the system team to select and implement the appropriate security controls from NIST Special Publication 800-53.
• Develop and manage the plan for continuous monitoring, which ensures that security controls remain effective and that the system's security posture is maintained post-ATO.
• Support the security assessor team (internal or third-party) during the security assessment. This involves providing system documentation and evidence to demonstrate that controls are implemented correctly and are operating as intended.
• Coordinate and oversee vulnerability scans and penetration tests to identify weaknesses in the system.
• For any security weaknesses identified during the assessment, the ISSO is responsible for developing and tracking the Plan of Action and Milestones (POA&M):. This is a remedial action plan that details how and when the weaknesses will be mitigated.
• The ISSO continuously assesses the system's risk posture and provides a recommendation to the Authorizing Official (AO) regarding the system's readiness for an ATO.
• Compile the final ATO package, which includes the SSP, assessment reports, and POA&M, for review by the AO.

Information System Security Officer, ISSO

• Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission.
• As a Cybersecurity Implementation Engineer, you will play a critical role in supporting the mission of the Department of Veterans Affairs (VA) deploying Palo Alto's Prisma Cloud tools across multiple environments.
• Install, configure, and integrate Prisma Cloud into the customer's IT ecosystem, deploying Console and Defenders/Enforcers across workloads in public clouds (AWS, Azure, GCP), on-premises, and hybrid setups alongside Palo Alto SMEs.
• Translate security requirements and policies into actionable configurations within Prisma Cloud; create and tune rules for runtime protection, vulnerability management, compliance checks (NIST, PCI DSS), and network segmentation.
• Integrate Prisma Cloud into CI/CD pipelines and IT workflows with tools like Jenkins, GitHub Actions, GitLab, Jira, and Splunk to enable shift-left security.
• Act as SME for post-deployment issues: fault isolation, root cause analysis, troubleshooting Prisma Cloud functionality, integrations, or performance.
• Use Prisma Cloud to monitor and manage security posture: run vulnerability scans on container images and hosts, ensure compliance with benchmarks (CIS), prioritize and track remediation.
• Document deployment process, architectural decisions, and configuration settings; provide knowledge transfer and training to client's internal security and IT teams.

Cybersecurity Implementation Engineer

• Lead a dynamic cybersecurity program supporting the Department of Veterans Affairs to implement, deploy and maintain Prisma Cloud and XSIAM.
• Oversee successful completion of all program tasks, including technical work, administrative actions, and business development activities.
• Ensure all task order deliverables are high quality and submitted on time.
• Direct program activities to meet customer and organizational objectives and serve as a liaison with customers to coordinate activities, negotiate tasks, and solve problems.
• Supervise assigned technical and administrative staff, including partner teams and leads, and perform personnel actions such as hiring and performance evaluations.
• Maintain positive relationships with key Government Points of Contact (POCs), respond to requests or concerns, and conduct frequent check-ins to ensure customer satisfaction.
• Continuously develop the team and organize resources to optimally achieve program goals and objectives.
• Coordinate and monitor subcontractor activities and administer subcontractor deliverables and financials.
• Ensure compliance with relevant corporate and government policies and standards.
• Utilize management tools and technologies to support tracking, status reporting, collaboration, and workflow management.
• Perform business development activities at all stages, including support of technical and cost proposals.

Cybersecurity Program Manager

• Support VA CSOC by providing ATO and PCI scanning support for vulnerability scans and configuration tests.
• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP).
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (nights and weekends) to minimize user impact.
• Maintain and manage government-owned enterprise scanning solution and infrastructure (Red Hat OS, Tenable software), backend support systems, and vulnerability databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data, application/scanner logs, and repositories for anomalies, malfunctions, and trends.
• Review and update scan policies; produce periodic operational analysis, trending, impact reports, and recommendation papers.
• Manage and maintain backend system software and vulnerability scanning process documentation.
• Coordinate scan operations with points of contact, verify IP ranges and scan policies, and coordinate with VA network and CSOC personnel.
• Execute scan operations: initial system/data checks, monitor/coordinate concurrent scans, troubleshoot issues, verify accuracy, and develop new testing programs.
• Produce and verify report templates, perform QA checks, distribute Scan Findings Reports, and submit compliance and testing data to repositories.

Maveris

Database Security SME

ADABAS Database Administrator

Senior Cybersecurity Engineer

Cybersecurity Engineer

Senior Cybersecurity Engineer

Cybersecurity Analyst, A&A Support

Windows Systems Engineer

Lead Exchange Engineer – Tier 3, Windows/AD, Enterprise Messaging

Technical Program Analyst

Mid-Level Cyber Infrastructure Support Specialist

Information System Security Officer, ISSO

Cybersecurity Implementation Engineer

Cybersecurity Program Manager

Cyber Infrastructure Support Specialist – Mid-level

Software Automation Developer