CYBERSECURITY

What Sets OBXtek Apart

OBXtek provides strategic cybersecurity support to safeguard critical infrastructure and protect vulnerable platforms to meet advanced mission needs. We develop and evaluate security programs, establish complex system-wide information security standards, integrate assessment and authorization processes and documentation into organizational business processes, manage risk through risk and vulnerability assessments, as well as scan and remediate malware intrusions. Our SMEs have in-depth experiential knowledge of RMF A&A encompassing the risk management/mitigation functions associated with FISMA and the NIST 800 series publications.

Our People

OBXtek’s cybersecurity personnel are recognized experts in the field with multiple advanced certifications including the Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Security+, Certified Authorization Professional (CAP), and Certified Information Security Manager (CISM).

Our Reputation

OBXtek delivers one of the most comprehensive ranges of security services, including risk and vulnerability assessment, scanning, malware remediation, and risk management. We’ve increased Plan of Actions & Milestones validations by 163% for clients by identifying efficiencies through consistent, in-depth engagement.

Our Expertise

System Assessment and Authorization (A&A)

OBXtek brings a deep understanding of system risk and risk mitigation strategy, providing A&A services (formerly Certification and Authorization) to multiple federal organizations for over a combined seven years. Intimately familiar with the Risk Management Framework and NIST 800 publications, OBXtek brings decades of experience and knowledge in ensuring proper processing of systems from initiation to Authority to Operate to continuous monitoring. OBXtek personnel have and maintain the ISC2 Certified Authorization Professional (CAP) certification, considered the gold standard in ensuring the proper knowledge, skills and abilities required for professionals involved in the process of authorizing and maintaining information systems.

Cybersecurity Infrastructure Technical Support

OBXtek provides technical support for the security infrastructure model for integrating security services, mechanisms, objects and management functions across multiple hardware and software platforms and networks. OBXtek researches, proposes, designs, and recommends secure solutions related to IT security projects. We provide technical support for implementing electronic processes to ensure the proper programming and testing, documentation, and improved Web-based functionality. OBXtek assesses the electronic processes including user requirements, alternatives, choice of platforms, possible problems and implementation plans.

Information Assurance/Cybersecurity Role-based Training

OBXtek provides instructor-led information assurance/cybersecurity training across the globe with classrooms (some in geographical hot-spots) and online. Our cleared, experienced instructors are current on information assurance and cybersecurity issues spanning from the newest threat or vulnerability to governmental policies and procedures to risk management guidelines. Additionally, OBXtek conducts course development and provides expertise on policy and procedural analysis.

Vulnerability Scanning, Intrusion and Malware Detection

OBXtek designs, develops and oversees implementation of security architecture including authentication services, prevention systems, vulnerability assessments and system and application environments. We deliver technical support for enterprise-wide antivirus and malware detection, prevention, and remediation tasks. OBXtek monitors intrusion detection sensors and infrastructure, separating non-threatening network traffic from authentic intrusion attempts. We perform scans and prepare reports that explain identified vulnerabilities and their potential for exploitation. We research new vulnerabilities and threats and deliver threat mitigation recommendations.

Penetration Testing and Code Review

Our penetration testing experience includes static and dynamic application security testing. Our testers are familiar with the latest tools, their operation, and maintenance. OBXtek also provides administration and operation of a threat stimulation environment (TSE) to the government.