Cybersecurity SME
Spatial Front, Inc. (SFI), a two-time USA Today Top Workplaces awardee and Washington Top Workplaces honoree, is seeking a Cybersecurity SME to support our growing team. The ideal candidate will lead and support cybersecurity activities for the enterprise infrastructure that supports PeopleSoft HCM in a secure, on-premises federal environment. This role focuses on infrastructure cybersecurity operations, including vulnerability scanning, security monitoring, hardening, access control, audit support, incident response, and continuous remediation across Oracle-based, Solaris/UNIX, middleware, database, and data integration platforms.
The ideal candidate combines hands-on infrastructure security expertise with strong knowledge of secured networks, scripting, automation, and operational sustainment.
Work Location: Hybrid, On-site, Arlington, VA
Key Responsibilities:
- Administer, monitor, and strengthen the security posture of infrastructure supporting PeopleSoft HCM and related systems in a secure, on-premises environment.
- Perform vulnerability scanning, compliance checks, log reviews, and security monitoring across servers, databases, middleware, interfaces, and supporting tools.
- Implement and sustain security controls for Oracle-based, Solaris/UNIX, and enterprise platforms in alignment with federal and DoD security requirements.
- Develop and maintain scripts, automation tools, runbooks, and SOPs to improve security operations, monitoring, reporting, and remediation efficiency.
- Investigate alerts, indicators of compromise, suspicious activity, and configuration drift; coordinate containment, remediation, and documentation.
- Support identity and access management (IAM), privileged account controls, audit readiness, evidence collection, and compliance efforts.
- Collaborate with infrastructure, database, middleware, and application teams to implement system hardening, patching, secure configurations, and vulnerability remediation.
- Support continuous monitoring, POA&M activities, contingency planning, incident response, and sustainment in highly secure environments.