Maveris

Security Engineer

• Operate as the primary security point of contact for the system and acts as a liaison between the system team and the agency's security and authorizing officials.
• Develop and maintain the System Security Plan (SSP), which is the core document for the ATO package.
• Ensure that a comprehensive Contingency Plan (CP) is developed to outline procedures for system recovery in the event of a security incident or disaster.
• For systems handling personally identifiable information (PII), the ensure a Privacy Impact Assessment (PIA) is completed to assess and mitigate privacy risks.
• Based on the system's security categorization (low, moderate, or high), work with the system team to select and implement the appropriate security controls from NIST Special Publication 800-53.
• Develop and manage the plan for continuous monitoring, which ensures that security controls remain effective and that the system's security posture is maintained post-ATO.
• Support the security assessor team (internal or third-party) during the security assessment. This involves providing system documentation and evidence to demonstrate that controls are implemented correctly and are operating as intended.
• Coordinate and oversee vulnerability scans and penetration tests to identify weaknesses in the system.
• For any security weaknesses identified during the assessment, the ISSO is responsible for developing and tracking the Plan of Action and Milestones (POA&M):. This is a remedial action plan that details how and when the weaknesses will be mitigated.
• The ISSO continuously assesses the system's risk posture and provides a recommendation to the Authorizing Official (AO) regarding the system's readiness for an ATO.
• Compile the final ATO package, which includes the SSP, assessment reports, and POA&M, for review by the AO.

Information System Security Officer, ISSO

• Lead a dynamic cybersecurity program supporting the Department of Veterans Affairs to implement, deploy and maintain Prisma Cloud and XSIAM.
• Oversee successful completion of all program tasks, including technical work, administrative actions, and business development activities.
• Ensure all task order deliverables are high quality and submitted on time.
• Direct program activities to meet customer and organizational objectives and serve as a liaison with customers to coordinate activities, negotiate tasks, and solve problems.
• Supervise assigned technical and administrative staff, including partner teams and leads, and perform personnel actions such as hiring and performance evaluations.
• Maintain positive relationships with key Government Points of Contact (POCs), respond to requests or concerns, and conduct frequent check-ins to ensure customer satisfaction.
• Continuously develop the team and organize resources to optimally achieve program goals and objectives.
• Coordinate and monitor subcontractor activities and administer subcontractor deliverables and financials.
• Ensure compliance with relevant corporate and government policies and standards.
• Utilize management tools and technologies to support tracking, status reporting, collaboration, and workflow management.
• Perform business development activities at all stages, including support of technical and cost proposals.

Cybersecurity Program Manager

• Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission.
• As a Cybersecurity Implementation Engineer, you will play a critical role in supporting the mission of the Department of Veterans Affairs (VA) deploying Palo Alto's Prisma Cloud tools across multiple environments.
• Install, configure, and integrate Prisma Cloud into the customer's IT ecosystem, deploying Console and Defenders/Enforcers across workloads in public clouds (AWS, Azure, GCP), on-premises, and hybrid setups alongside Palo Alto SMEs.
• Translate security requirements and policies into actionable configurations within Prisma Cloud; create and tune rules for runtime protection, vulnerability management, compliance checks (NIST, PCI DSS), and network segmentation.
• Integrate Prisma Cloud into CI/CD pipelines and IT workflows with tools like Jenkins, GitHub Actions, GitLab, Jira, and Splunk to enable shift-left security.
• Act as SME for post-deployment issues: fault isolation, root cause analysis, troubleshooting Prisma Cloud functionality, integrations, or performance.
• Use Prisma Cloud to monitor and manage security posture: run vulnerability scans on container images and hosts, ensure compliance with benchmarks (CIS), prioritize and track remediation.
• Document deployment process, architectural decisions, and configuration settings; provide knowledge transfer and training to client's internal security and IT teams.

Cybersecurity Implementation Engineer

Customer Support

• Support VA CSOC by providing ATO and PCI scanning support for vulnerability scans and configuration tests.
• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP).
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (nights and weekends) to minimize user impact.
• Maintain and manage government-owned enterprise scanning solution and infrastructure (Red Hat OS, Tenable software), backend support systems, and vulnerability databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data, application/scanner logs, and repositories for anomalies, malfunctions, and trends.
• Review and update scan policies; produce periodic operational analysis, trending, impact reports, and recommendation papers.
• Manage and maintain backend system software and vulnerability scanning process documentation.
• Coordinate scan operations with points of contact, verify IP ranges and scan policies, and coordinate with VA network and CSOC personnel.
• Execute scan operations: initial system/data checks, monitor/coordinate concurrent scans, troubleshoot issues, verify accuracy, and develop new testing programs.
• Produce and verify report templates, perform QA checks, distribute Scan Findings Reports, and submit compliance and testing data to repositories.

Maveris

Information System Security Officer, ISSO

Cybersecurity Program Manager

Cybersecurity Implementation Engineer

Cyber Infrastructure Support Specialist – Mid-level

Software Automation Developer