Aurora, Colorado

Job Description Summary

Specific job duties:• Sustain and enhance the security posture of 10+ diverse applications.o Monitor Applications for compliance and IA activities necessary to protect data from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction.o Develop, update and enforce policies, procedures and standards dictated by guidelines produced by government and program mandates.o Gather system and security controls documentation.o Track vulnerabilities by creating Plan of Action and Milestones (POA&M)o Manage the configuration and documentation contained in the program's instance of Enterprise Mission Assurance Support Services (eMASS).o Report on application-related Information Assurance Vulnerability Alerts (IAVA) and ensure timely completion.• Continuous monitoring of DoD STIG compliance to include IIS, WebLogic, Apache, HTTP, ColdFusion, as well as Application Security and Developmento Review new STIG releases and communicate changes to the Applications teamso Create and maintain a template checklist with detailed steps to address each requirement in a systematic approach across all applications.o Maintain and enforce standard operating procedures to comply with applicable RMF controlso Create automated STIG configuration checks that result in non-compliance notificationso Perform annual self-assessment across all applications and track open vulnerabilities.o Assist and advise the Applications teams on possible solutions to open vulnerabilities and STIG compliance. Possible proof of concepts may be required to demonstrate secured functionality.• Enforce the continuous monitoring strategy through the use of tools such as Splunk, ACAS reports, scripts to perform application user/privilege review, etc. • Advise on secure implementation strategies for Application projects such as upgrades, etc. • Code Reviews for application development and configuration management activities, established by the Change Management Plan and Change Management Working Group. Communicationo Oracle Security Application Administrator must interface with other DBAs, Application Administrators (AA), third-party system administrators, Program Management Office, Leadership, and the end-user community. o College-level communications skills, being able to communicate clearly, both orally and with written communications.Required Skills:Education/Certificationo Bachelor's degree from an accredited university in a related field (computer science, engineering, or information systems);• May substitute 15 years of experience for a bachelor's degree;o 7+ years of experience to include one of more of the applications: primarily Oracle® E-Business System (Federal) experience in a Solaris /UNIX environment, as well as Oracle Business Intelligence (OBIEE), Information, Control M, Connect Direct, Prism (IIS), and Solutions Business Manager• Working knowledge of UNIX shell scripting and/or Perl. • Experience with Public Key Infrastructure (PKI) authentication.o Splunk Enterprise - creating and monitoring dashboards, reports, alerts on database audit and log data o The Security Application candidate should have a good understanding of Department of Defense (DoD) Risk Management Framework (RMF), NIST SP 800-53A security controls, and Security Technical Implementation Guide (STIG). Working experience with eMASS is desired. To include IIS, WebLogic, Apache, HTTP, ColdFusion, as well as Application Security and Developmento Candidates MUST have or be able to obtain a Security+ certification within 6 months of hire date.o Candidates MUST be a US Citizen and be willing to obtain an ADP I or ADP II clearance.
Job Summary

*****This job is reserved for Maximus I Attain only*****
MAXIMUS Introduction
Since 1975, Maximus has operated under its founding mission of Helping Government Serve the People, enabling citizens around the globe to successfully engage with their governments at all levels and across a variety of health and human services programs. Maximus delivers innovative business process management and technology solutions that contribute to improved outcomes for citizens and higher levels of productivity, accuracy, accountability and efficiency of government-sponsored programs. With more than 30,000 employees worldwide, Maximus is a proud partner to government agencies in the United States, Australia, Canada, Saudi Arabia, Singapore and the United Kingdom. For more information, visit https://www.maximus.com.EEO Statement
EEO Statement: Active military service members, their spouses, and veteran candidates often embody the core competencies Maximus deems essential, and bring a resiliency and dependability that greatly enhances our workforce. We recognize your unique skills and experiences, and want to provide you with a career path that allows you to continue making a difference for our country. We're proud of our connections to organizations dedicated to serving veterans and their families. If you are transitioning from military to civilian life, have prior service, are a retired veteran or a member of the National Guard or Reserves, or a spouse of an active military service member, we have challenging and rewarding career opportunities available for you. A committed and diverse workforce is our most important resource. Maximus is an Affirmative Action/Equal Opportunity Employer. Maximus provides equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disabled status.

Aurora, Colorado

Maximus enables citizens around the globe to successfully engage with their governments at all levels and across a variety of programs by delivering innovative business process management and technology solutions that contribute to improved outcomes for citizens and higher levels of productivity, accuracy, accountability, and efficiency of government-sponsored programs.

Similar jobs