MBL Technologies Inc.

• Oversee compliance and reviews of data protection and privacy policies, assessments, privacy risk strategies • Support client and team to navigate legal requirements and nuances for operations and documentation • Conduct reviews of technical documentation such as Privacy Impact Assessments (PIAs) and other documentation to confirm security controls and policies are accurately reflected and implemented • Apply and understanding of NIST 800-53 to support system teams to accurately document operations and privacy compliance • Oversee the development and delivery of weekly and monthly reporting including reports, presentations, discussions, and metrics • Maintain quality control for assignments including reviewing deliverables, contributing key content, managing workload to meet deadlines, and ensuring client satisfaction • Identify lessons learned and apply lessons learned to drive compliance, solutions and recommendations

• Perform DAST scanning using Burp Suite Enterprise, including configuration, execution, and analysis of scan results. • Conduct SAST assessments using Veracode, identifying code-level vulnerabilities and recommending remediation strategies. • Analyze and prioritize vulnerabilities based on risk, leveraging frameworks such as CVSS, CWE, OWASP Top 10, WASC, and SANS-25. • Collaborate with development, DevOps, and security teams to integrate security into the SDLC and CI/CD pipelines. • Provide guidance on secure coding practices and assist developers with vulnerability remediation. • Support the implementation and maintenance of IDE security plug-ins and secure development tools. • Troubleshoot application and connectivity issues within Linux-based environments. • Contribute to the design and implementation of enterprise-wide application security controls. • Ensure alignment with federal compliance standards, including NIST 800-53, FIPS, and FedRAMP. • Stay current with emerging threats, vulnerabilities, and application security best practices.

• Monitor, analyze, and interpret federal privacy laws, regulations, and policies, including the Privacy Act of 1974 and the E-Government Act of 2002. • Provide guidance on privacy-related directives issued by the Office of Management and Budget (OMB) and other governing bodies. • Develop, update, and implement privacy policies, procedures, and guidance to ensure organizational compliance. • Conduct privacy compliance assessments of current and planned programs, systems, and initiatives. • Support the development and maintenance of privacy documentation, including policies, impact assessments, and compliance reports. • Evaluate organizational practices against NIST standards and guidelines, including NIST SP 800-37 (Risk Management Framework) and NIST SP 800-53 (Security and Privacy Controls). • Collaborate with cross-functional stakeholders (legal, IT, security, and program teams) to ensure privacy considerations are integrated into operations and systems. • Identify gaps in privacy compliance and recommend corrective actions and process improvements. • Stay current on evolving federal privacy requirements and emerging best practices.

• Track and analyze cybersecurity policy updates and directives from NIST, OMB, HHS, Cybersecurity and Infrastructure Security Agency (CISA), and other sources. • Lead the review and update of agency cybersecurity policies. • Perform gap analyses between current policies and new/revised federal requirements and develops remediation recommendations. • Develop implementation plans and rollout strategies for new or updated policies. • Draft policy memos, white papers, and briefings for both technical and non-technical audiences. • Support the development of security control overlays and tailored baselines aligned with the NIST RMF. • Advise agency leadership and program offices on cybersecurity policy interpretation and compliance. • Assist with the Federal Information Security Modernization Act (FISMA) reporting and audit support related to policy compliance. • Participate in working groups, policy review boards, and governance meetings. • Develop briefings and status updates on cybersecurity policy trends and contractor.

• serve as the Section 508 coordinator • participate in working groups with stakeholders to discuss requirements and/or present 508 strategies and solutions • provide guidance on technical issues involving Section 508 as it relates to accessible documents and electronic media

• Design and implement back-end services and RESTful APIs. • Model, maintain, and optimize relational databases using SQL. • Build and maintain responsive front-end features with a focus on performance and usability. • Participate in code reviews, CI/CD workflows, automated testing, and secure development practices. • Investigate and resolve production issues while contributing to continuous improvement. • Collaborate with product owners, analysts, testers, and stakeholders to refine requirements and deliver value. • Utilize AI assisted tools (e.g., Copilot, code assistants) responsibly to support development and documentation.

• Provides cybersecurity guidance for systems development, analysis and design, network design, and security engineering. • Conducts cybersecurity risk assessments of networks and systems. • Conducts cyber threat assessment activities to include research of persistent threats. • Uses classified and unclassified information to create cybersecurity intelligence products and threat assessments for senior leaders. • Develops information security/privacy documentation. • Researches and participates in the selection and management of security support systems. • Supports the development of cybersecurity policies and standard operating procedures. • Participates in compliance and vulnerability assessments for various systems.

• Assist in the execution of privacy impact assessments (PIAs), data protection assessments, and related reviews to identify risks and recommend mitigation strategies. • Provide privacy guidance to internal stakeholders on data handling practices, policy interpretation, and compliance requirements. • Support the development, maintenance, and delivery of privacy training and awareness materials. • Contribute to the creation and refinement of privacy policies, standards, and procedures. • Support the intake, triage, and documentation of privacy incidents and potential data breaches. • Coordinate with cross-functional teams to gather facts, assess risk, and support response activities. • Assist in preparing incident summaries, regulatory notifications, and post-incident reporting. • Partner with program leads to track progress against privacy program objectives and deliverables. • Prepare recurring and ad hoc reports, dashboards, and metrics to support leadership visibility and decision-making. • Develop high-quality presentations, briefing materials, and meeting documentation for internal and client-facing engagements. • Monitor action items, follow-ups, and timelines to ensure consistent and timely delivery. • Build strong working relationships with business units, IT, security, legal, and other partners to support privacy-by-design practices. • Participate in meetings, workshops, and training sessions as a privacy representative. • Communicate complex privacy concepts in a clear, approachable, and business-friendly manner.

• Conduct independent security assessments of information systems and cloud environments, including IaaS, PaaS, and SaaS service models. • Apply comprehensive information assurance and cybersecurity knowledge to high-impact, complex technical assignments. • Plan, lead, and support major technology and security initiatives, ensuring alignment with organizational goals. • Evaluate security performance, risk posture, and assessment results; recommend corrective actions and improvements to support project success. • Serve as a technical expert across multiple concurrent security projects and initiatives. • Develop, implement, and maintain enterprise information assurance and security standards, policies, and procedures. • Coordinate, develop, and evaluate organizational security programs, ensuring compliance with regulatory and contractual requirements. • Recommend information assurance and security solutions to meet customer and mission needs. • Identify, document, report, and support the resolution of security incidents, violations, and vulnerabilities. • Support customers and stakeholders at senior levels in the development and implementation of security doctrine, policies, and procedures. • Apply cybersecurity expertise to government and commercial systems, including common user systems and specialized systems requiring enhanced security controls. • Provide integration and implementation support for computer system security solutions throughout the system lifecycle. • Analyze general information assurance-related technical issues and provide engineering and technical support to resolve identified problems. • Ensure all information systems remain secure, compliant, and operational, supporting continuous monitoring and risk management activities.