BERING STRAITS PROFESSIONAL SERVICES LLC
Washington, Washington DC
About this position: Cybersecurity Incident Response Manager in Washington, DC, for Bering Straits Professional Services, LLC The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position. Wage/Salary Range: $150k Applicants will be notified via email or phone within ten business days regarding application status. Essential Duties & Responsibilities Lead, mentor, and manage cybersecurity personnel; establish priorities, assign work, assess performance, and support professional development and cross-training. Direct the team's incident response activities, including event triage, investigation, containment, eradication, recovery, documentation, and lessons learned. Coordinate with the SOC and client leadership to support timely escalation and reporting. Oversee the collection and analysis of cyber threat intelligence, ensuring that relevant indicators and adversary tactics, techniques, and procedures guide detection, threat hunting, incident response, and penetration testing activities. Guide hypothesis-driven threat hunts, digital forensic investigations, and malware analysis. Ensure evidence is collected, preserved, and documented in accordance with applicable requirements and chain-of-custody procedures. Manage authorized penetration testing, adversary emulation, and purple team exercises in coordination with federal leadership. Track findings and work with stakeholders to validate corrective actions. Lead the practical application of AI and ML to improve threat hunting and incident response, including evaluating use cases, guiding development and integration, and measuring effectiveness. Oversee the use of applicable Microsoft Azure AI services in accordance with client security and data-handling requirements. Maintain and improve incident response plans, playbooks, standard operating procedures, and detection and automation workflows. Coordinate tabletop exercises and incorporate lessons learned. Monitor workload, operational performance, risks, and deliverables; provide clear status reports, metrics, and briefings to technical stakeholders and senior leadership. Coordinate with client stakeholders and other teams on investigations, audits, information requests, and continuous improvement. Align activities with applicable federal requirements, client policies, and NIST guidance Required (Minimum Necessary) Qualifications Education Requirements: High school diploma or GED and substantial relevant cybersecurity experience; a bachelor's degree in cybersecurity, computer science, or a related field is preferred Level of Experience Requirements: 5 years of demonstrated IT experience Demonstrated experience leading cybersecurity personnel or coordinating multidisciplinary security operations and complex incident investigations. Strong knowledge of incident response, threat intelligence, threat hunting, digital forensics, and penetration testing principles, including the ability to translate technical findings into operational decisions. Experience with enterprise security technologies such as SIEM, endpoint detection and response, network monitoring, and cloud security tools. Familiarity with Microsoft Azure, Microsoft Sentinel, and Microsoft Defender is expected. In-depth knowledge of AI and ML concepts and practical experience applying these technologies to cybersecurity use cases, including threat hunting or incident response. Experience with Microsoft Azure AI services. Familiarity with the MITRE ATT&CK framework, NIST incident response guidance, and federal cybersecurity reporting and security requirements. Strong written and verbal communication, analytical, decision-making, and stakeholder management skills. S. citizenship and the ability to obtain and maintain the government security access required for the position, subject to applicable investigation and eligibility requirements. Knowledge, Skills, Abilities, and Other Characteristics Experience supporting a federal cybersecurity program and coordinating with a 24/7 SOC. Experience with Kusto Query Language, Python or PowerShell, Azure DevOps, or Power BI. Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Microsoft Security Operations Analyst Associate, or a relevant Azure AI certification Preferred N/A Necessary Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Work Environment The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Supervisory Responsibilities This position will have supervisory responsibilities. DOT Covered/Safety-Sensitive Role Requirements This position is not subject to federal requirements regarding Department of Transportation "safety-sensitive" functions. Additional Qualifying Factors As a condition of employment, you will be required to pass a pre-employment drug screening and have acceptable background check results. If applicable to the contract, you must also obtain and maintain the appropriate clearance levels required and must also be able to obtain access to military installations. Shareholder Preference BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job. Bering Straits Native Corporation is an equal opportunity employer. All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.
11/14/2026
Full time
About this position: Cybersecurity Incident Response Manager in Washington, DC, for Bering Straits Professional Services, LLC The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position. Wage/Salary Range: $150k Applicants will be notified via email or phone within ten business days regarding application status. Essential Duties & Responsibilities Lead, mentor, and manage cybersecurity personnel; establish priorities, assign work, assess performance, and support professional development and cross-training. Direct the team's incident response activities, including event triage, investigation, containment, eradication, recovery, documentation, and lessons learned. Coordinate with the SOC and client leadership to support timely escalation and reporting. Oversee the collection and analysis of cyber threat intelligence, ensuring that relevant indicators and adversary tactics, techniques, and procedures guide detection, threat hunting, incident response, and penetration testing activities. Guide hypothesis-driven threat hunts, digital forensic investigations, and malware analysis. Ensure evidence is collected, preserved, and documented in accordance with applicable requirements and chain-of-custody procedures. Manage authorized penetration testing, adversary emulation, and purple team exercises in coordination with federal leadership. Track findings and work with stakeholders to validate corrective actions. Lead the practical application of AI and ML to improve threat hunting and incident response, including evaluating use cases, guiding development and integration, and measuring effectiveness. Oversee the use of applicable Microsoft Azure AI services in accordance with client security and data-handling requirements. Maintain and improve incident response plans, playbooks, standard operating procedures, and detection and automation workflows. Coordinate tabletop exercises and incorporate lessons learned. Monitor workload, operational performance, risks, and deliverables; provide clear status reports, metrics, and briefings to technical stakeholders and senior leadership. Coordinate with client stakeholders and other teams on investigations, audits, information requests, and continuous improvement. Align activities with applicable federal requirements, client policies, and NIST guidance Required (Minimum Necessary) Qualifications Education Requirements: High school diploma or GED and substantial relevant cybersecurity experience; a bachelor's degree in cybersecurity, computer science, or a related field is preferred Level of Experience Requirements: 5 years of demonstrated IT experience Demonstrated experience leading cybersecurity personnel or coordinating multidisciplinary security operations and complex incident investigations. Strong knowledge of incident response, threat intelligence, threat hunting, digital forensics, and penetration testing principles, including the ability to translate technical findings into operational decisions. Experience with enterprise security technologies such as SIEM, endpoint detection and response, network monitoring, and cloud security tools. Familiarity with Microsoft Azure, Microsoft Sentinel, and Microsoft Defender is expected. In-depth knowledge of AI and ML concepts and practical experience applying these technologies to cybersecurity use cases, including threat hunting or incident response. Experience with Microsoft Azure AI services. Familiarity with the MITRE ATT&CK framework, NIST incident response guidance, and federal cybersecurity reporting and security requirements. Strong written and verbal communication, analytical, decision-making, and stakeholder management skills. S. citizenship and the ability to obtain and maintain the government security access required for the position, subject to applicable investigation and eligibility requirements. Knowledge, Skills, Abilities, and Other Characteristics Experience supporting a federal cybersecurity program and coordinating with a 24/7 SOC. Experience with Kusto Query Language, Python or PowerShell, Azure DevOps, or Power BI. Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Microsoft Security Operations Analyst Associate, or a relevant Azure AI certification Preferred N/A Necessary Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Work Environment The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Supervisory Responsibilities This position will have supervisory responsibilities. DOT Covered/Safety-Sensitive Role Requirements This position is not subject to federal requirements regarding Department of Transportation "safety-sensitive" functions. Additional Qualifying Factors As a condition of employment, you will be required to pass a pre-employment drug screening and have acceptable background check results. If applicable to the contract, you must also obtain and maintain the appropriate clearance levels required and must also be able to obtain access to military installations. Shareholder Preference BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job. Bering Straits Native Corporation is an equal opportunity employer. All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.
Title: Cybersecurity Analyst Location: New Orleans, LA (Hybrid) Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 12 hrs every alternate Saturday) Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 12 hrs every alternate Saturday) Onsite: Day Shift resources need to go onsite 2 days a week ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert triage, and incident escalation across cyber and physical-security environments. The role involves reviewing cybersecurity alerts and logs from network and application systems, as well as physical-security systems, to help identify and respond to potential incidents. Key Responsibilities: Monitor and triage alerts from SIEM, network, OT, application, and physical security systems, and investigate potential malware, phishing, unauthorized access, and suspicious activity. Analyze logs and alert data to determine an incident's cause, scope, severity, and impact. Correlate cyber and physical security events, document findings, and escalate incidents to the appropriate teams in accordance with established procedures. Support threat-hunting activities by reviewing alerts and logs, gathering threat intelligence, and using vulnerability findings to help prioritize investigations. Use the MITRE ATT&CK framework to analyze alerts and threat activity. Follow monitoring procedures and response playbooks, escalate incidents as required, and communicate investigation findings. Participate in attack simulations and tabletop exercises to support SOC readiness. Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews. Stay informed about emerging threats and the use of AI tools in cybersecurity. Participate in an on-call rotation approximately once every 4-6 weeks. Be willing to travel up to 25% for training and incident support. Required Skills: 5+ years of relevant cybersecurity or security operations experience, including security monitoring, alert triage, and incident response. Experience analyzing security alerts and logs, conducting investigations, and escalating complex or high-impact incidents. Hands-on experience with security monitoring platforms such as Splunk and CrowdStrike. Hands-on experience with email security tools and phishing detection. Experience with SIEM, SOAR, IDS/IPS, and digital forensics tools. Ability to analyze and validate data in support of security operations. Applied knowledge of adversary tactics and techniques, including the MITRE ATT&CK framework, to investigate and assess threats. Familiarity with physical security systems and foundational knowledge of OT/ICS, application, cloud, and network security. Knowledge of regulatory compliance like NERC CIP and/or the NIST Cybersecurity Framework, with experience supporting audits or assessments. Experience applying AI or agentic AI tools in SOC operations is a plus. Collaborative team player with strong analytical and communication skills. Self-motivated, resourceful, and customer-focused, with a strong sense of ownership. Certifications such as CompTIA, GIAC, or ISC2 are a plus.
11/14/2026
Full time
Title: Cybersecurity Analyst Location: New Orleans, LA (Hybrid) Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 12 hrs every alternate Saturday) Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 12 hrs every alternate Saturday) Onsite: Day Shift resources need to go onsite 2 days a week ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert triage, and incident escalation across cyber and physical-security environments. The role involves reviewing cybersecurity alerts and logs from network and application systems, as well as physical-security systems, to help identify and respond to potential incidents. Key Responsibilities: Monitor and triage alerts from SIEM, network, OT, application, and physical security systems, and investigate potential malware, phishing, unauthorized access, and suspicious activity. Analyze logs and alert data to determine an incident's cause, scope, severity, and impact. Correlate cyber and physical security events, document findings, and escalate incidents to the appropriate teams in accordance with established procedures. Support threat-hunting activities by reviewing alerts and logs, gathering threat intelligence, and using vulnerability findings to help prioritize investigations. Use the MITRE ATT&CK framework to analyze alerts and threat activity. Follow monitoring procedures and response playbooks, escalate incidents as required, and communicate investigation findings. Participate in attack simulations and tabletop exercises to support SOC readiness. Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews. Stay informed about emerging threats and the use of AI tools in cybersecurity. Participate in an on-call rotation approximately once every 4-6 weeks. Be willing to travel up to 25% for training and incident support. Required Skills: 5+ years of relevant cybersecurity or security operations experience, including security monitoring, alert triage, and incident response. Experience analyzing security alerts and logs, conducting investigations, and escalating complex or high-impact incidents. Hands-on experience with security monitoring platforms such as Splunk and CrowdStrike. Hands-on experience with email security tools and phishing detection. Experience with SIEM, SOAR, IDS/IPS, and digital forensics tools. Ability to analyze and validate data in support of security operations. Applied knowledge of adversary tactics and techniques, including the MITRE ATT&CK framework, to investigate and assess threats. Familiarity with physical security systems and foundational knowledge of OT/ICS, application, cloud, and network security. Knowledge of regulatory compliance like NERC CIP and/or the NIST Cybersecurity Framework, with experience supporting audits or assessments. Experience applying AI or agentic AI tools in SOC operations is a plus. Collaborative team player with strong analytical and communication skills. Self-motivated, resourceful, and customer-focused, with a strong sense of ownership. Certifications such as CompTIA, GIAC, or ISC2 are a plus.
This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Cyber Security Incident Response IR Manager will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Cloud Incident Response IR Manager will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Seasoned Cloud Security Incident Response leader with deep expertise in Azure, AWS, and GCP, driving rapid containment and remediation of complex threats across hybrid environments. Proven track record in orchestrating cross-cloud IR workflows and forensic investigations, ensuring resilient security posture and regulatory compliance. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness. Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense. Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements. Qualifications The Requirements Minimum 7 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred. Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The base salary compensation range being offered for this role is $120,000.00-$180,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus. Company Benefits WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles) Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans' eligibility requirements. Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records. This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets
11/14/2026
Full time
This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Cyber Security Incident Response IR Manager will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Cloud Incident Response IR Manager will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Seasoned Cloud Security Incident Response leader with deep expertise in Azure, AWS, and GCP, driving rapid containment and remediation of complex threats across hybrid environments. Proven track record in orchestrating cross-cloud IR workflows and forensic investigations, ensuring resilient security posture and regulatory compliance. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness. Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense. Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements. Qualifications The Requirements Minimum 7 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred. Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The base salary compensation range being offered for this role is $120,000.00-$180,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus. Company Benefits WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles) Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans' eligibility requirements. Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records. This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets
Job Description 6 month contract for a Incident Response Analyst LEAD with a leading client in Chicago, IL- MUST BE CURRENTLY LOCAL TO BE CONSIDERED! Title: Incident Response Analyst LEAD 101652 Location: 100% onsite- Arlington Heights, IL Type: Contract hours: Shifts: 8-4:30, 4:30-12, 12-8:30 Will they rotate shifts around? Yes How often will they rotate? Likely will monthly Will send out schedule a month in advance Openings: 4 Pay: $61.74/hour on w2- w2 only, exact rate no flex Length: 6 months with large possibility of extension (ending 1/8/27 as of now) Screenings: no tech, full 5 panel drug and background (employment+ education+ felony)once hired IV process: 1 - 2 rounds +optional benefits, long term contract with ability to extend or convert to full time Must Haves: Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience). Min. 3-4 years of experience as a SOC or Incident Response Analyst. In-depth knowledge of cybersecurity such as EDR and SIEM , including CrowdStrike and Splunk. Strong understanding of cybersecurity concepts, including threat detection, incident response, and malware analysis. Knowledge of security frameworks and standards (e.g., NIST, ISO 27001). Excellent analytical and problem-solving skills. Effective communication skills, both written and verbal. Must be able to communicate in English to allow collaboration with global teams. Ability to work effectively under pressure and in a fast-paced environment. Relevant certifications (e.g., CompTIA Security+, GCIA, GCIH) are a plus. Demonstrated ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines. A resourceful person that is a fast learner and asks when in doubt. Ability to manage multiple projects simultaneously. Naturally organized with determination to deliver excellence. Role and Responsibilities : Seeking a highly skilled and experienced Incident Response Analyst, the candidate will play a critical role in detecting, responding to, and mitigating security incidents. The candidate will work alongside a team of skilled professionals to monitor and protect our clients' infrastructure, providing rapid and effective incident response. The candidate's expertise in cybersecurity, along with experience in SOC and incident response, will be invaluable in maintaining the security posture of our clients. This role is in support of a 24x7 operation, and candidates will be expected to work assigned shifts outside what would be considered normal working hours. Key Responsibilities: Monitor security alerts and logs to identify and analyze potential security incidents. Investigate and triage security alerts, assess their severity, and initiate the incident response process as necessary. Conduct in-depth analysis of security incidents, including malware analysis, network traffic analysis, and endpoint forensics. Lead or assist in responding to security incidents, coordinating with clients and internal teams to contain, eradicate, and recover from security breaches. Maintain detailed incident records, including incident timelines, actions taken, and lessons learned. Utilize cybersecurity tools such as CrowdStrike and Splunk to enhance threat detection and incident response capabilities. Prepare and deliver incident reports to clients and management, including recommendations for improving security posture. Collaborate with cross-functional teams to share threat intelligence and develop proactive security measures. Stay updated on the latest cybersecurity threats, trends, and best practices to improve incident response capabilities. Provide assistance to IR teams on general triage and threat hunting exercises. Gather metrics and report ongoing status (not sure how to word this here, or if you need that ) Provide guidance and training to junior team members. Contribute to the continuous improvement of SOC procedures and documentation Experience working in a fast-paced environment with changing priorities
11/14/2026
Full time
Job Description 6 month contract for a Incident Response Analyst LEAD with a leading client in Chicago, IL- MUST BE CURRENTLY LOCAL TO BE CONSIDERED! Title: Incident Response Analyst LEAD 101652 Location: 100% onsite- Arlington Heights, IL Type: Contract hours: Shifts: 8-4:30, 4:30-12, 12-8:30 Will they rotate shifts around? Yes How often will they rotate? Likely will monthly Will send out schedule a month in advance Openings: 4 Pay: $61.74/hour on w2- w2 only, exact rate no flex Length: 6 months with large possibility of extension (ending 1/8/27 as of now) Screenings: no tech, full 5 panel drug and background (employment+ education+ felony)once hired IV process: 1 - 2 rounds +optional benefits, long term contract with ability to extend or convert to full time Must Haves: Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience). Min. 3-4 years of experience as a SOC or Incident Response Analyst. In-depth knowledge of cybersecurity such as EDR and SIEM , including CrowdStrike and Splunk. Strong understanding of cybersecurity concepts, including threat detection, incident response, and malware analysis. Knowledge of security frameworks and standards (e.g., NIST, ISO 27001). Excellent analytical and problem-solving skills. Effective communication skills, both written and verbal. Must be able to communicate in English to allow collaboration with global teams. Ability to work effectively under pressure and in a fast-paced environment. Relevant certifications (e.g., CompTIA Security+, GCIA, GCIH) are a plus. Demonstrated ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines. A resourceful person that is a fast learner and asks when in doubt. Ability to manage multiple projects simultaneously. Naturally organized with determination to deliver excellence. Role and Responsibilities : Seeking a highly skilled and experienced Incident Response Analyst, the candidate will play a critical role in detecting, responding to, and mitigating security incidents. The candidate will work alongside a team of skilled professionals to monitor and protect our clients' infrastructure, providing rapid and effective incident response. The candidate's expertise in cybersecurity, along with experience in SOC and incident response, will be invaluable in maintaining the security posture of our clients. This role is in support of a 24x7 operation, and candidates will be expected to work assigned shifts outside what would be considered normal working hours. Key Responsibilities: Monitor security alerts and logs to identify and analyze potential security incidents. Investigate and triage security alerts, assess their severity, and initiate the incident response process as necessary. Conduct in-depth analysis of security incidents, including malware analysis, network traffic analysis, and endpoint forensics. Lead or assist in responding to security incidents, coordinating with clients and internal teams to contain, eradicate, and recover from security breaches. Maintain detailed incident records, including incident timelines, actions taken, and lessons learned. Utilize cybersecurity tools such as CrowdStrike and Splunk to enhance threat detection and incident response capabilities. Prepare and deliver incident reports to clients and management, including recommendations for improving security posture. Collaborate with cross-functional teams to share threat intelligence and develop proactive security measures. Stay updated on the latest cybersecurity threats, trends, and best practices to improve incident response capabilities. Provide assistance to IR teams on general triage and threat hunting exercises. Gather metrics and report ongoing status (not sure how to word this here, or if you need that ) Provide guidance and training to junior team members. Contribute to the continuous improvement of SOC procedures and documentation Experience working in a fast-paced environment with changing priorities
Job Description Job Description COMPANY OVERVIEW Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field. We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following: Be Driven - We are fueled by the hunger to learn more and do more. Be Curious - We engage in continuous improvement - never accepting the status quo. Be Humble - We seek honest feedback to strengthen our relationships. Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity. Strive for excellence and consider joining our growing team today! JOB OVERVIEW The Junior Software Engineer provides hands-on development and engineering support to the Splunk Engineering and Maintenance team supporting government agencies. Working under the direction of senior Data, Platform, and Detection Engineers, this role contributes across the full breadth of the SIEM environment: onboarding and normalizing data sources, maintaining platform infrastructure and configurations, developing searches, dashboards, and content, and automating recurring engineering tasks through scripting and code. This is an entry-level, growth-oriented position for an engineer with a software development or cybersecurity foundation who is expected to build depth in Splunk and security operations over time. The Junior Software Engineer collaborates with senior engineers, security analysts, and agency stakeholders, and follows established code review, testing, and change management practices. Essential Functions: Software Development and Automation. Write, test, and maintain scripts and small applications (Python, Bash, PowerShell) that automate recurring Splunk engineering, maintenance, and reporting tasks. Use version control, peer code review, and established branching and deployment practices for all code and configuration changes. Data Engineering Support. Assist with onboarding new log sources, including configuration of inputs, forwarders, parsing rules (props and transforms), source types, and index assignment. Support data quality efforts by validating field extractions, timestamps, event breaking, and Common Information Model (CIM) normalization under senior engineer guidance. Platform Engineering and Maintenance. Support routine maintenance of the Splunk environment, including indexers, search heads, forwarders, deployment servers, and app and patch deployments. Monitor platform health, license usage, ingest volume, and search performance; identify anomalies and assist senior engineers with troubleshooting and remediation. Content Development. Develop and maintain SPL searches, reports, dashboards, and alerts that support security, operational, and mission use cases. Assist Detection Engineers with building, testing, documenting, and deploying detection content through established review and release workflows. Testing, Documentation, and Quality. Test changes in development and test environments prior to production deployment and validate results against expected outcomes. Maintain technical documentation, configuration standards, runbooks, and knowledge articles for the work performed. Operational and Customer Support. Respond to assigned tickets and user requests for Splunk access, search assistance, data questions, and minor configuration changes. Provide data and platform context in support of incident response, audits, and after-action activities as directed. Collaboration and Professional Development. Participate in stand-ups, sprint planning, code reviews, and change management processes with the Splunk Engineering and Maintenance team. Work with senior engineers to translate requirements into technical tasks, and progress toward Splunk certification and technical specialization. QUALIFICATIONS: US Citizen with an active Top Secret Security Clearance. Bachelor's degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical field; equivalent technical training, certifications, or demonstrable experience will be considered. 0-2 years of professional software development, IT engineering, or cybersecurity experience; internship, co-op, apprenticeship, or substantial project work is applicable. Working proficiency in at least one programming or scripting language such as Python, Bash, PowerShell, Java, Go, or JavaScript. Comfort operating in a Linux command-line environment and a foundational understanding of system administration concepts. Familiarity with version control (Git) and standard development workflows including branching, pull requests, and code review. Ability to work with structured and semi-structured data formats such as JSON, XML, CSV, YAML, and syslog, including basic use of regular expressions. Foundational understanding of networking and logging concepts (TCP/IP, DNS, HTTP, authentication events) and how security-relevant events are generated across endpoint, network, and cloud. Foundational cybersecurity knowledge, including core security principles, common attack patterns, and the role of a SIEM in security operations. Willingness and demonstrated ability to learn Splunk and the Splunk Search Processing Language (SPL) quickly. Clear written and verbal communication skills, including the ability to document technical work for other engineers and non-technical stakeholders. Strong problem-solving skills, attention to detail, and the ability to take direction and follow established engineering processes. Ability to obtain and maintain the clearance and suitability requirements for the contract. PREFERRED: Hands-on exposure to Splunk (SPL, dashboards, universal forwarders, apps) or another SIEM such as Elastic, Microsoft Sentinel, QRadar, or Google SecOps. Splunk Core Certified User or Splunk Core Certified Power User, or willingness to obtain within the first year. CompTIA Security+, Network+, or a comparable industry certification. Experience with REST APIs, data parsing and normalization, and data pipeline concepts. Familiarity with cloud platforms (AWS, Azure, or GCP) and their native logging services. Exposure to configuration management or infrastructure-as-code tooling such as Ansible, Terraform, or Puppet. Exposure to CI/CD pipelines, automated testing, and containerization (Docker, Kubernetes). Familiarity with MITRE ATT&CK, detection engineering concepts, and SOC workflows. Experience supporting a federal customer or working in an accredited environment. Interest in growing into a Data, Platform, or Detection Engineering specialization. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS Inside office environment. Working on a computer for long periods of time. May involve long period of sitting at a desk. The work environment is fast-paced and sometimes involves extreme deadline pressures. OTHER DUTIES This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations. If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling . Thank you for your interest in MartinFed. Please Note: All positions at MartinFed are contingent upon passing a background check prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer. Job Posted by ApplicantPro
11/12/2026
Full time
Job Description Job Description COMPANY OVERVIEW Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field. We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following: Be Driven - We are fueled by the hunger to learn more and do more. Be Curious - We engage in continuous improvement - never accepting the status quo. Be Humble - We seek honest feedback to strengthen our relationships. Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity. Strive for excellence and consider joining our growing team today! JOB OVERVIEW The Junior Software Engineer provides hands-on development and engineering support to the Splunk Engineering and Maintenance team supporting government agencies. Working under the direction of senior Data, Platform, and Detection Engineers, this role contributes across the full breadth of the SIEM environment: onboarding and normalizing data sources, maintaining platform infrastructure and configurations, developing searches, dashboards, and content, and automating recurring engineering tasks through scripting and code. This is an entry-level, growth-oriented position for an engineer with a software development or cybersecurity foundation who is expected to build depth in Splunk and security operations over time. The Junior Software Engineer collaborates with senior engineers, security analysts, and agency stakeholders, and follows established code review, testing, and change management practices. Essential Functions: Software Development and Automation. Write, test, and maintain scripts and small applications (Python, Bash, PowerShell) that automate recurring Splunk engineering, maintenance, and reporting tasks. Use version control, peer code review, and established branching and deployment practices for all code and configuration changes. Data Engineering Support. Assist with onboarding new log sources, including configuration of inputs, forwarders, parsing rules (props and transforms), source types, and index assignment. Support data quality efforts by validating field extractions, timestamps, event breaking, and Common Information Model (CIM) normalization under senior engineer guidance. Platform Engineering and Maintenance. Support routine maintenance of the Splunk environment, including indexers, search heads, forwarders, deployment servers, and app and patch deployments. Monitor platform health, license usage, ingest volume, and search performance; identify anomalies and assist senior engineers with troubleshooting and remediation. Content Development. Develop and maintain SPL searches, reports, dashboards, and alerts that support security, operational, and mission use cases. Assist Detection Engineers with building, testing, documenting, and deploying detection content through established review and release workflows. Testing, Documentation, and Quality. Test changes in development and test environments prior to production deployment and validate results against expected outcomes. Maintain technical documentation, configuration standards, runbooks, and knowledge articles for the work performed. Operational and Customer Support. Respond to assigned tickets and user requests for Splunk access, search assistance, data questions, and minor configuration changes. Provide data and platform context in support of incident response, audits, and after-action activities as directed. Collaboration and Professional Development. Participate in stand-ups, sprint planning, code reviews, and change management processes with the Splunk Engineering and Maintenance team. Work with senior engineers to translate requirements into technical tasks, and progress toward Splunk certification and technical specialization. QUALIFICATIONS: US Citizen with an active Top Secret Security Clearance. Bachelor's degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical field; equivalent technical training, certifications, or demonstrable experience will be considered. 0-2 years of professional software development, IT engineering, or cybersecurity experience; internship, co-op, apprenticeship, or substantial project work is applicable. Working proficiency in at least one programming or scripting language such as Python, Bash, PowerShell, Java, Go, or JavaScript. Comfort operating in a Linux command-line environment and a foundational understanding of system administration concepts. Familiarity with version control (Git) and standard development workflows including branching, pull requests, and code review. Ability to work with structured and semi-structured data formats such as JSON, XML, CSV, YAML, and syslog, including basic use of regular expressions. Foundational understanding of networking and logging concepts (TCP/IP, DNS, HTTP, authentication events) and how security-relevant events are generated across endpoint, network, and cloud. Foundational cybersecurity knowledge, including core security principles, common attack patterns, and the role of a SIEM in security operations. Willingness and demonstrated ability to learn Splunk and the Splunk Search Processing Language (SPL) quickly. Clear written and verbal communication skills, including the ability to document technical work for other engineers and non-technical stakeholders. Strong problem-solving skills, attention to detail, and the ability to take direction and follow established engineering processes. Ability to obtain and maintain the clearance and suitability requirements for the contract. PREFERRED: Hands-on exposure to Splunk (SPL, dashboards, universal forwarders, apps) or another SIEM such as Elastic, Microsoft Sentinel, QRadar, or Google SecOps. Splunk Core Certified User or Splunk Core Certified Power User, or willingness to obtain within the first year. CompTIA Security+, Network+, or a comparable industry certification. Experience with REST APIs, data parsing and normalization, and data pipeline concepts. Familiarity with cloud platforms (AWS, Azure, or GCP) and their native logging services. Exposure to configuration management or infrastructure-as-code tooling such as Ansible, Terraform, or Puppet. Exposure to CI/CD pipelines, automated testing, and containerization (Docker, Kubernetes). Familiarity with MITRE ATT&CK, detection engineering concepts, and SOC workflows. Experience supporting a federal customer or working in an accredited environment. Interest in growing into a Data, Platform, or Detection Engineering specialization. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS Inside office environment. Working on a computer for long periods of time. May involve long period of sitting at a desk. The work environment is fast-paced and sometimes involves extreme deadline pressures. OTHER DUTIES This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations. If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling . Thank you for your interest in MartinFed. Please Note: All positions at MartinFed are contingent upon passing a background check prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer. Job Posted by ApplicantPro
Leidos seeks a Cyber Analyst to protect mission-critical systems for government and commercial clients. In this role, you will monitor networks, investigate incidents, and enhance defenses across complex environments. Responsibilities include threat detection, log and SIEM analysis, incident response, and vulnerability remediation in partnership with engineering and operations teams. You will contribute to secure architectures, support compliance requirements, and prepare clear reports for stakeholders, all within a collaborative, mission-driven culture that values innovation and continuous learning. Responsibilities Monitor networks and systems to detect potential cyber threats and anomalies Investigate security incidents and perform root-cause and impact analysis Implement and tune security tools such as SIEM, IDS/IPS, and endpoint protection Develop and maintain incident response procedures and playbooks Collaborate with cross-functional teams to remediate vulnerabilities and improve defenses Produce clear reports, dashboards, and briefings for technical and non-technical stakeholders Assist with threat hunting, intelligence analysis, and proactive risk identification Support compliance with relevant security standards, policies, and regulations Required Skills Security Information and Event Management (SIEM) tools Network security monitoring and analysis Incident response and forensic investigation Intrusion detection/prevention systems (IDS/IPS) Endpoint protection and EDR platforms Vulnerability assessment and remediation Log analysis and correlation Threat intelligence analysis Knowledge of security frameworks (NIST, ISO 27001) Scripting or automation (Python, Power Shell, or similar)
11/08/2026
Full time
Leidos seeks a Cyber Analyst to protect mission-critical systems for government and commercial clients. In this role, you will monitor networks, investigate incidents, and enhance defenses across complex environments. Responsibilities include threat detection, log and SIEM analysis, incident response, and vulnerability remediation in partnership with engineering and operations teams. You will contribute to secure architectures, support compliance requirements, and prepare clear reports for stakeholders, all within a collaborative, mission-driven culture that values innovation and continuous learning. Responsibilities Monitor networks and systems to detect potential cyber threats and anomalies Investigate security incidents and perform root-cause and impact analysis Implement and tune security tools such as SIEM, IDS/IPS, and endpoint protection Develop and maintain incident response procedures and playbooks Collaborate with cross-functional teams to remediate vulnerabilities and improve defenses Produce clear reports, dashboards, and briefings for technical and non-technical stakeholders Assist with threat hunting, intelligence analysis, and proactive risk identification Support compliance with relevant security standards, policies, and regulations Required Skills Security Information and Event Management (SIEM) tools Network security monitoring and analysis Incident response and forensic investigation Intrusion detection/prevention systems (IDS/IPS) Endpoint protection and EDR platforms Vulnerability assessment and remediation Log analysis and correlation Threat intelligence analysis Knowledge of security frameworks (NIST, ISO 27001) Scripting or automation (Python, Power Shell, or similar)
Leidos seeks a Cyber Infrastructure Support Lead to oversee secure, resilient operations for complex, mission-critical IT environments. In this role, you will lead a small team supporting networks, servers, and cloud platforms, ensuring availability, performance, and cyber readiness for government and commercial clients. Responsibilities include incident response, problem resolution, security hardening, patching, and coordinating upgrades and migrations. You will collaborate closely with cyber, engineering, and operations teams, maintain documentation and SLAs, and mentor staff in a highly collaborative, mission-focused culture. Responsibilities Lead day-to-day cyber infrastructure support operations for mission-critical systems Oversee monitoring, incident response, and troubleshooting across networks and cloud environments Implement security controls, hardening, and patch management aligned with best practices Coordinate with cybersecurity, engineering, and operations teams to resolve complex issues Develop and maintain runbooks, SOPs, and documentation for supported environments Provide technical guidance and mentoring to support engineers and analysts Support planning and execution of infrastructure upgrades and modernization efforts Ensure compliance with government and industry security standards and SLAs Required Skills Cyber infrastructure operations Network administration (LAN/WAN, routing, switching) Linux/Windows server administration Cloud platforms (AWS, Azure, or similar) Security monitoring and incident response SIEM and log analysis tools Vulnerability management and patching Scripting/automation (Power Shell, Python, or similar) Configuration management and documentation Compliance with government/industry security standards
11/08/2026
Full time
Leidos seeks a Cyber Infrastructure Support Lead to oversee secure, resilient operations for complex, mission-critical IT environments. In this role, you will lead a small team supporting networks, servers, and cloud platforms, ensuring availability, performance, and cyber readiness for government and commercial clients. Responsibilities include incident response, problem resolution, security hardening, patching, and coordinating upgrades and migrations. You will collaborate closely with cyber, engineering, and operations teams, maintain documentation and SLAs, and mentor staff in a highly collaborative, mission-focused culture. Responsibilities Lead day-to-day cyber infrastructure support operations for mission-critical systems Oversee monitoring, incident response, and troubleshooting across networks and cloud environments Implement security controls, hardening, and patch management aligned with best practices Coordinate with cybersecurity, engineering, and operations teams to resolve complex issues Develop and maintain runbooks, SOPs, and documentation for supported environments Provide technical guidance and mentoring to support engineers and analysts Support planning and execution of infrastructure upgrades and modernization efforts Ensure compliance with government and industry security standards and SLAs Required Skills Cyber infrastructure operations Network administration (LAN/WAN, routing, switching) Linux/Windows server administration Cloud platforms (AWS, Azure, or similar) Security monitoring and incident response SIEM and log analysis tools Vulnerability management and patching Scripting/automation (Power Shell, Python, or similar) Configuration management and documentation Compliance with government/industry security standards
Leidos is seeking a Cyber Infrastructure Support professional to ensure the resilience of mission-critical systems for government and commercial clients. In this role, you will monitor and support networks, servers, and security tools, investigating incidents and applying hardening, patching, and configuration baselines. You'll collaborate with cross-functional teams to improve reliability and cyber posture, maintain documentation and runbooks, and support 24x7 operations as needed. Join a mission-driven, learning-focused environment with flexible work options and impactful national security and critical infrastructure projects. Responsibilities Monitor and support critical cyber and IT infrastructure for availability, performance, and security. Investigate, triage, and resolve security and operational incidents within defined SLAs. Implement hardening, patching, and configuration baselines across servers, networks, and endpoints. Maintain and tune monitoring, logging, and SIEM tools to improve threat detection. Collaborate with engineers, analysts, and stakeholders to support mission-critical programs. Create and maintain technical documentation, runbooks, and system diagrams. Support change management activities, including testing and deployment of infrastructure changes. Participate in on-call or shift coverage for 24x7 operations as needed. Required Skills Cybersecurity operations Network infrastructure support Linux/Windows administration SIEM tools (e.g., Splunk) Incident detection and response Vulnerability assessment Firewalls and IDS/IPSScripting/automation (Python, Power Shell) Cloud security (AWS/Azure) Documentation and reporting
11/08/2026
Full time
Leidos is seeking a Cyber Infrastructure Support professional to ensure the resilience of mission-critical systems for government and commercial clients. In this role, you will monitor and support networks, servers, and security tools, investigating incidents and applying hardening, patching, and configuration baselines. You'll collaborate with cross-functional teams to improve reliability and cyber posture, maintain documentation and runbooks, and support 24x7 operations as needed. Join a mission-driven, learning-focused environment with flexible work options and impactful national security and critical infrastructure projects. Responsibilities Monitor and support critical cyber and IT infrastructure for availability, performance, and security. Investigate, triage, and resolve security and operational incidents within defined SLAs. Implement hardening, patching, and configuration baselines across servers, networks, and endpoints. Maintain and tune monitoring, logging, and SIEM tools to improve threat detection. Collaborate with engineers, analysts, and stakeholders to support mission-critical programs. Create and maintain technical documentation, runbooks, and system diagrams. Support change management activities, including testing and deployment of infrastructure changes. Participate in on-call or shift coverage for 24x7 operations as needed. Required Skills Cybersecurity operations Network infrastructure support Linux/Windows administration SIEM tools (e.g., Splunk) Incident detection and response Vulnerability assessment Firewalls and IDS/IPSScripting/automation (Python, Power Shell) Cloud security (AWS/Azure) Documentation and reporting
Cobalt Benefits Group LLC
Manchester, New Hampshire
Description: Cobalt Benefits Group is seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. The analyst will monitor security controls, investigate alerts, coordinate remediation, and improve the organization's ability to prevent, detect, and respond to cybersecurity risk. The successful candidate will bring practical experience across multiple security domains rather than expertise in a single vendor platform. The role works closely with IT Operations, infrastructure, and application teams in a regulated environment. Security Operations & Incident Response Monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity. Triage and investigate alerts; document findings; coordinate containment, remediation, recovery, and post-incident follow-up. Analyze event, identity, endpoint, cloud, application, and network logs to distinguish security incidents from expected activity and false positives. Maintain incident response plans, investigation procedures, escalation paths and case documentation. Cloud, Identity & Secure Access Assess and improve security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity. Administer identity and access controls including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes. Support Zero Trust and secure access services for private applications. Partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services. Data Protection, Human Risk & Insider Risk Operate data security posture management capabilities to discover sensitive data, excessive access, shadow data, orphaned files, and insecure sharing. Administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories. Support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information. Administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting. Endpoint, Network & Application Security Support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines. Coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads and prioritize remediation through patching. Assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements. Monitor security systems, including firewalls, intrusion detection systems, to detect and respond to security incidents in a timely manner. Collaborate on operating system, application, firmware, and security patching; validate remediation and document accepted exceptions. Resilience, Governance & Continuous Improvement Support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements. Maintain policies, standards, procedures, diagrams, and inventories. Contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations. Evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents. Partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that enable the responsible use of generative AI, AI agents, automation, and machine-to-machine services. Contribute to the organization's AI Risk Management Framework (AI RMF) program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring activities, and ongoing governance reviews. Requirements: Job Requirements Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience. Three to five years of experience in security operations, cloud security, infrastructure security, or a comparable role. Hands-on experience investigating alerts and working across endpoint, identity, email, network, cloud, and data security controls. Experience with vulnerability assessment, remediation tracking, patch management, incident response, and security control validation. Understanding of data discovery, classification, data loss prevention, sensitive-information handling, and insider-risk concepts. Ability to explain technical findings, business impact, and recommended actions to both technical and non-technical audiences. Strong judgment, discretion, documentation, analytical thinking, and the ability to manage multiple priorities. Preferred Qualifications Experience in a regulated environment and familiarity with security or compliance frameworks such as NIST, MITRE ATT&CK, SOC 2, or HITRUST. Experience securing hybrid environments with cloud infrastructure, productivity platforms, on-premises systems, virtualized infrastructure, and software-as-a-service applications. Working knowledge of cloud security, identity governance, and hybrid infrastructure. Familiarity with security information and event management, extended detection and response, cloud security posture management, web application protection, and security orchestration. Experience with scripting or security analytics using PowerShell, query languages, or comparable automation methods. Relevant industry or cloud security certifications Equal Opportunity Employer, including disability/protected veterans Compensation details: 00 Yearly Salary PIa2265b041df4-1463
10/01/2026
Full time
Description: Cobalt Benefits Group is seeking an Information Security Analyst to help safeguard information assets and technology services across cloud and on-premises environments. The analyst will monitor security controls, investigate alerts, coordinate remediation, and improve the organization's ability to prevent, detect, and respond to cybersecurity risk. The successful candidate will bring practical experience across multiple security domains rather than expertise in a single vendor platform. The role works closely with IT Operations, infrastructure, and application teams in a regulated environment. Security Operations & Incident Response Monitor managed detection and response, endpoint, identity, email, network, cloud, and security analytics platforms for suspicious activity. Triage and investigate alerts; document findings; coordinate containment, remediation, recovery, and post-incident follow-up. Analyze event, identity, endpoint, cloud, application, and network logs to distinguish security incidents from expected activity and false positives. Maintain incident response plans, investigation procedures, escalation paths and case documentation. Cloud, Identity & Secure Access Assess and improve security across public cloud subscriptions, storage, workloads, applications, and hybrid connectivity. Administer identity and access controls including multifactor authentication, conditional access, role-based access, privileged access, service identities, access reviews, and joiner-mover-leaver processes. Support Zero Trust and secure access services for private applications. Partner with administrators and engineers to design secure access for cloud data platforms, application hosting, and future AI-enabled services. Data Protection, Human Risk & Insider Risk Operate data security posture management capabilities to discover sensitive data, excessive access, shadow data, orphaned files, and insecure sharing. Administer data loss prevention controls across email, endpoints, collaboration platforms, cloud services, applications, and file repositories. Support data discovery, classification, information protection, retention, encryption, and remediation workflows for regulated and confidential information. Administer security awareness training, phishing simulations, targeted education, completion tracking, and human-risk reporting. Endpoint, Network & Application Security Support endpoint detection and response, device security, mobile device management, application control, browser protection, and workstation security baselines. Coordinate vulnerability and exposure management across endpoints, servers, network devices, databases, applications, and cloud workloads and prioritize remediation through patching. Assess application and infrastructure changes for secure configuration, logging, access, data protection, and resilience requirements. Monitor security systems, including firewalls, intrusion detection systems, to detect and respond to security incidents in a timely manner. Collaborate on operating system, application, firmware, and security patching; validate remediation and document accepted exceptions. Resilience, Governance & Continuous Improvement Support backup, recovery, immutable storage, business continuity, and disaster recovery security requirements. Maintain policies, standards, procedures, diagrams, and inventories. Contribute to automation and repeatable analysis using scripting, query languages, and workflow integrations. Evaluate emerging security requirements for cloud, software-as-a-service, and AI Agents. Partner with business and technology stakeholders to establish AI governance, security controls, and risk management practices that enable the responsible use of generative AI, AI agents, automation, and machine-to-machine services. Contribute to the organization's AI Risk Management Framework (AI RMF) program by supporting AI inventory management, risk assessments, control validations, policy development, monitoring activities, and ongoing governance reviews. Requirements: Job Requirements Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent relevant experience. Three to five years of experience in security operations, cloud security, infrastructure security, or a comparable role. Hands-on experience investigating alerts and working across endpoint, identity, email, network, cloud, and data security controls. Experience with vulnerability assessment, remediation tracking, patch management, incident response, and security control validation. Understanding of data discovery, classification, data loss prevention, sensitive-information handling, and insider-risk concepts. Ability to explain technical findings, business impact, and recommended actions to both technical and non-technical audiences. Strong judgment, discretion, documentation, analytical thinking, and the ability to manage multiple priorities. Preferred Qualifications Experience in a regulated environment and familiarity with security or compliance frameworks such as NIST, MITRE ATT&CK, SOC 2, or HITRUST. Experience securing hybrid environments with cloud infrastructure, productivity platforms, on-premises systems, virtualized infrastructure, and software-as-a-service applications. Working knowledge of cloud security, identity governance, and hybrid infrastructure. Familiarity with security information and event management, extended detection and response, cloud security posture management, web application protection, and security orchestration. Experience with scripting or security analytics using PowerShell, query languages, or comparable automation methods. Relevant industry or cloud security certifications Equal Opportunity Employer, including disability/protected veterans Compensation details: 00 Yearly Salary PIa2265b041df4-1463
Job Description Job Description Network Security Systems Manager - Q Clearance Required Summary: We are seeking an experienced Network Security Systems Manager to lead the administration, security, and operations of network security systems supporting LAN/WAN environments. The ideal candidate will have extensive experience managing enterprise network security infrastructure, leading technical security teams, and implementing security policies, controls, and best practices. This role requires strong technical judgment, leadership skills, and the ability to plan, prioritize, and execute network security initiatives in a complex government environment. Location: Washington, DC or Gaithersburg, MD Salary: Up to $178,000 Clearance: Active Q Clearance Required Education: Bachelor's degree from an accredited university or college in Information Technology with an emphasis in Cybersecurity or Information Assurance, Computer Science, or a related field. Required Certifications: One or more of the following certifications or equivalent: GIAC Information Security Professional (GISP) ISC2 Certified Information Systems Security Professional (CISSP) GIAC Security Essentials (GSEC) Experience: Minimum of five (5) years of experience managing network security systems in LAN/WAN environments. Experience leading network security administration staff and technical teams. Experience managing enterprise network security infrastructure, systems, and technologies. Broad knowledge of network security concepts, practices, principles, and procedures. Experience planning, implementing, and maintaining network security solutions. Experience identifying and addressing network security risks, vulnerabilities, and operational issues. Ability to apply extensive technical experience and sound judgment to plan and accomplish organizational goals. Experience developing and implementing security policies, procedures, standards, and controls. Strong understanding of network security architecture, access controls, firewalls, intrusion detection/prevention, VPNs, and secure network communications. Experience supporting security monitoring, incident response, vulnerability management, and network security assessments. Ability to lead technical teams, prioritize workload, manage competing requirements, and communicate effectively with technical and management stakeholders. Preferred Certifications: Certified Information Security Manager (CISM) ISC2 Certified Cloud Security Professional (CCSP) GIAC Network Forensic Analyst (GNFA) GIAC Certified Intrusion Analyst (GCIA) GIAC Certified Incident Handler (GCIH) GIAC Certified Firewall Analyst (GCFW) Cisco Certified Network Professional - Security (CCNP Security) Fortinet Certified Professional or equivalent Fortinet certification Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent CompTIA Security+ CompTIA CySA+ ISACA Certified in Risk and Information Systems Control (CRISC) Certified Ethical Hacker (CEH) Juniper Networks security certification or equivalent ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 24+ years of stellar past performance, ActioNet is the premier Trusted Innogrator! Why ActioNet? At ActioNet, our Passion for Quality is at the heart of everything we do: We are committed to make ActioNet a great place to work and continue to invest in our ActioNeters We are committed to our customers by driving and sustaining Service Delivery Excellence We are committed to give back to our Community, help others and make the world a better place for our next generation ActioNet is proud to be named as a Top Workplace for the ninth year in a row (2014 - 2022). We have 98% of Customer retention rate. We are passionate about the inspirational missions of our customers and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health and well-being of our nation. What's in It For You? As an ActioNeter, you get to be part of exceptional team and a corporate culture that nurtures mutual success for our customers, employees and our communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy and a desire to develop your skills, experience and career. Are you ready to make a difference? ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Direct Applicants, only. No Agencies, No third-party recruiters, please
09/30/2026
Full time
Job Description Job Description Network Security Systems Manager - Q Clearance Required Summary: We are seeking an experienced Network Security Systems Manager to lead the administration, security, and operations of network security systems supporting LAN/WAN environments. The ideal candidate will have extensive experience managing enterprise network security infrastructure, leading technical security teams, and implementing security policies, controls, and best practices. This role requires strong technical judgment, leadership skills, and the ability to plan, prioritize, and execute network security initiatives in a complex government environment. Location: Washington, DC or Gaithersburg, MD Salary: Up to $178,000 Clearance: Active Q Clearance Required Education: Bachelor's degree from an accredited university or college in Information Technology with an emphasis in Cybersecurity or Information Assurance, Computer Science, or a related field. Required Certifications: One or more of the following certifications or equivalent: GIAC Information Security Professional (GISP) ISC2 Certified Information Systems Security Professional (CISSP) GIAC Security Essentials (GSEC) Experience: Minimum of five (5) years of experience managing network security systems in LAN/WAN environments. Experience leading network security administration staff and technical teams. Experience managing enterprise network security infrastructure, systems, and technologies. Broad knowledge of network security concepts, practices, principles, and procedures. Experience planning, implementing, and maintaining network security solutions. Experience identifying and addressing network security risks, vulnerabilities, and operational issues. Ability to apply extensive technical experience and sound judgment to plan and accomplish organizational goals. Experience developing and implementing security policies, procedures, standards, and controls. Strong understanding of network security architecture, access controls, firewalls, intrusion detection/prevention, VPNs, and secure network communications. Experience supporting security monitoring, incident response, vulnerability management, and network security assessments. Ability to lead technical teams, prioritize workload, manage competing requirements, and communicate effectively with technical and management stakeholders. Preferred Certifications: Certified Information Security Manager (CISM) ISC2 Certified Cloud Security Professional (CCSP) GIAC Network Forensic Analyst (GNFA) GIAC Certified Intrusion Analyst (GCIA) GIAC Certified Incident Handler (GCIH) GIAC Certified Firewall Analyst (GCFW) Cisco Certified Network Professional - Security (CCNP Security) Fortinet Certified Professional or equivalent Fortinet certification Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent CompTIA Security+ CompTIA CySA+ ISACA Certified in Risk and Information Systems Control (CRISC) Certified Ethical Hacker (CEH) Juniper Networks security certification or equivalent ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 24+ years of stellar past performance, ActioNet is the premier Trusted Innogrator! Why ActioNet? At ActioNet, our Passion for Quality is at the heart of everything we do: We are committed to make ActioNet a great place to work and continue to invest in our ActioNeters We are committed to our customers by driving and sustaining Service Delivery Excellence We are committed to give back to our Community, help others and make the world a better place for our next generation ActioNet is proud to be named as a Top Workplace for the ninth year in a row (2014 - 2022). We have 98% of Customer retention rate. We are passionate about the inspirational missions of our customers and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health and well-being of our nation. What's in It For You? As an ActioNeter, you get to be part of exceptional team and a corporate culture that nurtures mutual success for our customers, employees and our communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy and a desire to develop your skills, experience and career. Are you ready to make a difference? ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Direct Applicants, only. No Agencies, No third-party recruiters, please
Job Description Job Description Network Security Engineer Job Description Applicants must be authorized to work in the U.S. without sponsorship now and in the future. The company does not offer visa sponsorship or transfer of visas for this position now or in the future. The Network Security Engineer is responsible for supporting and securing the organization's enterprise and manufacturing network infrastructure. This position combines traditional network engineering responsibilities with cybersecurity functions to ensure the confidentiality, integrity, and availability of both Information Technology (IT) and Operational Technology (OT) environments. The ideal candidate will have a strong background in Cisco technologies, be hands-on, detail-oriented, and able to work effectively in a fast-paced manufacturing environment. Essential Duties and Responsibilities: Design, implement, and maintain Cisco-based LAN/WAN infrastructure across enterprise and manufacturing environments. Configure, manage, and troubleshoot Cisco routers, switches, wireless infrastructure, and network appliances. Monitor and analyze network performance to ensure high availability and reliability. Support OT and IT network segmentation initiatives to maintain operational security and uptime. Perform network upgrades, capacity planning, and infrastructure optimization. Maintain accurate network documentation, diagrams, and standard operating procedures (SOPs). Assist with day-to-day break/fix network incidents and escalated support requests Administer and support firewalls, VPNs, and other network security technologies. Monitor security alerts and investigate suspicious activity across enterprise and OT environments. Assist with vulnerability management, remediation efforts, and patch management processes. Participate in security incident response activities and support compliance initiatives. Manage and support multi-factor authentication (MFA), secure remote access solutions, and access control technologies. Collaborate with IT and operational teams to implement and maintain security best practices. Support cybersecurity compliance efforts and contribute to security audits and assessments. Required Skills and Qualifications: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or equivalent practical experience. Minimum 5 years of professional networking experience. Minimum 3-5 years of cybersecurity experience. Strong hands-on expertise with Cisco networking technologies. Experience with firewalls, VPNs, IDS/IPS, network segmentation, authentication technologies, and access controls. Strong understanding of network security principles and best practices. Manufacturing environment experience preferred with an understanding of industrial and OT network requirements. Excellent troubleshooting, documentation, and communication skills. Ability to work onsite with cross-functional teams in a manufacturing environment. -no remote option. Proficiency in Mandarin Preferred Skills and Qualifications: Cisco Certified Network Associate (CCNA) CompTIA Network+ CompTIA Security+ CiscoCyberOpsAssociate Microsoft SC-200 Security Operations Analyst Microsoft SC-300 Identity and Access Administrator Additional Cisco security or networking certifications preferred This job description is intended to provide a general overview of the position. It is not intended to be an exhaustive list of all responsibilities, duties, and skills required. The company reserves the right to modify or change the job description at any time.
09/29/2026
Full time
Job Description Job Description Network Security Engineer Job Description Applicants must be authorized to work in the U.S. without sponsorship now and in the future. The company does not offer visa sponsorship or transfer of visas for this position now or in the future. The Network Security Engineer is responsible for supporting and securing the organization's enterprise and manufacturing network infrastructure. This position combines traditional network engineering responsibilities with cybersecurity functions to ensure the confidentiality, integrity, and availability of both Information Technology (IT) and Operational Technology (OT) environments. The ideal candidate will have a strong background in Cisco technologies, be hands-on, detail-oriented, and able to work effectively in a fast-paced manufacturing environment. Essential Duties and Responsibilities: Design, implement, and maintain Cisco-based LAN/WAN infrastructure across enterprise and manufacturing environments. Configure, manage, and troubleshoot Cisco routers, switches, wireless infrastructure, and network appliances. Monitor and analyze network performance to ensure high availability and reliability. Support OT and IT network segmentation initiatives to maintain operational security and uptime. Perform network upgrades, capacity planning, and infrastructure optimization. Maintain accurate network documentation, diagrams, and standard operating procedures (SOPs). Assist with day-to-day break/fix network incidents and escalated support requests Administer and support firewalls, VPNs, and other network security technologies. Monitor security alerts and investigate suspicious activity across enterprise and OT environments. Assist with vulnerability management, remediation efforts, and patch management processes. Participate in security incident response activities and support compliance initiatives. Manage and support multi-factor authentication (MFA), secure remote access solutions, and access control technologies. Collaborate with IT and operational teams to implement and maintain security best practices. Support cybersecurity compliance efforts and contribute to security audits and assessments. Required Skills and Qualifications: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or equivalent practical experience. Minimum 5 years of professional networking experience. Minimum 3-5 years of cybersecurity experience. Strong hands-on expertise with Cisco networking technologies. Experience with firewalls, VPNs, IDS/IPS, network segmentation, authentication technologies, and access controls. Strong understanding of network security principles and best practices. Manufacturing environment experience preferred with an understanding of industrial and OT network requirements. Excellent troubleshooting, documentation, and communication skills. Ability to work onsite with cross-functional teams in a manufacturing environment. -no remote option. Proficiency in Mandarin Preferred Skills and Qualifications: Cisco Certified Network Associate (CCNA) CompTIA Network+ CompTIA Security+ CiscoCyberOpsAssociate Microsoft SC-200 Security Operations Analyst Microsoft SC-300 Identity and Access Administrator Additional Cisco security or networking certifications preferred This job description is intended to provide a general overview of the position. It is not intended to be an exhaustive list of all responsibilities, duties, and skills required. The company reserves the right to modify or change the job description at any time.
