True Zero Technologies, LLC

Engineer

• Maintain security policies and rules adhering to best practices, organizational requirements, and risk management frameworks.
• Managing/Document/Monitoring of network activity
• Work closely with peers and other IT professionals to ensure a cohesive security posture
• Focusing and adhering to the the policies and procedures that promote best practices and ensure a secure network
• Rule implementation
• Experience with ServiceNow
• Experience with Splunk
• Understanding of the effective implementation requirements along with careful planning that includes a comprehensive needs analysis, a detailed project plan, and a thorough understanding of the organization's security policies
• Ensure the policy aligns with relevant cybersecurity and privacy requirements.
• Maintain detailed records of firewall setups, changes, exceptions, and testing results.
• Flow Troubleshooting
• Conduct regular system upgrades, patches, enhancements, and performance monitoring to ensure the security and efficiency of firewall operations.
• Collaborate with the IT security team to devise and execute a comprehensive network security strategy.
• Document all configurations, modifications, and security policies related to the firewall infrastructure.
• Offer technical support and guidance to team members and other staff on network security concerns and firewall functionalities.
• Stay updated on the latest cybersecurity threats, trends, technologies, and automation practices to continually enhance firewall security and operational efficiency.
• Deploy, configure, and manage firewalls including Palo Alto, CISCO ASA, and Checkpoint to safeguard critical infrastructure and data.

Junior Firewall Engineer

Security Engineer

• Maintaining the overarching operational security posture and managing the day-to-day security operations of your assigned Information System (IS);
• Developing, reviewing, and maintaining security and authorization documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs);
• Performing vulnerability/risk assessment analyses to support assessment and authorization (A&A);
• Ensuring the implementation and maintenance of security controls in accordance with the SSP and the organization's security policies, standards, and procedures;
• Supporting security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).
• Providing configuration management (CM) for IS security software, hardware, and firmware, and leading Change Control Board (CCB) meetings; and,
• Providing guidance and security expertise to program leadership.

Information Systems Security Officer – Lead

• Maintain various clients' Splunk instances with a heavy emphasis on data on-boarding, content development, reporting, and visualizations.
• Possess prior Splunk engineering and administration experience.
• Meet the necessary certification prerequisites.
• Work well in a team environment.
• Support federal customers, which is a plus.
• Access to the full knowledge base driven by the True Zero community.
• Technical backing of the entire PS team.
• Engage in information sharing and knowledge workshops.

Splunk Engineer – Core Consultant Certified, ES Accreditation

• Implement RBA: Develop and implement RBA strategies within Splunk ES to reduce alert noise and focus on high-fidelity alerts.
• Develop RBA components: Build and implement actionable alerts, workflow actions, risk incident rules, and risk scores.
• Create dashboards and reports: Design custom dashboards to visualize risk scores and provide context for analysts.
• Correlate data: Use Splunk's capabilities to correlate disparate events to identify patterns of risky behavior.
• Build custom solutions: Develop custom machine learning (ML) models to augment alerting and create automated workflows to improve efficiency.
• Content Development: Develop advanced security content, including dashboards, reports, and alerts, to highlight risk details, health analysis, and risk suppression specific to RBA environments.
• Data: Collaborate with application and system owners to onboard new data sources (e.g., from Windows, Linux, cloud services like AWS/Azure) and ensure proper parsing and enrichment for effective analysis within RBA.
• Correlate various data sources, such as logs from operating systems, applications, and cloud providers, into Splunk to feed RBA models.

Splunk Engineer – Core Certified Consultant, ES Accreditation Required

• Support the design, implementation, and administration of True Zero's federal customers Splunk ITSI environment
• Integration with the customers large Enterprise Splunk environment and other various tools
• Work from both an implementation perspective as well as working with data to create meaningful glass tables and views.
• Collaborate with the True Zero community and access full knowledge base
• Participate in knowledge sharing and workshops
• Use tools to train, demo, test and grow professional skills.

Splunk ITSI Engineer

• Architectural Design: Design, test, and implement secure, state-of-the-art security software and hardware (e.g., firewalls, Intrusion Prevention Systems, PKI, VPN, IAM).
• Strategic Planning: Develop security standards, policies, and procedures; conduct risk assessments to identify vulnerabilities.
• Cloud & Network Security: Define and lead end-to-end security architecture for cloud infrastructures (AWS, Azure, etc..)
• Incident Response & Compliance: Create incident response plans and ensure compliance with regulatory standards (e.g., NIST, ISO 27001).
• Leadership: Mentor security professionals and collaborate with IT/engineering teams to foster a security-conscious culture
• Technical Knowledge: Deep understanding of network protocols, cryptographic technologies, and security monitoring tools.
• Soft Skills: Strong leadership, communication, and ability to influence cross-functional teams

Senior Security Architect

Threat Intelligence Specialist

• Lead cyber threat intelligence analysis and overall production to support operational and executive decision-making.
• Translate threat data into actionable assessments and briefs that guide prioritization and responses.
• Use structured analytic frameworks to connect adversary behavior to risk across enterprise assets & operate in classified contexts to support rapid, deadline-driven tasking.
• Gather, analyze, and interpret threat intelligence from various sources to identify emerging cyber threats and trends.
• Produce cyber threat intelligence outputs (assessments, briefs, reporting).
• Apply cyber intel lifecycle processes to collection, analysis, and dissemination.
• Use ATT&CK/D3FEND/Diamond Model methods to structure analysis.
• Generate queries/reports and leverage intel tooling (graphing/link analysis).
• Support technical analysis of enterprise assets using threat intelligence.
• Brief senior stakeholders and support high-tempo mission requirements.
• Collaborate with internal teams to integrate threat intelligence feeds into security tools and systems, including SIEM solutions like Splunk and Elastic.

Cyber Intelligence Analyst III

• Assist in deploying and configuring virtual machines, storage (S3/Blob), and networking components (VPCs, subnets).
• Track system performance metrics using tools like AWS CloudWatch or Azure Monitor, ensuring high availability.
• Identify, document, and resolve minor technical issues or infrastructure errors.
• Write and maintain basic scripts using Python, PowerShell, or Bash to automate routine tasks.
• Apply security best practices, such as managing user access, firewalls, and security groups.
• Work with developers and DevOps teams to support application deployment and CI/CD pipelines.
• Update technical documentation, diagrams, and operational procedures.

Junior Cloud Security Engineer

• Conducts proactive, hypothesis-driven threat hunting across the platform to identify adversary behaviors that evade detections.
• Builds repeatable hunt methods and translates discoveries into detection improvements and operational actions.
• Synthesizes signals from multiple tools and data sources to produce high-confidence findings.
• Helps mature hunting into an institutional capability, not a one-off activity.

Senior Threat Hunter

Administration

• Experience within Unanet GovCon
• Experienced in user provisioning, project builds, budgets, schedules, report building, and report automation
• Full administration of the Unanet platform is required
• This person will manage, configures, and optimizes the Unanet ERP platform, overseeing timekeeping, expense reporting, project structures, and user access to ensure data integrity and DCAA compliance
• Ensuring timekeeping and expense procedures meet DCAA, GAO, or other regulatory standards.
• Conducting regular audits of timesheets, expense reports, and project structures to ensure accuracy and completeness
• Creating and maintaining custom reports and dashboards for project profitability, labor utilization, and indirect rates
• Maintain data flow between Unanet and external systems &/or other payroll and accounting software

Unanet Administrator

• Experience is the following is a must: Ansible, Tanium, Crowdstrike, and Trellix
• Experience automating technology and workflows in the healthcare setting is also highly preferred
• Create and optimize Ansible playbooks, roles, and modules for configuration management and application deployment
• Implement automation across hybrid environments (on-premise, cloud, network devices, and servers)
• Identify and resolve issues related to Ansible jobs, automation failures, and configuration drift
• Work with security, network, and system teams to automate security compliance and infrastructure provisioning

Ansible Engineer

Architect

• Develop IAM roadmaps, processes, and architectures to align with business security requirements.
• Implement solutions involving SSO (Single Sign-On), OAuth/OIDC, and IAM protocols.
• Protect data by ensuring, for example, that access is removed for employees who have left the organization.
• Manage how IAM intersects with HR, email, and SaaS applications
• Deep knowledge of Directory Services (Active Directory), SAML, OAuth, OIDC, and Federation.
• Experience with cloud platforms (Azure, AWS, GCP) and security frameworks
• Define and enforce policies for user provisioning, de-provisioning, and access reviews

IAM Architect

• - Capture client needs and requirements
• - Design solution architectures
• - Execute deployment and ongoing management strategies for customer projects
• - Assist with presales efforts and scoping services engagements
• - Present to prospective clients

ZScaler Certified Engineer

• Provide technical expertise to plan, analyze, define, and support the secure delivery of future functional and technical capabilities for applications leveraging an evolving, security focused cloud-based architecture.
• Guide the continuous review and improvement process for existing components and their security integrations.
• Assist in facilitating technical solution and design discussions, complete proof of concepts, and develop non-functional requirements.
• Manage creation and quality of deliverables.
• Develop processes to ensure successful operations and management applications within the cloud.
• Integrate into all aspects of Security Operations to enable resilient and holistic cloud-focused mission achievement.