GET HIGHLY SAFEGUARDED SYSTEMS + OPTIMIZED BUSINESS WORKFLOWS
Purple Jay is a veteran-owned IT and InfoSec company built to guide your organization into the right balance of business productivity and implemented security measures to help maximize your outcomes and achieve your mission. Effective cybersecurity solutions must go beyond simply protecting data and systems – they must align with your mission to enable and empower your organization forward.
SERVICES + SOLUTIONS
OPERATIONS, GRC, & STRATEGY
INFORMATION SECURITY
Effectively Detect + Respond to Threats
Assess + Manage Organizational Risk
Improve Governance + Compliance
Continuously Monitor Security Posture
OPTIMIZED WORKFLOWS, BI DASHBOARDS
APP DEVELOPMENT
Streamline Unique Business Workflows
Enhance Business + Security Insights
Maximize Current Solutions + Workforce
Reduce Manual Workloads + Human Error
MODULAR WORKLOADS AS CODE
PLATFORM ENGINEERING
Reliable, Scalable Computing Environments
Efficient Container Orchestration Systems
Continuous Integration/Continuous Delivery
Integrated Monitoring + Alerting Systems
MANAGED ENDPOINTS, SCALABLE NETWORKS
ENTERPRISE IT
Scalable Modernized Technology
Enhanced User & Endpoint Safeguards
Satisfy Governance + Compliance Reqs
Business + System Continuity
THE PURPLE+ FORMULA
EXCEED MIN. REQUIREMENTS
Services executed by qualified personnel that exceed client requirements & expectations.
+
REDUCE CLIENT RISKS
Proprietary Pre-Flight solutions with demonstrated success reduce organizational risk.
=
INCREASE ROI
Purple+ fuses services with tailorable solutions to optimize delivery & increase value.
SERVICES DELIVERED DIFFERENT with PURPLE+
The PURPLE+ approach prioritizes your mission and workflow productivity and addresses the full spectrum of information security needs.
As a client, you get industry-leading expertise, access to tailored and reliable solutions, and a directive to fuel organizational efficiency so that you thrive in today's ever-evolving threat landscape.
ACHIEVEMENTS AND OUTCOMES
Purple Jay is privileged to enable the business and mission of a variety of Government and Commercial clients through sole source and teaming agreements with outstanding partners. The utilization of our primary services and pre-flight solutions has a track record of success increasing productivity, modernizing infrastructure, and sensibly securing systems.
INFOSEC DATA FUSION EFFORTS
Our InfoSec SMEs and Data Analysts identified key cyber operations and compliance datasets across organizational divisions, building interdependent relationships to tailor a unique ETL and queryable database, enabling enhanced visibility and tracking of governance KPIs against FISMA requirements.
KEY ACHIEVEMENT: Improved visibility gap enabling OCIO with Governance BI aiding data-informed security & compliance strategy
COMPLIANCE PORTAL (DASHBOARD)
Our Developers, with support from InfoSec SMEs and CSPO, worked directly with Client Stakeholders to tailor TAWNY components for a Compliance Dashboard, providing BI to increase compliance accountability, enhance security posture visibility, and improve governance reporting accuracy.
KEY ACHIEVEMENT: Agency FISMA Score improved
ST&E ONGOING ASSESSMENT
Our SMEs execute ongoing application and system testing and evaluation (ST&E) to support authorization and continuous monitoring requirements to assess risk appropriately with each system change and application release.
KEY ACHIEVEMENT: Developed Ansible scripts to optimize STIG hardening and streamline ST&E, improving accuracy and reducing assessment time to a few days
VULNERABILITY MANAGEMENT AUTOMATION
Our Developers, with support from InfoSec SMEs, worked to tailor HERON components for a web app that ingests vulnerability scans (NESSUS, SonarQube, SCAP, etc.), automates categorization, outputs vuln change management logs, and stores remediation plans.
KEY ACHIEVEMENT: Streamlined continuous monitoring activities with security documentation (POA&M Report) and VM reporting as a CI/CD pipeline and automated build process
SECURITY AUTHORIZATION DOCUMENTATION
Our cross-matrix partnership between InfoSec SMEs and developers optimized the generation of the SSP, SAP, SAR, POA&M as well as the maintenance of the RMF package.
KEY ACHIEVEMENT: Developed Documentation CI/CD pipeline automating SSP development and management, including multi-formatted (.doc, .pdf., JSON, . XML) exports. Obtained ATC and ongoing ATO.
CLIENTS WE HAVE SERVED
US Patent and
Trademark Office
Federal Emergency Management Agency
Naval Air
Systems Command
Department of
Veteran Affairs
Army Network Enterprise Technology Command
Pension Benefit Guaranty Corporation
Amazon Web Services
How can we help?
Purple Jay, LLC is positioned to provide seasoned personnel to meet and exceed your expectations. Our personnel maintains proper and current OSCP, PMP, Security+ CE, CISSP, CISM, CCNA Security, CSPO, and CEH certifications.