TDI (Tetrad Digital Integrity)

Software Engineer

• Defining and onboarding new data sources into Splunk
• Analyzing the data for anomalies and trends
• Creating new dashboards and enhancing old ones
• Mining and highlighting key trends and patterns in data
• Proficiency within a Linux environment, editing and maintaining Splunk configurations
• Installing and updating Splunk agents and apps
• Administration of Splunk environment consisting of search heads, indexers, deployers, deployment servers, universal forwarders, clustering and Splunk IT Service Intelligence for access, performance, and operational roles
• Interact with end users/teams to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards
• Interact with management and provide reports as necessary
• Thought leadership to lead and guide a team of 3-5 engineers

Splunk Architect – Developer

Security Engineer

• Lead and support RMF activities throughout all phases (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
• Provide expert guidance on DoD cloud security policies, NIST SP 800-53 controls, CNSS policies, and DoD-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
• Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads hosted in Google Cloud Platform.
• Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms within GCP.
• Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
• Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
• Interface with system architects, developers, and DevSecOps teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Support security control assessments (SCAs) and coordinate with third-party assessors.
• Monitor, track, and report on security compliance posture through Continuous Monitoring (ConMon) processes.

DoD Information Systems Security Officer/Engineer, Mid – RMF/Cloud

• High-Profile, out-front leadership and support of DoD RMF activities throughout all phases (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
• Provide expert guidance on DoD cloud security policies, NIST SP 800-53 controls, CNSS policies, and DoD-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
• Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads hosted in Google Cloud Platform.
• Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms within GCP.
• Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
• Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
• Interface with system architects, developers, and DevSecOps teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Support security control assessments (SCAs) and coordinate with third-party assessors.
• Monitor, track, and report on security compliance posture through Continuous Monitoring (ConMon) processes.

Senior DoD Information Systems Security Manager – RMF/Cloud SME

Engineer

• Implement USPS cybersecurity strategies protecting the digital identities within the network
• Safeguard and protect customers from increasing threats and vulnerabilities in this digital age
• Work within the Information Technology (IT) environment with connected assets, hosted applications and data
• Collaborate in a hybrid commute or location preference in VA or MN

Privilege Access Management Engineer

• Implement USPS cybersecurity strategies protecting the digital network, connected assets, hosted applications and data, and employees within the Operational Technology (OT) environment supporting critical USPS mail and package handling systems.
• Continue development and curation of proprietary database system managing asset details of proprietary systems leveraged by automation for identifying assets observed within the environment.
• Coordination and workload balancing of the team, facilitating, and ensuring appropriate technical decisions are made to support fulfillment of Postal goals and objectives in required timelines.
• Work closely between the technical team, Postal leadership and architecture and strategy teams to ensure engineered solutions meet all functional and architectural requirements.
• Provide 100% onsite support at customer site in Merrifield, VA.

Operational Technology – Asset Visibility and Security Engineer

DevOps Engineer

• Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm protecting customers from threats and vulnerabilities.
• Take full ownership of CnSight® development, modernization, and production-readiness.
• Evaluate the existing codebase and decide on upgrading vs. rebuilding, using AI-assisted development as a force multiplier.
• Update and secure dependencies, libraries, and integrations to meet compliance standards.
• Containerize the application for scalable and portable deployment (e.g., Docker, Kubernetes).
• Design and implement high-quality backend services in Go and maintain frontend components in React/Redux.
• Develop complex SQL queries and optimize data access patterns in PostgreSQL.
• Strengthen CI/CD pipelines and implement automated testing to support rapid releases.
• Collaborate with product owner and stakeholders to refine requirements and deliver on an aggressive timeline.

Full Stack Engineer, Go/React, DevOps

Senior Splunk Engineer, SME

Data Security Specialist

• The OT Asset Visibility and Security Engineer will implement USPS cybersecurity strategies protecting the digital network, connected assets, hosted applications and data, and employees within the Operational Technology (OT) environment supporting critical USPS mail and package handling systems.
• Responsibilities include coordination and workload balancing of the team, facilitating, and ensuring appropriate technical decisions are made to support fulfillment of Postal goals and objectives in required timelines.
• Work closely between the technical team, Postal leadership and architecture and strategy teams to ensure engineered solutions meet all functional and architectural requirements.

Operational Technology Asset Visibility and Security Engineer

• Demonstrated proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.
• Evaluate and support documentation, validation, and accreditation processes necessary to assure that new and existing information technology (IT) systems meet the organization's information assurance (IA) and security requirements.
• Ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
• Ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.

Information Systems and Security Officer, ISSO

Risk

• Leverage Artificial Intelligence (AI), focused on designing, implementing, and managing programs that proactively identify, assess, and mitigate insider threats using AI-powered tools and techniques to analyze user activity and behavior.
• Build strong relationships across business lines and with technical partners to develop and implement AI-driven insider risk solutions and effectively communicate findings and risks to senior leadership.
• Initiate, supervise, and/or develop requirements from a project’s inception to conclusion for complex to extremely complex programs; and provide strategic and expert advice and technical guidance, to program and project staff.
• Conduct risk assessments, identifying critical assets, evaluating potential vulnerabilities, and prioritizing risks based on their potential impact and likelihood.
• Lead and coordinate cross-functional team operations, including analysts, engineers, and other team members, to ensure cohesive execution of the insider risk mission.
• Serve as the primary escalation point for complex or high-risk insider cases in the absence of other team leads, triaging events, and briefing leadership on threat posture, findings, and recommended actions.
• Oversee the development and refinement of insider threat detection frameworks, ensuring alignment with organizational risk tolerance, policies, and evolving threats.
• Provides detailed analysis, evaluation and recommendations for improvements, optimization development, and/or maintenance efforts for client-specific or mission critical challenges/issues; and consults with client to define needs or challenges.
• Represent the IRO team in meetings, working groups, and leadership briefings, translating operational findings into executive-level insights.

Insider Risk Senior Analyst or SME

Analyst

• Demonstrated proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.
• Evaluate and support documentation, validation, and accreditation processes necessary to assure that new and existing information technology (IT) systems meet the organization's information assurance (IA) and security requirements.
• Ensure appropriate treatment of risk, compliance, and assurance from internal and external perspectives is considered
• Ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.

A&A Analyst

Project Manager

• Strong organizational skills sufficient to plan, coordinate, track and manage several ongoing and complex efforts, including: retirements and remnant clean-up of applications across the organization; revisions of outdated compliance reviews for hundreds of information resources; ongoing updates to vital documents.
• Experience with and understanding of process to retire applications/systems across large organizations, including verification of remnant removal, to minimize security risks to the organization, and ability to advise application stakeholders through the process.

A&A Project Manager

• Ability to effectively manage compliance documentation, security plans, risk assessments, and other related documents within the GRC tool, ServiceNow, and SharePoint environments.
• Ability to serve as subject matter expert (SME) for the USPS A&A process.