Valiant Solutions

DevOps Engineer

• Writing Ansible and Terraform to expand and automate a large Elastic Stack implementation
• Scripting in Python or Ruby to automate tool integration and processes
• Automating the development of security controls, including firewall rules and policy and IPS policy.
• Automating new integration with the Elastic Stack SOAR automation
• Developing custom enhancements to COTS tools to improve their functionality and enrich data.
• Automating server configuration for security, including logging, key changes, and system hardening.
• Automate and enhance CI/CD pipelines and environments.
• Automating the implementation of security controls in Amazon Web Services (AWS) via the AWS API.
• Build out auto-provisioning and auto-scaling of security infrastructure.
• Developing security enhancements to improve the security posture of our Government clients.
• Building blue team defenses to detect and block the adversary.

DevSecOps Engineer

Security Engineer

• Develop and align system security architectures with organizational cybersecurity guidelines, including defining security boundaries, documenting system categorization, and analyzing user needs and requirements.
• Develop focused guidance for specific security mechanisms such as encryption for data at rest
• Assess and evaluate security postures, reviewing candidate architectures, identifying protection needs, and determining how new systems or interfaces impact enterprise security.
• Identify and document security and privacy requirements, including types of personal information, stakeholder interests, and data that require protection, ensuring proper allocation at both system and organizational levels.
• Support acquisition and procurement efforts by providing input on security requirements for statements of work, project costs, and translating proposed capabilities into technical specifications.
• Contribute to risk management and compliance, performing architecture reviews, identifying security gaps, supporting RMF activities, and maintaining documentation throughout the acquisition lifecycle.
• Provide high-quality technical, engineering, analytical, and planning support to meet the organization's requirements.
• Perform architectural review and analysis, developing strategic enterprise solutions that address the evolving business requirements and changing cybersecurity threat landscape.
• Develop and deliver reports (e.g., reference architectures, white papers, roadmaps, architecture risk analysis) to facilitate the following, including but not limited to: Define and develop security architecture and engineering standards Develop business use cases and design patterns to articulate the organization's goals and objectives Document the current “as-is” through a holistic review of the agency enterprise Develop an envisioned target “to-be” based on the agency's needs and threat models Assess the gaps between “as-is” and “to-be”, and provide roadmaps to close gaps. Develop baselines and reference architectures consistent with standard frameworks Perform Architect Risk Analysis (ARA) through systematic and comprehensive reviews Identify, integrate, mature, and communicate key concepts that define continued direct interaction with the agency’s technical and operational leadership. Identify, frame, and support the resolution of critical issues impacting the organization. Update artifacts periodically to meet regulatory, audit, and compliance requirements.

DevSecOps Engineer

Security Architect, SME