Jobs at STEM Xpert

Provide operational information security functions focused on network and vulnerability management: run and analyze vulnerability scans, monitor IDS/IPS, lead penetration testing, perform forensics, define security controls, and assist with security tool implementations.

Create, maintain, and enforce security policy documentation and controls mapping (NIST 800-53). Drive vulnerability assessment program, review and control document versions, coordinate technical teams, communicate with customers, and ensure compliance with PCI, HIPAA and personal data legislation.

Design, implement, and operate security platforms (firewalls, IDS/IPS, SIEM, MDM). Perform vulnerability assessments, monitor and analyze security logs, drive remediation, enforce security policies, and evaluate new security technologies.

Perform vulnerability scanning and analysis, monitor IDS/IPS, lead penetration testing, conduct forensic analysis and incident response, define security controls, and assist implementing security tools while coordinating remediation with IT.

Seeking senior software engineers across four tracks: IT Architecture (systems/infrastructure sizing, load balancing, clustering, scalable design), Cognitive (ML, NLP, ontologies, knowledge graphs), Security (malware analysis, STIX/TAXII/CyBOX, anonymization, applied crypto, network security), and Analytics (Spark, Hadoop, Kafka, NoSQL, Mesos, graph processing, visualization). Candidates will design, prototype, implement, test, and integrate software components while adapting to changing client/project requirements and collaborating with global teams.

Design, assess, and support secure application architectures. Perform threat analyses, validate penetration test and code-scan results, identify vulnerabilities, quantify and communicate risks, recommend mitigations, ensure compliance (HIPAA, SOX, CMS), and collaborate with development and business teams throughout SDLC. Provide security guidance across web and database tiers and promote security awareness.

Information Security Engineers design, implement, and maintain security controls, policies, and solutions. They analyze security data, diagnose issues, harden systems and applications, write scripts or code, respond to incidents, and document and communicate findings. Work involves cross-functional collaboration and project planning within information security specialties.

Designs and evaluates security architecture, performs vulnerability analyses and penetration testing, develops security requirements and test scripts, monitors compliance and incident response, implements security improvements, and communicates recommendations to engineering teams.

Support and secure mainframe production environments. Manage data center technologies, maintain/enhance security infrastructure, work with mainframe tools (Tivoli, Omegamon), TSO/MVS/JCL operations, RACF/CA-Top Secret, and collaborate with third-party mainframe vendors.

Implement, install, and configure SIEM (IBM QRadar); perform vulnerability assessments and Qualys scanning; manage assets via Remedy; design and document network/security architecture; work with Cisco and Check Point firewalls and F5 load balancers; ensure PCI compliance and scan processes; train staff on QRadar when needed.

Engineer, deploy, and manage enterprise systems and tools (including managed file transfer and Agile tooling). Implement and integrate Axway SecureTransport and MFT solutions with internal and external platforms, administer servers, support network architecture and DNS, create documentation, and collaborate with project managers, engineers, and customers to deliver projects on time and on budget.

Provide day-to-day support for a large Siteminder r6 installation, including monitoring services, configuring and maintaining policies, sites, and realms, and installing, configuring, and supporting Siteminder Agents.

Senior Systems Engineer responsible for auditing network security compliance, designing and supporting network infrastructure, and hands-on implementation/configuration. Requires deep Windows and IIS administration, Active Directory expertise, and experience with VPNs, firewalls, load balancers, routing, and Ethernet technologies.

Client-facing security officer advising senior security leadership, assessing threat landscape, and proposing mitigations. Strengthen information security posture across infrastructure devices (IDS/IPS, firewalls, VPN), vulnerability scanning, host-based controls, and ISO 27001. Communicate security concepts to technical and non-technical teams, work with virtual teams, present to clients, and provide on-site presence weekly with occasional travel.

Designs, implements, and supports network security for tier-one financial clients. Requires deep knowledge of routing protocols, Cisco and Juniper appliances, F5 load balancers, proxies, multicast/market-data networks, diagnostic tools, and strong problem-solving, leadership, and communication skills.

Integrate business applications with RSA VIA (Aveksa) for Identity Governance. Document integration requirements, develop access request, approval, provisioning workflows, and user access reviews. Build reports using SQL and LDAP, perform UAT, manage scope, complete production cutover per HP policies, and document integrations for support.

Lead and deliver large, complex IT and security projects in a healthcare environment. Manage multi-location delivery teams, define plans and forecasts, enforce PMO processes, report status to executives, and apply information security controls, governance, and stakeholder management to achieve project objectives.

Manage, configure, monitor, and support production and non-production J2EE middleware landscapes. Administer web and application servers, ensure 24x7 availability, apply security patches, perform DR, capacity planning, performance tuning, change management, and automate routine tasks.

Plan and deploy OpenStack clouds for dev/test/prod, contribute to CI/CD, administer Ubuntu/RHEL systems and networking, automate via Puppet/Chef/SaltStack/mCollective, use virtualization (KVM/XEN/LXC/VMware), script in Python/bash/sh, implement HA (Linux HA, pacemaker, DRBD), manage packaging (RPM/DEB), and use version control and CI tools (SVN/Git, Jenkins, Rally).

Administer and drive adoption of Team Foundation Server (TFS) including installation, configuration, patching, backup/recovery, process template and build process customization, build and release management, CI optimization, TFS reporting, source control (branching/merging), and support Microsoft Project Server, SQL Server, and SharePoint Server environments.