Data Security Engineer - CISA Pilot Program with Dept of Treasury
Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DEPARTMENT OF TREASURY OR DHS FACILITY! We are seeking a Data Security Engineer to support the protection and secure management of High Value Assets (HVAs), as part of a pilot interagency program with the Department of Treasury, by designing and implementing data-centric security controls across modern development and production environments. This role will focus on integrating data flow protections into CI/CD pipelines, enabling and managing Guardium-based data activity monitoring and protection, and applying best practices in Extract, Transform, Load (ETL) security and change data capture (CDC) to ensure secure and auditable data lifecycle management. The candidate will collaborate with DevOps, engineering, and compliance teams to ensure consistent enforcement of data protection strategies across hybrid cloud and on-premise systems.
ABOUT THE JOB
Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DEPARTMENT OF TREASURY OR DHS FACILITY! Integrate data security controls into automated pipelines to enforce policies on sensitive HVA data handling. Configure and manage IBM Guardium for activity monitoring, alerting, and reporting. Collaborate with DevOps and security teams to ensure data-centric protections (e.g., encryption, masking, access control) are implemented across staging and production. Provide input on the evaluation and potential deployment of a DSPM or CSPM platform. Ensure continuous monitoring and reporting of data access across enterprise and cloud-based data sources.
RESPONSIBILITIES
- Integrate data security controls into automated pipelines to enforce policies on sensitive HVA data handling.
- Configure and manage IBM Guardium for activity monitoring, alerting, and reporting.
- Collaborate with DevOps and security teams to ensure data-centric protections (e.g., encryption, masking, access control) are implemented across staging and production.
- Provide input on the evaluation and potential deployment of a DSPM or CSPM platform.
- Ensure continuous monitoring and reporting of data access across enterprise and cloud-based data sources.
QUALIFICATIONS
- 3+ years of experience in data security, DevSecOps, or data governance.
- Experience deploying and tuning IBM Guardium (or equivalent DAM/DLP tools).
- Familiarity with CI/CD tooling and processes (GitHub, AWS CodePipeline/CodeBuild, and Azure DevOps).
- Understanding of HVA protection guidelines and federal data classification standards.
ADDITIONAL ELIGIBILITY
Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DEPARTMENT OF TREASURY OR DHS FACILITY! Secret Clearance Required. Desired Qualifications are (a) 3+ years of experience in data security, DevSecOps, or data governance. (b) Experience deploying and tuning IBM Guardium (or equivalent DAM/DLP tools). (c) Familiarity with CI/CD tooling and processes (GitHub, AWS CodePipeline/CodeBuild, and Azure DevOps). (d) Understanding of HVA protection guidelines and federal data classification standards.
TARGET MOCS
17C, 1B4, 0689, CTN, CMS
OTHER
Multiple vacancies for this announcement. YOU DO NOT HAVE TO BE NEAR ARLINGTON, VA, PARTICIPANT WILL BE ASSIGNED TO NEAREST DEPARTMENT OF TREASURY OR DHS FACILITY! TO APPLY: Tailor a resume outlining the Jobs Description and Other Eligibility Factors. Title the email "Data Sec Engineer Skillbridge Opportunity." Address the email to anthony.travieso@mail.cisa.dhs.gov. Include your separation date and availability dates (start/finish) in the body of the email.