Lead Information Security Architect

• Design, integrate, and implement information systems security infrastructure
• Analyze information systems to ensure appropriate security functions are included in system design and architecture
• Recommend and implement changes to enhance systems security and prevent unauthorized access
• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of event detail and summary information
• Evaluate firewall change requests and assess organizational risk
• Communicate alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems
• Research security trends and new methods and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach
• Provide guidance and direction on best practices for the protection of information
• Safeguard the network against unauthorized infiltration, modification, destruction, or disclosure
• Develop, test, and operate firewalls, intrusion detection systems, enterprise antivirus systems, and software deployment tools
• Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, and telecommunications
• Develop policies and procedures to prevent unauthorized access
• Provide recommendations to clients on information assurance engineering standards, implementation dependencies, and changing IA-related technologies
• Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance
• Advise management on the business impact of theft, destruction, alteration, or denial of access to information
• Perform preliminary forensic evaluations of internal systems
• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs) and related documentation

• Bachelor’s degree (BA/BS) or equivalent
• Minimum 10 years of IT Security experience
• 3-5 years of experience applying the Risk Management Framework (RMF) in support of the federal government
• Strong working knowledge of NIST Special Publications, including NIST SP 800-37 and 800-53
• Experience implementing and configuring IDS, vulnerability scanning, SIEM, and other security tools
• Knowledge of best practices for designing and implementing secure network architecture
• 2+ years of AWS experience (required)
• Clear written and oral communication skills
• Ability to troubleshoot and solve complex technical problems

Required Certifications

Current certification in one or more of the following:

• ISACA - Certified Information Systems Auditor (CISA)
• ISACA - Certified Information Security Manager (CISM)
• (ISC)² - Certified Information Systems Security Professional (CISSP)
• (ISC)² - Certified Cloud Security Professional (CCSP), * How many years have you applied the Risk Management Framework (RMF) in support of the federal government?

Education:

• Bachelor’s (Required)

Experience:

• Information security: 10 years (Required)
• AWS: 2 years (Required)

License/Certification:

• CISSP / CISM / CISA / CAP or CGRC Certificate (Required)

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Employee discount
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Referral program
• Retirement plan
• Tuition reimbursement
• Vision insurance

At DANE, we support some of the nation’s most complex programs with a team that blends technical excellence and true collaboration. We offer competitive benefits, generous PTO, and a culture where your work is recognized, impactful, and valued.