Navitas Business Consulting, Inc.

• Support security configuration and monitoring across AWS • Perform secure configuration reviews covering IAM, network security, logging, and monitoring • Identify misconfigurations and provide remediation guidance aligned with security best practices • Monitor and triage CSPM alerts and findings • Conduct risk analysis of vulnerabilities and misconfigurations • Support remediation efforts and validate corrective actions • Maintain dashboards and security posture reporting metrics • Monitor and analyze EDR alerts and threats • Support containment, investigation, and escalation processes • Assist in incident response (IR) activities and documentation • Perform alert monitoring, prioritization, and triage across cloud, endpoint, and email systems • Tune detection rules to reduce false positives and improve efficiency • Ensure timely response aligned with SLAs and security procedures • Implement security best practices including least privilege IAM, encryption, and vulnerability management • Align cloud environments with compliance and security standards • Recommend continuous improvements to overall security posture • Develop automation scripts using Python

• Evaluate and perform proof-of-concept testing for browser extension security platforms. • Assess browser extensions, developer plugins, and AI-enabled tools for security and compliance risk. • Define extension governance, approval workflows, and allowlisting processes. • Implement monitoring, reporting, and visibility capabilities. • Support enforcement controls to prevent unauthorized extension usage and reduce data exfiltration risk. • Develop operational processes, documentation, and support models for ongoing management. • Support enterprise endpoint security initiatives across macOS, Windows & Linux. • Implement and maintain endpoint security controls and hardening standards. • Assist with vulnerability remediation and endpoint compliance activities. • Support Zero Trust and device trust initiatives. • Partner with endpoint engineering teams to balance security requirements with user experience. • Support implementation and operational management of PAM solutions such as Delinea. • Assist with privileged account governance, access reviews, and least privileged initiatives. • Participate in security assessments, audits, and compliance programs. • Produce operational documentation, runbooks, and implementation guides. • Develop automation and scripts to improve security operations and reduce manual effort. • Collaborate with Security, Corp Fleet, Infrastructure, and Identity teams for project success.

• Provide security engineering support for web and API applications. • Integrate security controls into Secure SDLC, including threat modeling and security design reviews. • Ensure adherence to organizational security standards and best practices. • Administer and manage vulnerability scanning tools (e.g., Tenable or similar). • Configure, tune, and maintain scanning policies and schedules. • Optimize tool performance to improve accuracy and reduce false positives. • Implement and maintain SAST and DAST tools within CI/CD pipelines. • Collaborate with engineering teams to ensure seamless integration and actionable outputs. • Identify and validate vulnerabilities through automated and manual testing. • Perform false-positive analysis and assess exploitability. • Review scan results and track vulnerabilities to closure. • Coordinate with development teams for timely remediation. • Validate vulnerabilities using manual testing and offensive security methods. • Document attack paths, reproduction steps, and impact clearly. • Perform manual and automated security testing for applications and APIs.

• Develop and maintain robust Power BI, Power Apps, and Power Automate solutions that meet the government’s requirements. • Conduct analysis of requirements to identify appropriate Power Platform solutions. • Conduct comprehensive interviews and workshops with government stakeholders to elicit, clarify, and document business requirements. • Analyze and document requirements, ensuring a clear understanding of the desired outcomes and functional specifications. • Identify gaps or inconsistencies in requirements and work collaboratively with stakeholders to resolve them. • Design, develop, and customize Power BI reports and dashboards to visualize data effectively. • Build Power Apps solutions that address specific government processes, incorporating intuitive user interfaces and seamless data integration. • Design and develop SharePoint pages, templates, and sites using HTML, CSS, JavaScript, or any other approved programming language. • Build SP list and library forms using Power Apps and Power Automate. • Develop and customize document libraries using content types and site columns. • Integrate SharePoint workflows with external systems and data sources to automate data retrieval and updates. • Conduct testing and debugging of workflows to ensure accuracy and reliability.

• Define and maintain the product backlog for the Data & AI platform, ensuring alignment with the university’s long-term strategic plan and near-term priorities. • Collaborate with faculty, researchers, administrators, and IT leaders to gather requirements and identify high-value data and AI use cases. • Create, refine, and prioritize the product backlog based on business value, compliance requirements, and technical feasibility. • Collaborate with data engineers, AI/ML specialists, developers, and architects to deliver platform features and enhancements. • Partner with institutional data governance groups to enforce data security, compliance, and stewardship and quality standards and processes. • Communicate platform benefits, features, and updates to stakeholders. • Monitor product performance, collect feedback, and adjust priorities based on evolving institutional needs.

• Assist with the development, editing, organization, and maintenance of technical and operational documentation supporting data governance, enterprise data warehouse (EDW) initiatives, operational procedures, and organizational knowledge management efforts. • Develop, edit, and maintain technical and operational documentation including Scopes of Work (SOWs), Standard Operating Procedures (SOPs), Technical guidebooks, User manuals, Training materials, Administrative reports, Knowledge base content. • Collaborate with leadership, technical teams, and Subject Matter Experts (SMEs) to gather information and develop accurate, technically sound, and user-focused documentation. • Translate complex technical concepts, data processes, tools, systems, and workflows into clear, accessible language suitable for technical and non-technical audiences. • Ensure all documentation complies with State accessibility standards, plain language requirements, formatting guidelines, and organizational policies. • Manage document repositories, version control processes, and knowledge management resources supporting operational continuity and information sharing. • Conduct research and ensure proper technical terminology and industry standards are accurately reflected within all documentation.

• Administer and maintain ServiceNow platform environments, ensuring peak performance and system integrity. • Perform regular platform upgrades, patching, and health assessments; generate and present reports to stakeholders. • Configure and support ServiceNow applications, including Service Catalog, Employee Center, Knowledge Base, Now Mobile, SPM, and Change Management. • Manage user roles, access, and permissions. • Handle platform cases, changes, requests, and escalations. • Develop and maintain update sets, scripts (Business Rules, Script Includes, Client Scripts, UI Policies), and Service Catalog items. • Create and manage workflows, dashboards, reports, SLAs, and integrations with third-party systems. • Support cloning processes, skipped record remediation, rollback planning, and upgrade validation testing. • Develop and maintain Service Portal components and mobile interfaces. • Collaborate with stakeholders to optimize business processes and user experiences. • Lead technical planning, estimation, and documentation efforts on ServiceNow projects. • Provide post-deployment support and continuous improvement. • Conduct knowledge transfers and create SOPs, KB articles, and other technical documentation. • Ensure compliance with security policies and regulatory requirements.

• The Application Developer is responsible for building, securing, and maintaining enterprise applications within a DevSecOps environment • Design, develop, and maintain applications within a DevSecOps pipeline, ensuring security and automation are embedded throughout the lifecycle • Build backend services and APIs using Java with Spring Boot, applying best practices for performance, modularity, and maintainability • Deploy and manage applications on WildFly and JBoss application servers • Work with AWS compute and storage services (EC2, S3) to build scalable, resilient cloud‑based solutions • Develop data processing scripts and automation using Python, leveraging frameworks such as Pandas and NumPy • Use Git for version control and JIRA for work tracking and agile collaboration • Write complex SQL queries and manage relational databases such as PostgreSQL and MySQL • Apply foundational networking knowledge (TCP/IP, subnets, firewalls, protocols) to support application connectivity and troubleshooting • Review and remediate findings from Burp Suite and OWASP security assessments, ensuring applications meet security standards • Communicate clearly with technical and non‑technical stakeholders, providing documentation, updates, and recommendations • Collaborate across teams, contributing to a culture of shared ownership and continuous improvement

• Design and build modern, accessible, and secure user interfaces within a DevSecOps environment. • Develop responsive, high-quality React-based UI applications using React.js, HTML5, and Bootstrap. • Implement Section 508–compliant front-end code to ensure accessibility for all users. • Collaborate within a DevSecOps environment, integrating UI components into secure, automated pipelines. • Use Git for version control and JIRA for agile task management and team coordination. • Maintain a detail-oriented approach to UI development, code quality, and user experience.