MBL Technologies Inc.

Compliance

• Serve as the Section 508 coordinator and subject matter expert on all 508 issues
• Participate in working groups with stakeholders to discuss requirements and present 508 strategies and solutions
• Provide guidance on technical issues involving Section 508 as it relates to accessible documents and electronic media
• Redesign and/or develop solutions to address accessibility issues and ensure compliance with 508 standards
• Support client in the Washington, DC metro area; remote work with occasional onsite presence
• Collaborate with cross-functional teams to implement accessibility strategies and maximize functionality for ADA users

Section 508 Compliance Analyst

Security Engineer

• Independently conducts security control assessments, supports system authorization activities, and contributes to organizational risk management
• Perform security reviews to identify architectural gaps and provide recommendations for risk mitigation
• Conduct risk analyses (e.g., threats, vulnerabilities, probability of occurrence) during significant system/application changes
• Plan and execute security authorization reviews, assurance case development, and audits for system installations and networks
• Provide input to the Risk Management Framework (RMF) and related documentation, including lifecycle support plans, CONOPS, and operational procedures
• Review authorization packages and assurance documents to confirm risk levels are acceptable for systems, applications, and networks
• Verify that system, network, and application security postures are implemented as designed, documenting deviations and recommending corrective actions
• Assess the effectiveness of implemented security controls across management, operational, and technical areas
• Support compliance activities by ensuring security configuration guidelines and standards are followed
• Evaluate configuration management and release processes for security impacts
• Define/document how new systems or interfaces affect the organization’s current security posture
• Develop security compliance processes and perform audits of external services (e.g., CSPs, data centers)
• Ensure Plans of Action & Milestones (POA&Ms) and remediation plans are established for vulnerabilities
• Participate in Risk Governance processes by presenting risks, mitigations, and technical assessments
• Support acquisition and procurement efforts to ensure information security requirements are integrated
• Produce reports, briefings, and technical documentation reflecting assessment results and recommendations

Security Control Assessor – Midlevel

• Conduct independent, comprehensive assessments of management, operational, and technical security/privacy controls per NIST SP 800-37
• Perform security reviews to identify architectural gaps and provide recommendations for risk mitigation
• Conduct risk analyses (threats, vulnerabilities, probability of occurrence) during significant system/application changes
• Plan and execute security authorization reviews, assurance case development, and audits for system installations and networks
• Provide input to the Risk Management Framework (RMF) and related documentation, including lifecycle support plans, CONOPS, and operational procedures
• Review authorization packages and assurance documents to confirm acceptable risk levels for systems, applications, and networks
• Verify that system, network, and application security postures are implemented as designed, documenting deviations and recommending corrective actions
• Assess the effectiveness of implemented security controls across management, operational, and technical areas
• Support compliance activities by ensuring security configuration guidelines and standards are followed
• Evaluate configuration management and release processes for security impacts
• Define/document how new systems or interfaces affect the organization’s current security posture
• Develop security compliance processes and perform audits of external services (e.g., CSPs, data centers)
• Ensure Plans of Action & Milestones (POA&Ms) and remediation plans are established for vulnerabilities
• Participate in Risk Governance processes by presenting risks, mitigations, and technical assessments
• Support acquisition and procurement efforts to ensure information security requirements are integrated
• Produce reports, briefings, and technical documentation reflecting assessment results and recommendations
• Role is mostly remote with occasional onsite meetings in the Arlington area; contingent on contract award; no travel reimbursements allocated

Senior Security Control Assessor, SCA

Project Manager

• Directly manage information technology projects to provide unique services or products.
• Act as a key stakeholder in IT operational processes and service delivery.
• Coordinate, monitor, and optimize services provided to customers end-to-end.
• Analyze data from multiple disparate sources to provide cybersecurity and privacy insights.
• Provide direction, oversight, and monitoring of project activities to ensure successful service delivery.
• Develop and integrate system, network, performance, and cybersecurity requirements into project and contract language.
• Define and enforce Service-Level Agreements (SLAs) and Operating Level Agreements (OLAs).
• Gather feedback on customer satisfaction and drive continual improvement initiatives.
• Lead workforce planning initiatives, including recruitment, retention, and training of cyber talent.
• Manage project budgets, staffing, contracts, and Conduct needs analysis to identify opportunities for improved business process solutions.
• Provide recommendations on project costs, design concepts, and design changes.
• Collaborate with other service managers and product owners to balance priorities and meet customer requirements.
• Conduct import/export reviews to manage supply chain risks.
• Monitor, measure, and evaluate compliance, risk, and assurance activities.
• Ensure acquisitions, procurements, and outsourcing efforts address IT security requirements.
• Review and conduct audits of IT projects and service performance.
• Recommend improvements and upgrades to enhance system efficiency and effectiveness.

Senior IT Project Manager

Application Engineer

• Work together with the client and application community to maintain a resilient security posture for highly visible applications.
• Enhance our application security team.
• Assist clients with enabling their mission by bringing the right people, capabilities, and expertise together.
• Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode.
• Secure enterprise web applications and apply OWASP Top 10, CVSS, CWE, WASC, and SANS-25 controls.
• Design and implement enterprise-wide security controls to secure applications, systems, network, or infrastructure services.
• Troubleshoot basic website connectivity issues in Linux or UNIX environments.
• Use tools such as Burp Suite, OWASP ZAP, Burp Proxy, Selenium, and IDEs like Eclipse, JDeveloper, or Visual Studio.

Application Security Engineer

Engineer

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets.
We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission.
MBL Technologies is currently hiring for a Cyber Ark Engineer - Intermediate to join our security team.
This role will support large-scale IAM projects for our government client.
The individual will analyze the identity life cycle, articulating access requirements and defining enterprise identity records.

Section 508 Compliance Analyst

Security Control Assessor – Midlevel

Senior Security Control Assessor, SCA

Senior IT Project Manager

Application Security Engineer

CyberArk Engineer