ZEN STRATEGICS LLC

Security Engineer

• Manage the implementation and maintenance of the Linux environments to support ongoing, proactive protection of the USCIS enterprise environment, and to facilitate an efficient response to security incidents.
• Develop standards, templates, and automated mechanisms to support threat modeling and analysis of individual USCIS information systems and information.
• Write system lifecycle documentation for security products or security-relevant system components.
• Generate Enterprise Architecture (EA) documentation as necessary.
• Schedule and attend meetings, file USCIS forms, tickets, and change requests necessary to facilitate successful deployment of security products/projects for Linux Environment.
• Review existing configuration settings to identify potential security vulnerabilities and propose settings or architectural changes to address these vulnerabilities.
• Work collaboratively with other teams to improve the use of automated configuration management capabilities to initiate network and environment changes and enforce security-relevant configuration settings.
• Perform security hardening, reviewing new and re-evaluating existing configuration settings and rules to verify USCIS’s security posture and eliminate unnecessary risk in Linux environments.
• Use Agile tools such as JIRA, Confluence, and MS Teams to provide transparency and allow information to be visible in real time and to create a unified backlog, ensuring visibility into all areas of work and identifying inter-dependencies between teams.

Senior Linux Security Engineer

Analyst

• Support the development, review, and maintenance of Privacy Impact Assessments (PIAs), System of Records Notices (SORNs), and other compliance documentation
• Assist in privacy compliance activities under the Privacy Act of 1974, E-Government Act of 2002, and OMB privacy directives
• Map and assess organizational policies and procedures against NIST 800-37, 800-53, 800-122, 800-171, and 800-53 Rev. 4/Rev. 5 controls
• Conduct initial privacy risk assessments and track remediation actions
• Support integration of privacy requirements into the Risk Management Framework (RMF) and Authorization to Operate (ATO) process
• Contribute to training, awareness, and reporting activities related to privacy risks and compliance obligations
• Assist with preparing responses to audits, data calls, and inquiries from CFTC leadership or oversight bodies
• Work with senior privacy, cybersecurity, and compliance staff to identify and mitigate privacy risks

Senior Linux Security Engineer

Junior Privacy Analyst