MBL Technologies Inc.

Attorney

• Oversee compliance and reviews of data protection and privacy policies, assessments, privacy risk strategies
• Support client and team to navigate legal requirements and nuances for operations and documentation
• Conduct reviews of technical documentation such as Privacy Impact Assessments (PIAs) and other documentation to confirm security controls and policies are accurately reflected and implemented
• Apply and understanding of NIST 800-53 to support system teams to accurately document operations and privacy compliance
• Oversee the development and delivery of weekly and monthly reporting including reports, presentations, discussions, and metrics
• Maintain quality control for assignments including reviewing deliverables, contributing key content, managing workload to meet deadlines, and ensuring client satisfaction
• Identify lessons learned and apply lessons learned to drive compliance, solutions and recommendations

Privacy Consultant – Legal, Technical Compliance

Analyst

• Monitor, analyze, and interpret federal privacy laws, regulations, and policies, including the Privacy Act of 1974 and the E-Government Act of 2002.
• Provide guidance on privacy-related directives issued by the Office of Management and Budget (OMB) and other governing bodies.
• Develop, update, and implement privacy policies, procedures, and guidance to ensure organizational compliance.
• Conduct privacy compliance assessments of current and planned programs, systems, and initiatives.
• Support the development and maintenance of privacy documentation, including policies, impact assessments, and compliance reports.
• Evaluate organizational practices against NIST standards and guidelines, including NIST SP 800-37 (Risk Management Framework) and NIST SP 800-53 (Security and Privacy Controls).
• Collaborate with cross-functional stakeholders (legal, IT, security, and program teams) to ensure privacy considerations are integrated into operations and systems.
• Identify gaps in privacy compliance and recommend corrective actions and process improvements.
• Stay current on evolving federal privacy requirements and emerging best practices.

Privacy Policy Analyst

Application Engineer

• Perform DAST scanning using Burp Suite Enterprise, including configuration, execution, and analysis of scan results.
• Conduct SAST assessments using Veracode, identifying code-level vulnerabilities and recommending remediation strategies.
• Analyze and prioritize vulnerabilities based on risk, leveraging frameworks such as CVSS, CWE, OWASP Top 10, WASC, and SANS-25.
• Collaborate with development, DevOps, and security teams to integrate security into the SDLC and CI/CD pipelines.
• Provide guidance on secure coding practices and assist developers with vulnerability remediation.
• Support the implementation and maintenance of IDE security plug-ins and secure development tools.
• Troubleshoot application and connectivity issues within Linux-based environments.
• Contribute to the design and implementation of enterprise-wide application security controls.
• Ensure alignment with federal compliance standards, including NIST 800-53, FIPS, and FedRAMP.
• Stay current with emerging threats, vulnerabilities, and application security best practices.

Privacy Consultant – Legal, Technical Compliance

Privacy Policy Analyst

Application Security Engineer