Maveris

Program Manager

• Attend Program related meetings and record meetings through MS Teams.
• Review and update MS Teams meeting minutes, capture meeting attendees list, and route finalized meeting minutes for review.
• Develop documentation to include but not limited to; Meeting Minutes, Agendas, NIST SP 800-53 Security Control Change Requests, Power Point Presentations deliverables, and Reports.
• Work with NIST SP 800-53 Security Control Change Requestors to properly update Security control policy to reflect current operations and security best practices.
• Monitor and provide formal responses to emails in a Program level email box in Outlook.
• Send meeting invites from a shared Program email box in Outlook.
• Distribute meeting agendas and meeting notes to distribution lists.
• Grant access to MS Teams documents and MS Teams spaces to approved individuals.
• Upload Meeting Recordings to MS Teams relevant project spaces.
• Coordinate the effort to gather updates for taskings and ensure they are provided in the required timeframe.
• Create draft templates and store them on internal shared spaces for team members to add input.
• Attend daily, weekly and monthly meetings as required and support the team as needed.
• Create contract deliverables, process reviews, and deliverable submissions.
• Conduct Cybersecurity Policy research to support ongoing efforts throughout the program.

Technical Program Analyst

Customer Support

• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP) covering all aspects of Vulnerability Scanning Services and Support.
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (primarily nights and weekends) to minimize impact to network users.
• Maintain and manage Government owned enterprise scanning solution and infrastructure (currently Redhat Operating Systems and Tenable Software), and scan analysis and reporting software.
• Provide backend support systems and maintain Vulnerability Databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data to determine if the system is performing as designed and review application/scanner logs for anomalies.
• Review scanner repositories for malfunctioning scanners and analyze trends in vulnerability findings.
• Review and update scan policies and produce periodic operation analysis, trending, impact reports, and recommendation papers as required.
• Manage and maintain backend system software and vulnerability scanning process-related documents.
• Coordinate CSOC-managed network scan operations, review and verify IP ranges, select appropriate scan policies, and coordinate with VA network and CSOC personnel.
• Respond to inquiries and distribute reports as required by CSOC Government team.
• Conduct initial system/data checks upon scan initiation, monitor and react to concurrent scans, troubleshoot issues during scans, and verify accuracy of data upon completion.
• Develop new testing programs to expand and deepen scans and operations.
• Verify/edit report templates, produce Scan Findings Reports, conduct quality assurance checks of final reports, and produce compliance and testing data to appropriate repositories.

Mid-Level Cyber Infrastructure Support Specialist

Security Engineer

• Operate as the primary security point of contact for the system and acts as a liaison between the system team and the agency's security and authorizing officials.
• Develop and maintain the System Security Plan (SSP), which is the core document for the ATO package.
• Ensure that a comprehensive Contingency Plan (CP) is developed to outline procedures for system recovery in the event of a security incident or disaster.
• For systems handling personally identifiable information (PII), the ensure a Privacy Impact Assessment (PIA) is completed to assess and mitigate privacy risks.
• Based on the system's security categorization (low, moderate, or high), work with the system team to select and implement the appropriate security controls from NIST Special Publication 800-53.
• Develop and manage the plan for continuous monitoring, which ensures that security controls remain effective and that the system's security posture is maintained post-ATO.
• Support the security assessor team (internal or third-party) during the security assessment. This involves providing system documentation and evidence to demonstrate that controls are implemented correctly and are operating as intended.
• Coordinate and oversee vulnerability scans and penetration tests to identify weaknesses in the system.
• For any security weaknesses identified during the assessment, the ISSO is responsible for developing and tracking the Plan of Action and Milestones (POA&M):. This is a remedial action plan that details how and when the weaknesses will be mitigated.
• The ISSO continuously assesses the system's risk posture and provides a recommendation to the Authorizing Official (AO) regarding the system's readiness for an ATO.
• Compile the final ATO package, which includes the SSP, assessment reports, and POA&M, for review by the AO.

Information System Security Officer, ISSO

• Lead a dynamic cybersecurity program supporting the Department of Veterans Affairs to implement, deploy and maintain Prisma Cloud and XSIAM.
• Oversee successful completion of all program tasks, including technical work, administrative actions, and business development activities.
• Ensure all task order deliverables are high quality and submitted on time.
• Direct program activities to meet customer and organizational objectives and serve as a liaison with customers to coordinate activities, negotiate tasks, and solve problems.
• Supervise assigned technical and administrative staff, including partner teams and leads, and perform personnel actions such as hiring and performance evaluations.
• Maintain positive relationships with key Government Points of Contact (POCs), respond to requests or concerns, and conduct frequent check-ins to ensure customer satisfaction.
• Continuously develop the team and organize resources to optimally achieve program goals and objectives.
• Coordinate and monitor subcontractor activities and administer subcontractor deliverables and financials.
• Ensure compliance with relevant corporate and government policies and standards.
• Utilize management tools and technologies to support tracking, status reporting, collaboration, and workflow management.
• Perform business development activities at all stages, including support of technical and cost proposals.

Cybersecurity Program Manager

• Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission.
• As a Cybersecurity Implementation Engineer, you will play a critical role in supporting the mission of the Department of Veterans Affairs (VA) deploying Palo Alto's Prisma Cloud tools across multiple environments.
• Install, configure, and integrate Prisma Cloud into the customer's IT ecosystem, deploying Console and Defenders/Enforcers across workloads in public clouds (AWS, Azure, GCP), on-premises, and hybrid setups alongside Palo Alto SMEs.
• Translate security requirements and policies into actionable configurations within Prisma Cloud; create and tune rules for runtime protection, vulnerability management, compliance checks (NIST, PCI DSS), and network segmentation.
• Integrate Prisma Cloud into CI/CD pipelines and IT workflows with tools like Jenkins, GitHub Actions, GitLab, Jira, and Splunk to enable shift-left security.
• Act as SME for post-deployment issues: fault isolation, root cause analysis, troubleshooting Prisma Cloud functionality, integrations, or performance.
• Use Prisma Cloud to monitor and manage security posture: run vulnerability scans on container images and hosts, ensure compliance with benchmarks (CIS), prioritize and track remediation.
• Document deployment process, architectural decisions, and configuration settings; provide knowledge transfer and training to client's internal security and IT teams.

Cybersecurity Implementation Engineer

• Support VA CSOC by providing ATO and PCI scanning support for vulnerability scans and configuration tests.
• Create, update, and maintain Vulnerability Scanning Services Support Standard Operating Procedures (SOP).
• Provide Vulnerability Scan/Findings Reports for all scans to the VSS team.
• Perform scanning operations during non-standard hours (nights and weekends) to minimize user impact.
• Maintain and manage government-owned enterprise scanning solution and infrastructure (Red Hat OS, Tenable software), backend support systems, and vulnerability databases.
• Write and edit scripts used for scanning and security testing (Perl, Python, etc.).
• Review scan data, application/scanner logs, and repositories for anomalies, malfunctions, and trends.
• Review and update scan policies; produce periodic operational analysis, trending, impact reports, and recommendation papers.
• Manage and maintain backend system software and vulnerability scanning process documentation.
• Coordinate scan operations with points of contact, verify IP ranges and scan policies, and coordinate with VA network and CSOC personnel.
• Execute scan operations: initial system/data checks, monitor/coordinate concurrent scans, troubleshoot issues, verify accuracy, and develop new testing programs.
• Produce and verify report templates, perform QA checks, distribute Scan Findings Reports, and submit compliance and testing data to repositories.