Role Description A Security Consultant is a client-focused role responsible for leading and supporting ProArch customers in building, operating, and continuously improving a comprehensive security program. This position blends security advisory, service delivery, and operational oversight, using ProArch standard playbooks, tooling, and reporting to reduce risk and improve security outcomes. Security Consultants leverage ProArch’s security platforms to detect and prevent cyber threats, onboard clients into managed security services, maintain solution health, and communicate risk and remediation priorities to technical and executive stakeholders. Ongoing training and professional certifications are part of the job requirements. Job Responsibilities - Client Advisory & Program Leadership - Lead security strategy development and roadmap planning aligned to business priorities. - Produce and deliver executive security reporting (risk, trends, outcomes, and next steps). - Provide security assessments, vulnerability management guidance, and awareness program support as part of managed services and professional services engagements. - Service Delivery & Operational Oversight - Own solution implementation and program onboarding, including documentation, handoffs, and acceptance criteria. - Implement and manage SIEM/XDR architecture (e.g., Microsoft Sentinel and Microsoft Defender XDR) including configuration, tuning, and workflows. - Maintain solution health and integrations (connectors, data sources, agents, and alert fidelity). - Perform account/permission management and governance for security solutions. - Provide guidance and escalation support for Security Specialists; coordinate incident and service issue escalations to resolution. - Pre-sales & Practice Contribution - Support presales meetings, proof-of-value/proof-of-concept efforts, and security program cost & scope modeling. - Deliver vendor and ProArch workshops; contribute to presentations, webinars, and approved marketing initiatives. - Research and evaluate emerging technologies; contribute to solution design and service evolution. - Standardization & Continuous Improvement - Deliver services using ProArch standard playbooks, templates, quality gates, and reporting packs. - Improve programs through automation and security engineering (where appropriate) to increase repeatability and reduce manual effort. Qualifications - Minimum of 4 years of experience in cybersecurity with additional background in security consulting or managed security services. - Hands-on capability in core security platforms. - Ability to translate technical findings into business risk. - Strong client communication skills. Requirements - Required (hands-on) - SIEM/XDR delivery and operations, particularly Microsoft Sentinel and Microsoft Defender XDR. - Kusto Query Language (KQL) for detection, investigation, and reporting (SPL is a plus). - SOAR and automation concepts and process design. - Identity and endpoint security fundamentals (e.g., Entra ID, Identity Protection, Defender for Endpoint). - Strong client-facing communication: security report analysis, remediation recommendations, and executive-ready storytelling. - Working knowledge - Microsoft security platform components (Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, Intune, Entra ID). - Managed Detection and Response (MDR) experience in a managed services model. - Vulnerability management tooling and process (e.g., Qualys) and remediation strategy development. - Scripting/automation using PowerShell, Python, and/or Azure CLI. - Preferred - Microsoft Purview (IRM, DLP, Insider Risk) and governance concepts. - CrowdStrike Endpoint/Identity/XDR experience. - Cloud security exposure beyond Microsoft (AWS/GCP) and related security services. - Experience with Azure DevOps and process-driven delivery. - Microsoft Foundry, Microsoft 365 Copilot, and Microsoft Security Copilot familiarity. Education and Certification - BS or MS in Computer Science / Engineering or significant demonstrable experience in Microsoft Cloud Security. - Must have the following Certifications. If not held at time of hire, must be attained within 6 months after hire: - Microsoft: AZ-900 - Microsoft: SC-300 - Microsoft: AZ-500 - ISC: CISSP - Preferred certifications: ISC2 CISSP; Microsoft SC-200; and/or certifications such as CEH, CCSP, CISM. Benefits - Empower employees to develop at their own pace through Career Pathways. - Culture of positivity, inclusivity, and respect. - Flexible work schedules to prioritize work-life harmony. - Opportunities for volunteer efforts and charitable initiatives. - Recognition programs for extraordinary efforts.

Role Description The Sr. Cybersecurity Engineer will be working with the NIWC team to provide technical expertise in Risk Management Framework (RMF) and Cybersecurity Engineering for multiple customers. This role includes providing leadership and support in operational, technical, and process aspects of system A&A packages, including the development and analysis of required policies and other deliverables throughout the RMF lifecycle. The IT systems vary in size based on locations in CONUS and OCONUS. The Sr. Cybersecurity Engineer will apply experience and knowledge to help the project team support the guide, design, implementation, documentation, and troubleshooting of the environment(s). Responsibilities - Serve as the primary cybersecurity advisor to NIWC customers, providing subject matter expertise on the Risk Management Framework (RMF) Authorization process as an ISSE, up to the Top Secret level. - Establish and maintain effective relationships with internal personnel and external representatives at various levels. - Analyze security findings, develop mitigations for open findings and/or update POA&M. - Draft diagrams, plans, policies, and SOPs to document findings, procedures, and longer-term strategy. - Oversee the execution of Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and Assured Compliance Assessment Solution (ACAS) scans in accordance with DoD and Navy guidance. - Direct the ongoing management of VRAM site with updated security scans and track IAVAs and other cyber alerts (CTOs). - Act as a lead subject matter expert during security incidents to investigate, contain, and remediate breaches. - Communicate complex security risks and requirements to both technical and non-technical stakeholders. - Provide strategic recommendations for securing systems and changes to increase efficiency in applying security controls. - Perform other Cybersecurity duties as tasked. Key Responsibilities - Ability to mentor and guide other cyber professionals on the team. - Ability to collaborate with site administrators and cyber team on developing a strategy to improve security posture. Qualifications - Bachelor’s degree in Cybersecurity or related STEM discipline. - Master’s degree in related field is highly desired. - Active TS clearance is required. - Ten years managing project tasks and personnel. - Ten+ years of experience in DoD accreditation/authorization process. - Experience with Microsoft servers, network, STIGs, SCAP, and ACAS. - Experience with JWICS RMF process is highly desired. - Knowledge/Understanding of Cross Domain Solutions is highly desired. - Compliant with DoD 8140/8570 IAT Level II certification. - Must be able to successfully pass a pre-employment background check and pre-hire drug test. Working Conditions - Military bases. - Travel as required. - Possible remote position available. Physical Requirements - Ability to lift 30 pounds unaided or 80-pound loads aided. Disclosures Chugach Government Solutions is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, gender, sexual orientation, gender identity or expression, age, pregnancy, disability, genetic factors, protected veteran status or other characteristics protected by law. Chugach will provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities. In compliance with the ADA Amendments Act (ADAAA), if you have a disability and would like to request an accommodation in order to apply for a position with Chugach Government Solutions or any of its subsidiaries, please email ada@chugachgov.com. Chugach Government Solutions supports pay transparency and is committed to equitable and competitive compensation practices. Compensation for this role will be determined based on factors including job responsibilities, experience, skills, internal equity, geographic location, and applicable contract requirements. Where required by law, compensation ranges will be provided to candidates during the hiring process.

Role Description EmpiRx Health is seeking a highly skilled and experienced Senior Network Security Engineer. In this critical role, the Senior Network Security Engineer designs, implements, and operates security controls that protect the enterprise network across on-prem and cloud environments. This role leads advanced threat detection/response, segmentation and firewall policy design, secure connectivity (VPN/Zero Trust), and vulnerability remediation to ensure confidentiality, integrity, and availability of systems and data. - Network Security Architecture & Engineering: - Design, deploy, and manage network security solutions: next-gen firewalls, IDS/IPS, web proxies, VPN/Zero-Trust, and secure network segmentation for data centers, branches, and cloud. - Operations & Monitoring: - Monitor and analyze network traffic and security telemetry to detect anomalies/APTs; tune controls and escalate/respond as needed. - Administer firewall policies and rule hygiene; maintain high availability and performance of security platforms. - Vulnerability & Incident Management: - Perform vulnerability scanning, assess exposure, prioritize risk, and drive remediation with permanent fixes and root-cause analysis. - Participate in incident response lifecycle (containment, eradication, recovery) with cross-functional teams. - Cloud & Zero-Trust Enablement: - Implement secure connectivity and guardrails for Azure/AWS; align cloud networking with enterprise security standards and controls. - Automation & Tooling: - Automate repetitive tasks and enrich monitoring using scripting and/or SOAR platforms; enhance SIEM detections/use-cases. - Compliance, Documentation & Best Practices: - Maintain standards, diagrams, and runbooks; ensure controls align to applicable frameworks/regulations (e.g., PCI, HIPAA, SOX) and industry best practices. - Collaboration & Stakeholder Support: - Partner with IT, application, and cloud teams to embed security in designs and changes; provide guidance and knowledge transfer. Qualifications - Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience). - 5+ years in network security engineering or closely related role. - Proven expertise with enterprise firewalls (e.g., Palo Alto, Cisco, Fortinet, Check Point), IDS/IPS, and SIEM platforms (e.g., Splunk, Radar, Sentinel). - Strong foundation in TCP/IP, routing, switching, VPNs, and secure network protocols; hands-on with vulnerability management. - Experience with Azure/AWS networking and security controls. Requirements - Advanced troubleshooting and problem-solving; strong attention to detail. - Scripting/automation for operational efficiency; familiarity with SOAR practices. - Clear communication with technical and non-technical stakeholders; ability to work independently and in cross-functional teams. Licensure/Certifications (Preferred) - CCNP Security, CISSP, CISM, PCNSE, or equivalent. Work Environment - Remote Benefits - Paid Time Off - 401(k) program - Health Insurance including Dental & Vision coverage - Student Loan Reimbursement - Health Savings Account - Employee Assistance Program Company Description EmpiRx Health is the leading clinically-driven pharmacy benefits management company. As the pioneer in value-based pharmacy care, EmpiRx Health puts its customers and members first by enabling them to take control of their pharmacy benefits, healthcare outcomes, and financial results. We place more emphasis on member care than any other PBM by focusing on health outcomes first. Our pharmacists and clinicians are at the center of everything we do—and our population health solution delivers tailored strategies for our clients. EmpiRx Health is in unprecedented growth, and we're on a mission to build a team as diverse as the world we serve, where everyone is welcome and celebrated.

Title: Director, Security Architecture and Engineering Location: Charlottesville United States Job Description: Are you excited to shape the future of cybersecurity architecture while leading high-performing engineering teams? As Director, Security Architecture and Engineering, you'll drive modernization initiatives, embed security into enterprise platforms, and influence strategic technology decisions across the business. The Director, Security Architecture and Engineering leads the design, implementation, and continuous improvement of security architecture and engineering capabilities across the organization. This role is responsible for executing security strategies through scalable, resilient, and secure technology solutions spanning cloud and on-premises environments. With a strong focus on delivery and operational effectiveness, the Director translates enterprise security objectives into actionable architecture standards, engineering roadmaps, and implementation plans. The role leads a team of architects and engineers and works closely with IT and business stakeholders to embed secure-by-design principles and strengthen the organization's security posture. What You'll Do - Lead the transformation of security architecture and engineering capabilities, elevating organisational maturity across cybersecurity and infrastructure - Drive delivery of key initiatives, including major cybersecurity and technology programs, ensuring projects reach clear, successful outcomes - Oversee cloud and infrastructure environments (Azure, AWS), application support, and security engineering practices - Translate enterprise security strategy into actionable roadmaps, standards, and implementation plans - Embed secure-by-design and DevSecOps principles across systems, platforms, and workflows - Champion automation to improve efficiency, scalability, and operational effectiveness - Lead, coach, and develop a high-performing leadership team (3-5 direct reports) across security engineering, NOC, and help desk functions - Strengthen operational performance, particularly within global support functions, driving accountability and service improvement - Build strong cross-functional partnerships to align stakeholders and create shared ownership of outcomes - Establish and track KPIs to measure success and continuously improve delivery and processes - Provide technical leadership on emerging threats, technologies, and best practices What We're Looking For - Significant leadership experience managing and scaling technical teams (typically 10+ people over multiple years) - Proven ability to deliver complex cybersecurity and infrastructure initiatives-not just design them - Strong background in cloud engineering and security (AWS, Azure) and modern infrastructure environments - Deep expertise across key security domains (e.g. IAM, network security, monitoring, encryption, cloud security, A/V, Mobility) - Experience driving automation and process improvement within engineering or security functions - A collaborative leadership style that builds alignment, influence, and trust across teams - Strong communication skills with the ability to translate technical concepts into business outcomes - Experience operating in environments undergoing transformation or change - Knowledge of frameworks such as NIST or ISO 27001are beneficial but optional - Relevant certifications (e.g. CISSP, CISM, cloud security) are beneficial but optional Why Join Us - Shape the future: Play a critical role in a multi-year cybersecurity transformation programme with real organisational impact - Leadership exposure: Report directly to the CISO and influence strategy at the highest level - Build and evolve: Lead a function with strong foundations and clear opportunities for improvement and innovation - Career progression: This role is a recognised pathway toward future CISO-level opportunities - Global impact: Work across a diverse, international organisation spanning the US, UK, and APAC - Autonomy and flexibility: Remote-first role with the ability to make meaningful, lasting change - Collaborative culture: Partner with experienced leaders and teams committed to continuous improvement At CFA Institute, we are committed to transparency and equity in our hiring process. In compliance with wage transparency laws in many of the jurisdictions in which we recruit, we provide the following information regarding compensation for this position: Expected salary range: $122,300 - $163,100 per year. All salary ranges are subject to adjustment based on experience, education, and other factors relevant to the position. Additional benefits include eligibility for an annual incentive bonus, a 12% employer contribution to a 401(k) or pension plan, and a comprehensive medical benefits package. #LI-TB1 About CFA Institute CFA Institute are the global leader in investment excellence and ethics. With nearly 200,000 charterholders across 160 markets, we drive professional growth, ethical behavior, and better markets. We care about our employees' well-being, offering industry-leading benefits like: - Comprehensive health coverage for you and your family - Generous leave and time off - Competitive retirement plans - Flexible work options - Wellness, education, and support programs If you feel this opportunity could be the next step in your career, we encourage you to click "Apply" and complete our three-minute application. Be part of a team committed to putting investors first and growing economies. Follow us @CFAInstitute on LinkedIn and X. Important Message: Your application must clearly demonstrate how you meet the requirements as CFA Institute cannot make assumptions about your education, experience, or location. We thank all those who apply. Only those selected for further consideration will be contacted. We are an Equal Opportunity Employer. CFA Institute prohibits both discrimination and harassment with regard to all identifying characteristics: any individual employee, group of employees, or prospective employee on the basis of race, color, national origin, citizenship or immigration status, religion, creed or belief, age, marital or partnership status, marital or family status, care giver status, pregnancy and maternity, sexual and other reproductive health decisions, physical abilities/qualities, disability, sexual orientation, gender, gender identity or expression, predisposing genetic characteristic, military or veteran status, status as a victim or witness of domestic violence or sex offense or stalking, unemployment status, infectious disease carrier status, migrant worker status, educational background, socio-economic status, geographic location and culture or any other basis protected by applicable law. This policy impacts all aspects of employment, including but not limited to, recruitment, hiring, compensation, training, development, promotion, demotion, layoff, recall, furlough, transfer, leave of absence, and dismissal. This is a global policy that applies to all CFA Institute employees, regardless of location. If, due to a disability or current medical condition, you need an accommodation or assistance to complete a job application, you can request one at any stage of the recruitment process. Please send an email to humanresources@cfainstitute.org noting the accommodations or assistance you are requesting. Please do not include any medical or health information in this email. We will review your request and contact you to discuss the possible options and arrangements. We will try our best to provide you with an accommodation or assistance that meets your needs and respects your preferences. Our application is not compatible with Internet Explorer (IE). We recommend using Chrome.