Vaultes

Security Operations

• Monitor SIEM, EDR, IDS/IPS, email security, vulnerability, and other security platforms for suspicious activity
• Perform initial triage of alerts and identify potential false positives versus events requiring further investigation
• Collect and review basic log data, endpoint telemetry, and network activity to support analysis
• Escalate suspected security incidents to Tier II/III analysts in accordance with defined procedures
• Document alerts, actions taken, and relevant details in ticketing/case management systems
• Follow established playbooks and standard operating procedures for alert handling
• Support incident response activities by gathering information and coordinating with senior analysts as needed
• Assist with vulnerability findings review and route issues to appropriate teams
• Participate in shift turnover reporting and maintain accurate operational notes
• Contribute to maintaining accurate documentation and knowledge base articles
• Other responsibilities as assigned

SOC Analyst Tier 1

• Monitor SIEM, EDR, IDS/IPS, email security, vulnerability, and other security platforms for suspicious activity.
• Triage alerts and distinguish false positives from actionable security events.
• Investigate security events using log data, endpoint telemetry, network data, and threat intelligence.
• Escalate incidents in accordance with severity, impact, and response procedures.
• Document investigations, findings, and actions taken in ticketing/case management systems.
• Support incident handling activities including containment, evidence collection, and coordination with technical teams.
• Review vulnerability findings and assist with prioritization and routing to responsible teams.
• Participate in shift turnover reporting and maintain accurate operational notes.
• Support development and refinement of detection rules, playbooks, and standard operating procedures.
• Contribute to metrics reporting such as alert volumes, escalation rates, false positives, and response timelines.

SOC Analyst Tier 2

Security Engineer

• Conduct security control assessments for commercial and government customers to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing within a system boundary.
• Develop, document and review System Rules of Engagement (ROE), Security Assessment Plans (SAPs) and Security Assessment Reports (SARs).
• Conduct kick-off meetings, develop associated schedules and resource plans to complete the assessments.
• Responsible for quality control on the assessment and associated deliverables.
• Develop practical and risk-based approaches for security control implementation and vulnerability remediation.
• Review and provide feedback system boundaries, common controls, the security categorization of information systems, applicable security control baseline based on system categorization.
• Review cyber/system/network security body of evidence and documentation for accuracy and completeness.
• Lead Post Assessment Meetings with the customer.
• Provide Plan of Action and Milestones (POA&M) support to ensure mitigations are completed or the teams are working to mitigate all vulnerabilities in a timely fashion and within customer policy timelines.
• Perform continuous monitoring to ensure implemented security controls remain functional throughout the lifecycle of the information system.
• Perform other duties as assigned.

Cybersecurity Assessor – CMMC

Frontend Engineer

• Design, develop, and maintain front-end code for FEMA.gov, Ready.gov, and related public-facing properties using HTML, CSS, JavaScript, jQuery, and modern web frameworks;
• Lead front-end architecture decisions aligned with the 21st Century IDEA Act and federal web standards.
• Implement and maintain the U.S. Web Design System (USWDS) in alignment with DHS and FEMA brand guidance, including web functionality such as RSS feeds, widgets, forms, email integrations, and third-party API connections.
• Develop, maintain, and extend Drupal-based CMS templates, content types, views, and modules;
• Perform Drupal administration including user management, workflow configuration, security patching, and support for multilingual content management.
• Implement and validate Section 508 and WCAG 2.0 Level A/AA compliance across all deliverables;
• Support comprehensive test plans including regression testing and 508 validation at every deployment.
• Instrument and maintain analytics across FEMA web properties using tools such as Google Analytics and Site improve;
• Provide recommendations to improve user experience based on traffic, bounce rates, and funnel performance.
• Manage QA for every release including test scripts, alpha/beta testing, and post-implementation review;
• Coordinate after-hours deployments and produce technical documentation for SELC/ATO requirements.
• Provide surge support during disaster operations including evenings and weekends as needed.

SOC Analyst Tier 1

SOC Analyst Tier 2

Cybersecurity Assessor – CMMC

Web Developer