Maveris

QA Engineer

• Perform penetration testing against various systems, which may include web applications, databases, web services, network devices, operating systems, cloud installations, and infrastructure (hardware) devices.
• Utilize a variety of industry standard security tools to conduct manual-based security assessments.
• Utilize a variety of industry standard security tools to conduct automated scans against systems.
• Review new vulnerabilities as they are published and develop impact assessments.
• Determine risk from vulnerabilities based on availability of exploit and potential loss of information and IT services capabilities.
• Produce periodic trending and impact reports as required.
• Generate reports (automated and manual) based on results from assessments and explain in detail to customers.
• Develop new testing techniques and programs to support the Penetration testing team.
• Manage and maintain hardware and software with an ability to provide infrastructure maintenance support to attack systems.
• Knowledge and experience with processes and procedures relating to information gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting.
• May be required to work outside normal duty hours to perform assessments on certain systems.

Exploitation Analyst – Penetration Tester

System Administrator

• Install, configure, administer, and maintain CALEA LAN/WAN infrastructure, servers, SANs, and network devices.
• Administer Active Directory (AD), including:• Promoting/demoting domain controllers• Troubleshooting DNS and DHCP issues• Managing GPO hierarchy and execution• Writing and maintaining PowerShell/Bash scripts for automation• Analyzing event logs and Windows system errors
• Plan, deploy, and maintain COOP and DR capabilities in coordination with the Government and vendor partners, ensuring redundancy and failover readiness.
• Patch and update servers and workstations; ensure security baseline compliance with DHS and FISMA standards.
• Apply and troubleshoot security hardening requirements and vulnerability remediation; support the ATO process and collaborate with the ISSO to resolve findings.
• Administer virtualization and storage platforms, including:• VMware ESXi/vCenter – patching, updates, capacity planning, troubleshooting• Nutanix – cluster management and maintenance• NetApp – SAN/NAS configuration and data management
• Assist with Palo Alto firewall deployment and rule migration (from Cisco ASA 5506) to support network segmentation and high availability.
• Configure and troubleshoot Cisco and Dell switches; support VPN tunnels and IP transition projects (copper to fiber).
• Support lab environment setup and testing for patch validation and COOP simulation.
• Perform hardware replacement (hard drives, memory modules, power supplies, etc.).
• Maintain technical documentation, diagrams, and SOPs in CALEA repositories.
• Liaise with Harmonia and ICE technical leads to coordinate troubleshooting and mission support.

Systems Administrator

Project Manager

• Oversee daily SOC operations to ensure timely and effective monitoring, detection, and response to cybersecurity threats.
• Lead and manage a team of cybersecurity professionals, fostering collaboration and performance excellence.
• Develop and implement SOC policies, procedures, and response playbooks aligned with federal and industry standards.
• Coordinate and manage cybersecurity incident response efforts, ensuring proper documentation and resolution.
• Collaborate with IT and cloud teams to enhance monitoring capabilities across hybrid infrastructures.
• Conduct regular SOC performance reviews, audits, and maturity assessments to drive continuous improvement.
• Stay current with evolving cybersecurity threats and technologies, ensuring proactive defense strategies.
• Prepare reports and presentations for executive leadership on SOC metrics, incidents, and improvements.

SOC Project Manager

Security Engineer

• Develop and implement robust database security protocols to protect data from unauthorized access or compromise.
• Lead security initiatives for databases across production, development, and testing environments.
• Integrate database security tools with SIEM systems to enhance real-time monitoring and incident detection.
• Manage and maintain database systems, ensuring high availability, performance, and compliance with security requirements.
• Provide technical leadership and mentorship to engineering and security teams on database protection best practices.
• Conduct regular vulnerability assessments and audits of database environments.
• Collaborate with cross-functional teams to strengthen enterprise data security posture and respond to incidents.
• Document database configurations, policies, and procedures for compliance and operational consistency.

Database Security SME

Database Administrator

• Oversee the technical direction, coordination, and execution of assigned database tasks.
• Provide day-to-day support for large ADABAS instances.
• Perform daily, weekly, monthly, and quarterly security and maintenance tasks, including index, partition, and patch management.
• Collaborate with development teams to ensure optimal query configuration, tuning, and response times.
• Plan, install, configure, customize, and implement the SAG suite of ADABAS products, including:
• Adabas, Adabas zIIP, Natural (CICS, TSO, RPC, zIIP), NET-WORK, Predict, EntireX, Adabas SQL Gateway, Natural Development Server, and Natural ONE.
• Plan and execute disaster recovery strategies for ADABAS and related products.
• Configure and implement ADABAS Cluster Services and associated tools.
• Implement new DBMS technologies in accordance with the DCSA Change Control process.
• Support ADABAS integration with structured and unstructured data.
• Configure and implement ADABAS support for SQL.
• Configure and implement Natural under CICS, TSO, and Batch environments.
• Configure and implement Natural Security, Predict Application Control, and Predict.
• Install, configure, and implement ADABAS SAF Security.
• Configure and optimize ADABAS data and index buffering in main memory to improve performance.
• Install and configure ADABAS Online System (AOS).
• Implement ADABAS Nucleus 64-bit processing support.
• Configure ADABAS to report performance and resource consumption data through SMF.
• Ensure ADABAS environments meet audit and regulatory compliance requirements.
• Provide technical assistance to PMOs, DBMS programming teams, and system design staff.
• Assist in evaluating and setting database parameters to ensure optimal performance.

ADABAS Database Administrator

• Lead Cybersecurity Operations:
• Direct day-to-day SOC operations, including threat detection, incident response, and continuous monitoring activities.
• Manage, mentor, and guide local and remote cybersecurity analysts and engineers.
• Serve as the escalation point for high-priority incidents and complex security events.
• Technical Oversight:
• Design, implement, and optimize security infrastructure and tools, including Firewalls, VPNs, IDS/IPS, SIEM, EDR, NDR, A/V, Email and Web Content Filtering, and Virtualization technologies.
• Ensure integration and interoperability between systems to enable centralized monitoring and response.
• Develop and maintain automation scripts, dashboards, and playbooks to streamline threat detection and response processes.
• Threat Analysis & Response:
• Oversee advanced threat hunting, malware analysis, and vulnerability management activities.
• Coordinate and lead containment, eradication, and recovery efforts for cybersecurity incidents.
• Apply data analytics and machine learning techniques to enhance proactive threat identification.
• Leadership & Collaboration:
• Provide authoritative cybersecurity guidance to senior executives, technical leads, and federal stakeholders.
• Foster collaboration between operations, architecture, and compliance teams to align operational efforts with policy objectives.
• Communicate operational risks, trends, and remediation progress to leadership in clear, actionable terms.
• Process & Continuous Improvement:
• Drive the implementation of federal and NIST-based cybersecurity frameworks (NIST SP 800-53, 800-61, 800-137, etc.).
• Establish metrics, reporting standards, and best practices for SOC performance and cyber defense maturity.
• Champion the integration of AI, automation, and orchestration tools to improve SOC efficiency and resilience.
• Technical Innovation:
• Support proof-of-concept (POC) efforts for new security technologies.
• Identify opportunities to leverage machine learning and advanced analytics to enhance cyber defense capabilities.

Senior Cybersecurity Engineer

• Configure data classification engine scanning, leveraging Varonis Policy Pack and rule customization for specific compliance use cases.
• Remediate data risk and exposure leveraging the Varonis Automation Engine; validate all remediation rules; perform and present post-remediation Data Risk Assessment.
• Optimize threat models by reviewing and maintaining accurate privileged account discovery; tune threat models based on business needs, and impact and severity of issue; integrate alerts from Varonis in other systems such as Splunk.
• Provide support in configuring, troubleshooting, and maintaining common infrastructure and applications (ESXi, Windows, Linux/RedHat, AWS, ServiceNOW).
• Collaborate with the VA Cyber Security Operations Center Team and various Storage Teams in working sessions to help stand up, implement or monitor the Varonis DSP Product.
• Assist with creating and maintaining technical documentation, including SOPs, implementation plans, and policy updates.
• Create and manage ServiceNow (SNow) tickets and create/support dashboard/report creation for tracking and visualization of security activities.
• Support the development of Zero Trust (ZT) implementation strategies that are directed by ZT memorandums.
• Use Excel and PowerPoint create presentations, charts and trending graphs as required.

Cybersecurity Engineer

• Implement robust DLP solutions designed to enforce effective data protection policies.
• Provide engineering and architecture support for projects related to the implementation of the Zero Trust Architecture (ZTA) Data Pillar for the Data Loss Prevention (DLP) program.
• Help review DLP threats to assess security risks and provide support for mapping solutions to mitigate these risks.
• Support the development of DLP use cases/requirements and work with stakeholders to build and measure solutions that align to those use cases/requirements.
• Participate in Agile ceremonies such as sprint planning, daily stand-ups, sprint reviews, and retrospectives.
• Support data sensitivity labeling to ensure correct classification of information.
• Architect and deploy comprehensive DLP solutions tailored to organizational needs.
• Establish and maintain incident response policies to protect critical data.
• Collaborate closely with the risk management team to promote a culture of data responsibility.
• Advise cross-functional teams on DLP best practices and data security measures.
• Conduct thorough reviews to enhance DLP product development.
• Conduct pilot programs, gather feedback, and iterate to reduce false positives/negatives.
• Provide expert troubleshooting and debugging for DLP-related issues and support other security solutions as needed.
• Contribute to engineering frameworks, practices, and templates focusing on DLP.
• Drive customer outcomes by applying technical knowledge related to data loss prevention.
• Work independently on initiatives that align with the broader DLP strategy.
• Engage in collaborative sessions to provide technical expertise and eliminate obstacles.
• Assist in product planning and implementation, helping teams better understand project scope.
• Mentor junior engineers to develop foundational skills related to DLP technologies.
• Share domain expertise on DLP solutions to foster team growth and contribution.
• Provide technical support for various tasks, including DLP Gap Analysis, Requirements Review, Technology Re-Alignment, Reporting, Operational Response Documentation, Policy and Governance Establishment, and Training within the Talent Management System.
• Stay current on threat landscape, new DLP techniques, and industry best practices

Security Analyst

• Support the Authorization and Accreditation (A&A) process within the VA Cybersecurity Operations Center (CSOC).
• Coordinate and assist in obtaining Authority to Operate (ATO) for various systems used by the VA CSOC.
• Work closely with VA teams, system owners, and Subject Matter Experts (SMEs) to ensure compliance with VA policies, security controls, and standards.
• Maintain accurate records of CSOC ATOs including status, award date, expiration date, POAMs, VA CSOC SME, and system owner.
• Conduct vulnerability assessments and request/submit vulnerability scans, tests, or quality checks per NIST SP 800-53 Rev 4.
• Provide eMASS support and coordinate documentation efforts with data center partners.
• Collaborate with Field Security Services ISOs and OCS SCA team to meet ATO requirements.
• Create and maintain POAMs for unresolved findings or vulnerabilities.
• Identify, document, and maintain A&A artifacts to support ATO requests in accordance with VA policy and federal guidelines.
• Review and respond to security controls and provide required evidence throughout the ATO lifecycle.
• Process intake requests for ATO support and maintain effective communication with VA CSOC.
• Conduct meetings with System Owners and SMEs as needed.

Cybersecurity Analyst, A&A Support

Systems Engineer

• Own Windows Server/AD services (GPO, DNS/DHCP, OU design, patching, monitoring) across production enclaves.
• Automate at scale with PowerShell; document runbooks and change procedures; participate in change windows/on-call.
• Troubleshoot complex infrastructure issues end-to-end (networking/TLS/certs/identity).
• Contribute to Exchange 2016/2019 operations (DAG health checks, CU planning, hybrid touch-points) in partnership with a messaging SME.

Windows Systems Engineer

Engineer

• Own Windows Server/AD services (GPO, DNS/DHCP, OU design, patching, monitoring) across production enclaves.
• Own core Windows/AD services, automation, and change operations; leverage or develop messaging/Exchange expertise to improve availability and hybrid posture.
• Automate at scale with PowerShell; document runbooks and change procedures; participate in change windows and on-call rotations.
• Troubleshoot complex infrastructure issues end-to-end (networking, TLS, certificates, identity).
• Contribute to Exchange 2016/2019 operations (DAG health checks, CU planning, hybrid touch-points) in partnership with a messaging SME.

Lead Exchange Engineer – Tier 3, Windows/AD, Enterprise Messaging

Program Manager

• Attend Program related meetings and record meetings through MS Teams.
• Review and update MS Teams meeting minutes, capture meeting attendees list, and route finalized meeting minutes for review.
• Develop documentation to include but not limited to; Meeting Minutes, Agendas, NIST SP 800-53 Security Control Change Requests, Power Point Presentations deliverables, and Reports.
• Work with NIST SP 800-53 Security Control Change Requestors to properly update Security control policy to reflect current operations and security best practices.
• Monitor and provide formal responses to emails in a Program level email box in Outlook.
• Send meeting invites from a shared Program email box in Outlook.
• Distribute meeting agendas and meeting notes to distribution lists.
• Grant access to MS Teams documents and MS Teams spaces to approved individuals.
• Upload Meeting Recordings to MS Teams relevant project spaces.
• Coordinate the effort to gather updates for taskings and ensure they are provided in the required timeframe.
• Create draft templates and store them on internal shared spaces for team members to add input.
• Attend daily, weekly and monthly meetings as required and support the team as needed.
• Create contract deliverables, process reviews, and deliverable submissions.
• Conduct Cybersecurity Policy research to support ongoing efforts throughout the program.

Technical Program Analyst

Customer Support

• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP) covering all aspects of Vulnerability Scanning Services and Support.
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (primarily nights and weekends) to minimize impact to network users.
• Maintain and manage Government owned enterprise scanning solution and infrastructure (currently Redhat Operating Systems and Tenable Software), and scan analysis and reporting software.
• Provide backend support systems and maintain Vulnerability Databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data to determine if the system is performing as designed and review application/scanner logs for anomalies.
• Review scanner repositories for malfunctioning scanners and analyze trends in vulnerability findings.
• Review and update scan policies and produce periodic operation analysis, trending, impact reports, and recommendation papers as required.
• Manage and maintain backend system software and vulnerability scanning process-related documents.
• Coordinate CSOC-managed network scan operations, review and verify IP ranges, select appropriate scan policies, and coordinate with VA network and CSOC personnel.
• Respond to inquiries and distribute reports as required by CSOC Government team.
• Conduct initial system/data checks upon scan initiation, monitor and react to concurrent scans, troubleshoot issues during scans, and verify accuracy of data upon completion.
• Develop new testing programs to expand and deepen scans and operations.
• Verify/edit report templates, produce Scan Findings Reports, conduct quality assurance checks of final reports, and produce compliance and testing data to appropriate repositories.

Mid-Level Cyber Infrastructure Support Specialist

• Operate as the primary security point of contact for the system and acts as a liaison between the system team and the agency's security and authorizing officials.
• Develop and maintain the System Security Plan (SSP), which is the core document for the ATO package.
• Ensure that a comprehensive Contingency Plan (CP) is developed to outline procedures for system recovery in the event of a security incident or disaster.
• For systems handling personally identifiable information (PII), the ensure a Privacy Impact Assessment (PIA) is completed to assess and mitigate privacy risks.
• Based on the system's security categorization (low, moderate, or high), work with the system team to select and implement the appropriate security controls from NIST Special Publication 800-53.
• Develop and manage the plan for continuous monitoring, which ensures that security controls remain effective and that the system's security posture is maintained post-ATO.
• Support the security assessor team (internal or third-party) during the security assessment. This involves providing system documentation and evidence to demonstrate that controls are implemented correctly and are operating as intended.
• Coordinate and oversee vulnerability scans and penetration tests to identify weaknesses in the system.
• For any security weaknesses identified during the assessment, the ISSO is responsible for developing and tracking the Plan of Action and Milestones (POA&M):. This is a remedial action plan that details how and when the weaknesses will be mitigated.
• The ISSO continuously assesses the system's risk posture and provides a recommendation to the Authorizing Official (AO) regarding the system's readiness for an ATO.
• Compile the final ATO package, which includes the SSP, assessment reports, and POA&M, for review by the AO.

Information System Security Officer, ISSO

• Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission.
• As a Cybersecurity Implementation Engineer, you will play a critical role in supporting the mission of the Department of Veterans Affairs (VA) deploying Palo Alto's Prisma Cloud tools across multiple environments.
• Install, configure, and integrate Prisma Cloud into the customer's IT ecosystem, deploying Console and Defenders/Enforcers across workloads in public clouds (AWS, Azure, GCP), on-premises, and hybrid setups alongside Palo Alto SMEs.
• Translate security requirements and policies into actionable configurations within Prisma Cloud; create and tune rules for runtime protection, vulnerability management, compliance checks (NIST, PCI DSS), and network segmentation.
• Integrate Prisma Cloud into CI/CD pipelines and IT workflows with tools like Jenkins, GitHub Actions, GitLab, Jira, and Splunk to enable shift-left security.
• Act as SME for post-deployment issues: fault isolation, root cause analysis, troubleshooting Prisma Cloud functionality, integrations, or performance.
• Use Prisma Cloud to monitor and manage security posture: run vulnerability scans on container images and hosts, ensure compliance with benchmarks (CIS), prioritize and track remediation.
• Document deployment process, architectural decisions, and configuration settings; provide knowledge transfer and training to client's internal security and IT teams.

Cybersecurity Implementation Engineer

• Lead a dynamic cybersecurity program supporting the Department of Veterans Affairs to implement, deploy and maintain Prisma Cloud and XSIAM.
• Oversee successful completion of all program tasks, including technical work, administrative actions, and business development activities.
• Ensure all task order deliverables are high quality and submitted on time.
• Direct program activities to meet customer and organizational objectives and serve as a liaison with customers to coordinate activities, negotiate tasks, and solve problems.
• Supervise assigned technical and administrative staff, including partner teams and leads, and perform personnel actions such as hiring and performance evaluations.
• Maintain positive relationships with key Government Points of Contact (POCs), respond to requests or concerns, and conduct frequent check-ins to ensure customer satisfaction.
• Continuously develop the team and organize resources to optimally achieve program goals and objectives.
• Coordinate and monitor subcontractor activities and administer subcontractor deliverables and financials.
• Ensure compliance with relevant corporate and government policies and standards.
• Utilize management tools and technologies to support tracking, status reporting, collaboration, and workflow management.
• Perform business development activities at all stages, including support of technical and cost proposals.

Cybersecurity Program Manager

• Support VA CSOC by providing ATO and PCI scanning support for vulnerability scans and configuration tests.
• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP).
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (nights and weekends) to minimize user impact.
• Maintain and manage government-owned enterprise scanning solution and infrastructure (Red Hat OS, Tenable software), backend support systems, and vulnerability databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data, application/scanner logs, and repositories for anomalies, malfunctions, and trends.
• Review and update scan policies; produce periodic operational analysis, trending, impact reports, and recommendation papers.
• Manage and maintain backend system software and vulnerability scanning process documentation.
• Coordinate scan operations with points of contact, verify IP ranges and scan policies, and coordinate with VA network and CSOC personnel.
• Execute scan operations: initial system/data checks, monitor/coordinate concurrent scans, troubleshoot issues, verify accuracy, and develop new testing programs.
• Produce and verify report templates, perform QA checks, distribute Scan Findings Reports, and submit compliance and testing data to repositories.

Maveris

Exploitation Analyst – Penetration Tester

Systems Administrator

SOC Project Manager

Database Security SME

ADABAS Database Administrator

Senior Cybersecurity Engineer

Cybersecurity Engineer

Senior Cybersecurity Engineer

Cybersecurity Analyst, A&A Support

Windows Systems Engineer

Lead Exchange Engineer – Tier 3, Windows/AD, Enterprise Messaging

Technical Program Analyst

Mid-Level Cyber Infrastructure Support Specialist

Information System Security Officer, ISSO

Cybersecurity Implementation Engineer

Cybersecurity Program Manager

Cyber Infrastructure Support Specialist – Mid-level

Software Automation Developer