Remote Web App Penetration Testing Jobs in Springfield, VA

Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. We would love to talk with you regarding the next step in your career. Come join our team!

Zantech is looking for a talented OT Cybersecurity Engineer to contribute to the success of our upcoming Cyber Security Vulnerability Management project for a Remote role based out of one of the 7 DLA primary locations.

Personnel must periodically support meetings at HQ DLA (Fort Belvoir, VA) or other Washington, DC metropolitan area locations. Personnel must reside within 100 miles one-way and within a 2-hour commute of a dually-approved SIPRNet-accredited workspace within one of 7 DLA primary locations:  DLA HQ in Fort Belvoir, Virginia; DLA Aviation in Richmond, Virginia; DLA Disposition Services in Battle Creek, Michigan; DLA Distribution in New Cumberland, Pennsylvania; DLA Land and Maritime in Columbus, Ohio; Huntsville, Alabama; and DLA Troop Support in Philadelphia, Pennsylvania.

The OT Cybersecurity Engineer will play a crucial role in providing:

• Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support)
• Information Assurance Engineering Support (JETS IDIQ Task Area 6 Cybersecurity Engineering Support)

The OT Cybersecurity Engineer performs a variety of routine project tasks applied to specialized cybersecurity problems. Tasks involve integration of electronic processes or methodologies to resolve total system problems, or technology problems as they relate to cybersecurity requirements. Analyzes information security requirements and applies analytical and systematic approaches to resolve problems of workflow, organization, and planning. Provides security engineering support for the planning, design, development, testing, demonstration, and integration of information systems.

Impact: This role directly supports the two objectives of the task order, improving the cybersecurity posture of all DLA activities and enforcing compliance with OMB, DoD, DLA, NIST, and other applicable cybersecurity policy across DLA IT, Cloud, and OT technologies, spanning both unclassified (NIPRNet) and classified (SIPRNet) systems.

Responsibilities include, but will not be limited to:

• Provide analysis of existing and emerging DLA Information Systems, OT, and IT Infrastructure to assess compliance with DLA, DoD, and Federal IA policy, order, task, or regulation
• Review existing and draft/proposed policy and changes against system design documentation and identify areas of non-compliance on NIPRNet and SIPRNet
• Assist with or conduct Security Test and Evaluation and IA/cybersecurity assessment reviews
• Review proposed and draft DoD policies and assess impact on DLA Cloud, OT, IT, and IA/cybersecurity architecture
• Develop and document standards and guides for IA/cybersecurity solutions, including compliance, system security design, and assessments for Cloud, OT, and IT
• Conduct and document Risk Assessments identifying risks, probability of occurrence, resulting impact, and mitigating safeguards for unclassified and classified systems, providing decision recommendations
• Handle COMSEC material in accordance with DoD/DLA policy where required, including annual COMSEC training
• Provide weekly status updates on all open assignments, tickets, and projects
• Maintain regular, dually-approved access to an authorized SIPRNet location to compile and compose risk assessment and Operational Risk Assessment (ORA) data, ensuring proper marking, storage, and transmission of classified-level data compilations
• Support Deliverables: Implementation Documentation; IA/Cybersecurity Assessment Reports; Risk Assessments, ISSE Designs and Reports; Risk Assessment/ISSE Decision Recommendations; Standard Operating Procedures; Weekly Status Updates; and related Task Order/Operational Risk Assessment working documents

Required Experience or Knowledge of the following technologies/functions:

• Ten (10) years of relevant IT experience, plus five (5) years of relevant Operational Technology (OT) experience. Per Amendment 0001, the OT experience may run concurrently with the IT experience rather than being additive.
• Skills Required:
• Analyzing existing and emerging DLA information systems, OT, and IT infrastructure for compliance with DLA, DoD, and Federal Information Assurance policy
• Reviewing existing and draft/proposed policy against system design documentation to identify areas of non-compliance, on both NIPRNet and SIPRNet
• Assisting with or conducting Security Test and Evaluation and IA/cybersecurity assessment reviews
• Assessing the impact of proposed DoD policy changes on DLA Cloud, OT, IT, and IA/cybersecurity architecture
• Developing and documenting standards and guides for IA/cybersecurity solutions across Cloud, OT, and IT
• Conducting and documenting Risk Assessments, sourcing real-time vulnerability and intelligence information through open-source and classified resources, for unclassified and classified systems
• Familiarity with modern security solutions such as blockchain or related cryptographic research is relevant given current and anticipated technology under this task
• Ability to handle COMSEC material in accordance with DoD/DLA procedures, including completion of annual COMSEC training, if required

Required Education/Certifications:

• Education Required: Not specified
• Education Preferred: Not specified
• Certifications Required:
• DoD 8570/8140 Baseline Certification: IAT Level III and IASAE Level III (IASAE III certification may be obtained within 6 months)
• WS Certified Security - Specialty (AWS CS Specialty)
• Microsoft Certified: Azure Security Engineer Associate (MC: Azure SEA), Exam AZ-500
• Microsoft Certified: Azure Solutions Architect Expert (MC: Azure SAE), Exam AZ-305
• GIAC Defensible Security Architecture (GDSA)
• GIAC Security Operations Manager (GSOM)
• CCNA Cisco Certified Network Associate (Exam 200-301)
• CCNP (current, unified track)
• Red Hat Certified Engineer (RHCE)
• Assured Compliance Assessment Solution (ACAS)
• ISC2 CCSP Certified Cloud Security Professional
• Computing Environment (CE) certification: Microsoft Certified Solutions Associate or Expert, Cisco Certified Network Administrator, Microsoft Azure Security Technologies, Amazon Certified Security, or a CE designated by the COR
• Certifications Preferred:
• Certifications or documented experience in modern security solutions (e.g., blockchain or related cryptographic research)

Required Security Clearance:

• US Citizenship and the ability to obtain and maintain an active Secret or higher clearance, per contract requirements.

Outstanding PerformanceAlways!

Our corporate motto represents our commitment to build long-term relationships with both our clients and our employees by providing the highest quality service in everything we do. We strive for excellence for our clients and for each other. We embrace the opportunity to hire individuals with new talents and fresh perspectives. Zantech offers competitive compensation, strong benefits, and a vacation package, as well as a fast-paced and exciting work environment. Come join our team!