Jobs at Infojini Inc

Conduct security assessments and technical security reviews for classified and unclassified systems; apply NIST SP800-53 and DHS 4300A/B controls; develop testing procedures, RoE, SSPs, SARs; validate vulnerability scan results; perform risk analysis and collaborate with ISSOs, developers, and system owners to ensure SELC and change management adherence.

Perform computer forensics investigations across Linux, macOS, and Windows systems; work with the SOC to improve incident response processes; validate security and privacy controls and reporting meet standards.

Manage and assist IT and information security projects through initiation, planning, execution, monitoring, and closeout. Track risks, scope, schedule, costs, and quality; coordinate vendor plans and knowledge transfer; support RFP and procurement activities; report project status and ensure regulatory compliance and security testing activities are completed.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Administer and maintain functional security roles and permissions for PeopleSoft Financials and HCM. Analyze security change requests, assess impact of system changes, support testing, troubleshoot production security issues, ensure compliance with auditors, recommend process improvements, train end users, and document security architecture and controls.

Monitor, analyze, and respond to cybersecurity alerts; perform vulnerability scans; evaluate network and system security configurations; provide security design, consultation, and governance; conduct complex security analyses for compliance; act as SME and mentor for less-experienced staff; recommend and configure security controls and procedures.

Implement and maintain data and digital security controls across network, infrastructure, applications, and databases. Perform firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project tasks to uphold DDS program requirements and security standards.

Contract Security Analyst to design, implement, configure, and administer IAM platforms and directory services. Requires architecture and hands-on experience with Sun Identity/OpenSSO, Oracle IAM, OAM, and Sun/Oracle Directory Server. Work on cross-functional teams; experience with criminal justice systems, iterative development, and ITIL is preferred.

Perform computer forensics investigations on Linux, macOS, and Windows clients/servers per state incident response procedures. Collaborate with SOC to improve and disseminate incident response processes. Validate security and privacy controls and reporting meet standards; analyze SIEM logs and flow data to support incident handling and forensics.

Lead and manage multiple application development organizations and vendors, plan and control project scope, estimates, budgets, and resources. Oversee large IT projects (>$5M), apply project management best practices, mentor teams, and ensure delivery across platforms including mainframe and .NET.

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Lead application security efforts: integrate auth/encryption/authorization controls, use SAST/DAST tools to identify and remediate vulnerabilities, educate developers on secure SDLC, and implement compensating controls and firewall rules across web application lifecycles.

Lead and perform security assessments and technical security reviews for classified and unclassified systems. Validate vulnerability scans, apply NIST SP800-53 and DHS 4300A/B controls, develop testing procedures, RoE, SSPs, SARs, and risk analyses, and coordinate with ISSOs, system owners, and developers to ensure DHS SELC and change management compliance.

Perform security monitoring, vulnerability testing, risk analysis and security assessments. Implement and upgrade security controls, establish protocols and requirements, manage IPS/IDS and other security tools, investigate breaches, and coordinate with vendors to remediate issues.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Design, implement, and mature SCDHHS information security and compliance solutions (RMF/CMS MARS-E/NIST/HIPAA). Provide hands-on system support, perform audits and third-party assessments, integrate RMF tasks into SDLC, manage vendor/cloud security, and document findings using eGRC, Bizagi, and Atlassian tools while advising leadership on risk mitigation.

Provide second-level support for Genetec Security Center and associated hardware for the FACS project. Document and coordinate installation/configuration of IP cameras, SV32 devices and door aggregators; receive, log, investigate, and resolve incidents; escalate third-party issues; create architecture, network, installation and configuration documentation; capture resolutions and provide weekly status reports to management.

Perform and support agency information security program implementation and compliance with state standards: interview stakeholders, document processes, develop and track implementation plans (POA&M/CAP), assess controls and documentation, provide recommendations, and facilitate status reporting to ensure progress against NIST/FISMA requirements.

Perform vulnerability testing, risk analysis, security assessments, and monitor/analyze network traffic and security events. Implement and upgrade security solutions, establish security protocols and requirements, manage security tools, and coordinate remediation with vendors.