Passionate About Security and Risk?
So are we !TalaTek is seeking motivated team members with information security backgrounds. If you’re, passionate about security and risk and interested in growing your career with an entrepreneurial company we’d love to speak with you. Send your resume and cover letter. We’ll talk soon!
Team
Join a team that knows their stuff!! TalaTek professionals are fanatical about helping our clients identify risks and secure their businesses. Each member of TalaTek is an IT professional with industry-specific certifications and experience, with teamwork at the top of their list of attributes.
Collaborative Culture
The TalaTek team adheres to essential values, such as honesty, excellence, respect, and teamwork. We invite employees to speak up and share insights and suggestions to continuously enhance our client-first services. We celebrate our successes, reward based on merit, provide coaching and meaningful feedback, invest in professional growth, and endeavor to help employees achieve a work-life balance
Continuous Learning
Continuous learning is what ensures our team members excel in their careers and continue to service our clients with exceptional quality. TalaTek supports continuous learning with mentoring programs and provides dedicated investment in training and education for all our staff.
Benefits
We’ve got you covered. TalaTek offers employee benefits including: Medical, Dental, Vision, Healthcare Flexible Spending Account (HSA), Life and Accident Insurance, 401K plans, and stock incentives.
R&R
To give your best you need to be at your best, which means sometimes a little R&R is needed. In addition to options for remote and flexible work schedules, TalaTek offers paid federal holidays, personal time off (PTO) and paid sick leave for all our full-time employees.
Current Openings
Security Assessment & Risk Analyst
TalaTek delivers excellence in integrated risk management services by leveraging our specialized combination of methodologies, processes and technology. Through our cloud-managed service we enable efficient and repeatable risk, compliance and information security management, empowering our clients to make better informed risk decisions.
Integral to our managed service, the Security Assessment & Risk Analyst (SA&RA) is a mid-level position that is an integral part of the security team. The SA&RA will provide subject matter expertise for control analysis according to the clients continuous monitoring plans, following TalaTek processes and applicable standards. As a mid-level analyst, the security assessment & Risk Analyst will ensure the team achieves client goals, meets deadlines, attains risk management objectives, and reports issues, project progress and recommendations for process improvement to senior management. The SA&RA is involved in all tasks, has experience providing project planning, analyst guidance and mentoring, and supports to the various roles within the team, such as Project Manager QA and Security Analysts.
The Successful Candidate Will:
- Work independently with minimal supervision
- Apply great attention to detail when reviewing, updating, comparing documents and deliverables
- Communicate complex issues efficiently and effectively to peers, TalaTek leadership and clients
- Provide onsite (Client) support and attend meetings as needed
- Coordinate with team members and client resources to effectively complete project requirements
- Keep abreast of the latest technologies
- Have the ability to manage the execution of multiple projects simultaneously
Requirements
- Bachelor’s Degree in Computer Science, Information Systems, Engineering, or equivalent 4 – 6 years of experience in Information Security.
- CISSP, CAP, CISA or equivalent certification and continuing related professional development (or within 6-months of hire)
- An in-depth knowledge of all documents required by both the FedRAMP and FISMA SA&A processes.
- Proficient written and verbal communication skills
Senior Security Assessor & Technical Engineer
TalaTek delivers excellence in integrated risk management services by leveraging our specialized combination of methodologies, processes and technology. Through our cloud-managed service we enable efficient and repeatable risk, compliance and information security management, empowering our clients to make better informed risk decisions.
Integral to our managed service, the Senior Security Assessor & Technical Engineer (SA&TE) is a senior-level position that is an integral part of the security team. The SA&TE will provide subject matter expertise for control analysis, have a deep understanding of vulnerability management, and have experience in penetration testing according to the clients continuous monitoring plans, following TalaTek processes and applicable standards. The SA&TE will ensure the team achieves client goals, meets deadlines, attains risk management objectives, and reports issues, project progress and recommendations for process improvement to senior management. The SA&TE is involved in all technical engineering tasks in order to support internal and external tasks.
Key Responsibilities
- Perform and manage SA&A and FedRAMP 3PAO assessments and independent audits and complete the necessary documentation
- Manage and run vulnerability scans, perform remediation activities, and generate custom reports and metrics
- Perform host and web application penetration testing based on established frameworks using Burp Suite and Kali Linux
- Conduct social engineering campaigns internally or as requested by clients
- Respond to outside audit requests and findings in support of various clients
- Monitor the security of the client infrastructure to ensure it is up-to-date and secure
- Support the TalaTek Technical Security Architect updating design documents and instructional materials for non-security focused teams
The Successful Candidate Will
- Work independently with minimal supervision
- Apply great attention to detail when reviewing, updating, comparing documents and deliverables
- Communicate complex issues efficiently and effectively to peers, TalaTek leadership and clients
- Provide onsite support and attend meetings as needed
- Coordinate with team members and client resources to effectively complete project requirements
- Keep abreast of the latest technologies
- Have the ability to manage the execution of multiple projects simultaneously
Requirements
- Bachelor’s Degree in Computer Science, Information Systems, Engineering, or equivalent 4 – 6 years of experience in Information Security.
- In depth understanding of Kali Linux and Burp Suite
- OSCP, CISSP, CAP, CISA, or equivalent certification and continuing related professional development (or within 6-months of hire)
- An in-depth knowledge of all documents required by both the FedRAMP and FISMA SA&A processes.
- Proficient written and verbal communication skills