Security Engineering

Our cleared, experienced, and certified staff of security professionals can take responsibility for all information security aspects of your system. From early stage security requirements analysis through formal security testing, Rampant will integrate with the engineering team to ensure that your system architecture, design and implementation incorporates the necessary security solutions to protect your system and satisfy your security requirements. By leveraging our security expertise, you can allow your team to focus on its core mission, while reducing the overall cost of security for your program.

Rampant security engineers are fully DoD 8570 compliant. We hold the the following industry certifications allowing us to fulfill all roles defined in the DoD 8570:

Certified Information System Security Professional (CISSP)
Information Systems Security Architecture Professional (ISSAP)
Certified Ethical Hacker (CEH)
Tenable Certified Nessus Auditor (TCNA)

Security Architecture Certification & Accred Security Development Vulnerability Management Continuous Monitoring System Hardening Software Assurance

Security Architecture

Our security engineers embed with your team from day one, and work with your engineering team to ensure that yours system’s security architecture will support the security controls necessary to meet your requirements and are built-in correctly. Our breadth of knowledge and experience in technology, security, and systems engineering enable us to bridge the gap often found between security and engineering personnel. We take a common-sense, risk-based approach to security architecture and design, while ensuring that the system meets all security requirements.

Certification & Accreditation

Rampant Security Engineers are experts in multiple DoD and IC Risk Management Framework (RMF) implementations and work with both your engineering team and U.S. Government accreditors from any organization throughout the system’s development and delivery. As a one-stop shop, we can produce all of the required documentation, develop technical security controls, and perform all security testing to ensure your system receives and maintains Authority to Operate (ATO).

Security Development

Security control implementation requires a broad range of expertise in many different areas, and a deep level of technical knowledge in each. Rampant security engineers bring expertise in Commercial Off-The-Shelf (COTS) integration, System Administration, Software Development, Network Engineering, and Systems Engineering to design, develop, and integrate all security controls into your system. By offloading security development and integration to Rampant, you minimize the amount of time your team needs to focus on security and allow them to focus on system functionality and performance.

Vulnerability Management

Rampant vulnerability assessments and penetration testing services ensure that you have an accurate inventory of system vulnerabilities and risk at all times. We perform vulnerability research and testing to eliminate false positives, confirm true positives, and work with all stakeholders to formulate a remediation plan. Whether remediation requires simple patches or complex code changes, our team is fully capable of mitigating the vulnerabilities we discover ourselves, freeing your developers and administrators up to focus on their primary responsibilities.

Continuous Monitoring

Once your system is authorized to operate, Rampant provides the continuous monitoring support needed to ensure that it remains authorized to operate over time. We work closely with program management, system developers, system administrators, and government security personnel (e.g. ISSOs & DAOs) to develop a Continuous Monitoring Plan (CMP) that satisfies all stakeholders. Our team has the skills and experience to perform all technical and non-technical security tasks outlined in the CMP to maintain system security and compliance with government policies.

Depositphotos_74730667_malware_verysmall

System Hardening

System security hardening is required to ensure system security and maintain an Authorization to Operate (ATO) on every government system. Rampant security engineers have deep knowledge, and years of hands-on experience, with securing all major operating systems and countless Commercial Off The Shelf (COTS) software and hardware products. We will ensure that your infrastructure is secured and hardened in accordance with industry best practices, vendor guidelines and government recommendations such as Defense Information System Agency (DISA) Security Technical Implementation Guidelines (STIGs), while minimizing impacts to system functionality and performance.

Software Assurance

Recently, the NIST 800-53 was updated to require custom software to be developed using secure coding guidelines and best practices. Rampant engineers are experts in application security and we can integrate with software development teams to ensure that security is built into your software throughout the lifecycle. Through security-focused code reviews, security feature development, static code analysis, and dynamic code analysis, we can identify and mitigate vulnerabilities in custom developed software before they are introduced into operations. By introducing the right technologies and processes we are able to train development teams how to develop secure software with minimum impact to cost and schedule.