Edgewater Federal Solutions is currently seeking a Data Loss Prevention Engineer to provide support to Edgewater Federal government contracts.

Implement enterprise-wide Symantec Data Loss Prevention (DLP) solutions
• Migrate DLP capabilities to Office 365 from third party channel DLP solutions
• Integrate DLP solutions with cloud access security brokers (CASB).
• Implement data protection controls in Amazon Web Services (AWS) and Google Compute Platform (GCP).
• Manage a team of engineers in the deployment, integration, and configuration of Symantec DLP solution to protect sensitive data for high value assets and major infrastructure investments.
• Conduct data protections reviews for high value assets and major infrastructure investments to include system inventory, exiting security controls, vulnerability assessment scanning inventory, database security, and application security testing inventory.
• Collaborate with forensics staff on IT security events resulting in law enforcement indictments.
• Develop and deliver essential data profiles for public facing systems across the enterprise resulting in an improved enterprise risk posture and more efficient incident response capabilities.
• Participate in the Privacy Incident Response Team (PIRT) and Federal Privacy Council.
• Enhance and tune standards-based rulesets (HIPAA, PCI-DSS, SSN, CNSSI) and apply them to DLP Tools and SOAR playbooks.
• Support the design and implementation of automated response to DLP incidents
• Assist in the development of security controls framework and assessment of current directives, standards, and patterns.
• Investigate, design, and architect DLP controls as they are identified, developing backlog and gap for analysis.
• Evaluate emerging technologies & risks that will define a security architectural framework with threat modeling methodology.

• 7-10 or more years of work experience with at least one of those specialized in cyber security
• Bachelor's Degree (additional years of experience in cyber security reduce this educational requirement)
• A minimum of five (5) years technical experience effectively providing network and/or systems administration, information assurance security, testing, and evaluation.
• Strong knowledge and understanding of Data Loss Prevention and/or Cybersecurity.
• Strong understanding of government privacy standards and related controls like NIST, CSF, PCI-DSS, CMM.
• Strong understanding of Privacy Overlays, protecting PII/PHI/PCI and other sensitive data
• Experience conducting and participating in meetings with remote team members through collaboration technology
• Experience building cybersecurity programs for government agencies.
• Have some experience with the following agile and collaboration technologies: Jira, Confluence, and SharePoint
• Strong Client Interaction and Problem-solving skills
• Ability to obtain Security Clearance of Public Trust once hired

Desired Elements

• Certifications in information security (such as GCIA, GCIH, CEH, CISSP, SSCP, Sec+, AWS Security, etc.)
• Experience in a cyber security operational environment
• Security clearance
• Knowledge and experience using an incident response framework
• Programming or scripting experience
• Knowledge of Federal contract vehicles
• Presentation skills

Edgewater Federal Solutions is a privately held government contracting firm located near Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater is ISO 9001, 20000-1, 27001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies from 2018-2023.

It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other status protected by applicable law.

#LI-KC1