ShorePoint Inc

• Perform data discovery activities functions. • Coordinate and collaborate with Professional Services resources to execute data migration activities. • Analyze data exports. • Develop automated scripts to support data parsing and extraction. • Draft assessments and reports related to data migration activities. • Identify and categorize RMF artifacts for migration or archival. • Discover System Security Plans (SSPs), control artifacts, assessment trackers and other RMF artifacts stored in Microsoft Excel and Microsoft Word for migration. • Transform legacy data and schemas into OSCAL-compliant formats. • Leverage artificial intelligence (AI) tools to support data migration activities. • Review Microsoft SharePoint repositories to identify artifacts for migration. • Capture legacy system workflows, dashboards and reports for migration. • Reproduce and enhance workflows, dashboards and reports within the new eGRC platform. • Develop custom dashboards, reports and content. • Work with stakeholders to generate and present key metrics. • Contribute to the development of System Development Lifecycle (SDLC) artifacts. • Advise on data-related topics and support data-related inquiries.

• Lead the design and evaluation of enterprise security architectures, ensuring all systems align with Zero Trust Architecture (ZTA) principles and organizational cybersecurity guidelines. • Serve as the primary technical liaison between enterprise architects and systems security engineers to ensure security controls are correctly allocated and implemented. • Convert complex operational needs and stakeholder security interests into detailed technical requirements and functional specifications. • Provide critical input to the Risk Management Framework (RMF) process, including the development of system life-cycle support plans and operational procedures. • Manage security requirements throughout the acquisition life cycle, from drafting statements of work to evaluating vendor-proposed security designs for adequacy. • Perform regular security reviews and design modeling to identify architecture gaps, developing comprehensive risk management plans to address vulnerabilities. • Categorize systems and define clear security boundaries, documenting the protection needs for information systems and networks. • Advise senior leadership and authorized officials on design concepts, project costs and the potential adverse effects of identified vulnerabilities.

• Provide operational engineering support for cyber data systems in government cloud environments. • Build and integrate IT best practices and operational excellence into all areas of the project. • Ensure system availability by building observability into large, distributed cybersecurity data infrastructures. • Develop and maintain systems to monitor data ingestion and storage pipelines. • Produce dashboards and reports to inform stakeholders on operational metrics, system status, performance and capacity. • Operate, administer and maintain cloud-based infrastructure and platform services. • Collaborate in an Agile DevOps team using continuous integration and delivery (CI/CD) tools and practices. • Communicate effectively with team members and maintain documentation for technical procedures.

• Lead enterprise App Sec efforts for the customer • Serve as a primary stakeholder in IT operational processes • Coordinate and manage end-to-end service delivery • Develop and manage system, network, performance and cybersecurity requirements • Define and manage Service-Level Agreements (SLAs) • Lead and oversee project budgets, staffing and contractual performance • Perform needs analysis to identify opportunities for new or improved business process solutions • Develop methods to monitor and measure risk, compliance and assurance efforts

• Install, configure and deploy workflow technologies for use in a federal environment • Integrate Security Orchestration, Automation and Response (SOAR) solutions with RegScale and Axonius • Troubleshoot automation solutions, scripts and SOAR platforms • Develop custom scripts and content to support automation initiatives • Automate cybersecurity and compliance-related processes • Perform quality reviews of custom scripts and developed content • Practice good technique by utilizing configuration control and code retention tools such as GitHub • Participate in documented change control processes • Research and document cybersecurity processes, including Risk Management Framework (RMF) 2.0 and Cyber Supply Chain Risk Management (C-SCRM) • Interview cyber practitioners to capture existing cybersecurity processes • Review and recommend enhancements to cybersecurity processes • Coordinate with cyber practitioners to refine automation content and ensure mission requirements are met • Capture, refine and mature development processes and practices

• Serve as a primary stakeholder in IT operational processes supporting the service • Coordinate and manage end-to-end service delivery for customers • Develop and manage system, network, performance and cybersecurity requirements • Define and manage Service-Level Agreements (SLAs) • Lead and oversee project budgets, staffing, and contractual performance • Participate in acquisition activities • Perform needs analysis to identify opportunities for improvements • Develop methods to monitor and measure risk, compliance and assurance efforts • Review service performance reports and drive continual improvement

• Serve as a primary stakeholder in IT operational processes supporting the service • Coordinate and manage end-to-end service delivery for customers • Develop and manage system, network, performance, and cybersecurity requirements • Define and manage Service-Level Agreements (SLAs) • Lead and oversee project budgets, staffing, and contractual performance • Participate in acquisition activities as needed • Perform needs analysis to identify opportunities for process solutions • Develop methods to monitor and measure risk, compliance, and assurance efforts • Review service performance reports and drive continual improvement • Conduct audits of IT projects and evaluate procurement effectiveness • Conduct import/export reviews for acquiring systems and software

• Lead the design and evaluation of enterprise security architectures, ensuring all systems align with Zero Trust Architecture (ZTA) principles and organizational cybersecurity guidelines • Serve as the primary technical liaison between enterprise architects and systems security engineers to ensure security controls are correctly allocated and implemented • Convert complex operational needs and stakeholder security interests into detailed technical requirements and functional specifications • Provide critical input to the Risk Management Framework (RMF) process, including the development of system life-cycle support plans and operational procedures • Manage security requirements throughout the acquisition life cycle, from drafting statements of work to evaluating vendor-proposed security designs for adequacy • Perform regular security reviews and design modeling to identify architecture gaps, developing comprehensive risk management plans to address vulnerabilities • Categorize systems and define clear security boundaries, documenting the protection needs for information systems and networks • Advise senior leadership and authorized officials on design concepts, project costs and the potential adverse effects of identified vulnerabilities

• Design hardware, operating systems, software applications and secure interfaces to meet cybersecurity requirements across information systems, physical systems and embedded technologies. • Perform risk analysis (threat, vulnerability and probability of occurrence) when applications or systems undergo major changes and develop mitigation strategies for cost, schedule, performance and security risks. • Conduct security reviews to identify gaps in architecture, recommend security changes to system components and incorporate vulnerability solutions into system designs. • Design, develop, integrate and update system security measures that support confidentiality, integrity, availability, authentication and non-repudiation. • Develop detailed security design documentation for components and interfaces, including functional descriptions of security implementation and keep documentation current. • Identify components and elements, allocate security functions and describe relationships between system elements; trace requirements to design components and perform gap analysis. • Implement security designs for new or existing systems and direct remediation of technical issues discovered during testing and implementation (including interoperability and protocol issues). • Develop and direct system testing and validation procedures and documentation; analyze test data and translate results into evaluative conclusions. • Identify, assess and recommend cybersecurity or cybersecurity-enabled products for system use, ensuring compliance with organizational evaluation and validation requirements. • Provide input to implementation plans, SOPs, RMF process activities and documentation and support security/certification test and evaluation activities. • Build, test and modify prototypes using working or theoretical models; use models and simulations to predict performance under different operating conditions. • Verify stability, interoperability, portability and scalability of the system architecture and security design.

Who we are: ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community. The Perks: As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more. Who we’re looking for: We are seeking a Research and Development (R&D) Specialist with deep expertise in software and systems engineering and cybersecurity-focused R&D supporting a federal environment. In this role, you will develop new cyber capabilities by researching emerging technologies, designing and prototyping secure solutions and evaluating vulnerabilities across cyberspace systems. The R&D Specialist will lead technical research, tool development and vulnerability-driven capability enhancements while producing clear technical documentation and stakeholder-ready briefings. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. What you’ll be doing: Conduct software and systems engineering research to develop new cybersecurity capabilities and ensure security is integrated throughout the design and development lifecycle. Research current and emerging technologies to understand system/network capabilities and identify vulnerability and opportunity areas aligned to mission needs. Review and validate data mining and data warehousing programs, processes and requirements to support capability development. Must have’s: 7+ years of relevant cyber security experience. Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking. Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements. Beneficial to have: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field. Industry recognized certifications. Where it’s done: Remote (Herndon, VA).