19 jobs found

Job Description Job Description Acclaim Technical Services, founded in 2000, is a leading language, operations, and technology services company supporting a wide range of U.S. Federal agencies. We are an Employee Stock Ownership Plan (ESOP) company, which is uncommon within our business sector. We see this as a significant strength, and it shows: ATS is consistently ranked as a top workplace among DC area firms and continues to grow. We are actively hiring Technical Targeting Analysts / Cyber Technical Analysts with TS/SCI clearance and polygraph to join our team working in Northern Virginia. You will be responsible for addressing, supporting and implementing Customer directed duties, tasks and objectives specific to unique Customer projects and programs. Duties and Responsibilities: Utilize a multi-disciplinary approach, combing signals intelligence, human intelligence, technical collections, and large datasets to identify and develop opportunities for collecting intelligence on key internet-facing infrastructure and related network targets Analyze and utilize packet capture data and other network traffic to identify vulnerability and inform the development of technical operations Work closely with technical targeters and other stakeholders to develop and execute operations that achieve mission objectives Proven experience collaborating with government agencies and other stakeholders to support technical operations, with strong understanding of operational environments, tradecraft, security protocols and counterintelligence measures Proven ability to work collaboratively with a diverse team, integrating multiple disciplines and perspectives to solve complex problems and drive results Proven ability to communicate complex ideas effectively through written and oral means, with the capacity to adapt massaging to diverse audiences and technical backgrounds Proven ability to analyze and integrate information from multiple sources to inform and support technical operations, with a focus on identifying and prioritizing targets Proven ability to effectively utilize a range of tolls and databases to identify and develop operational leads, supporting technical operations and mission objectives Proven ability to conduct online research ensuring the security and integrity of the research project Proven ability to collect, analyze, and evaluate large datasets from diverse sources, including but not limited to, multi-source intelligence and technical operations Proven ability to analyze data and identify insights that inform operational decisions and drive actionable outcomes Proven ability to conduct online activities in a secure and covert manner, utilizing best practices to maintain operational security Proven ability to establish and maintain effective relationships with key stakeholders, including sponsors, US Government agencies, and Intelligence Community partners, to facilitate the sharing of information and coordination of efforts Demonstrated experience using strong analytic, writing, and briefing skills when presenting results of targeting research Proven experience in developing and executing targeting strategies that enable and remove access to computer networks, leveraging technical expertise to drive operational outcomes Proven ability to identify and analyze information within classified collections to support operations Demonstrated experience writing and coordinating cables in customer cable systems Proven ability to develop and compile comprehensive targeting information into actional packages for operation use, supporting both field operations and headquarters-level decision-making Proven ability to analyze and interpret data to inform content analysis, driving the expansion of technical capabilities and collection operations Desired Experience: Proven experience working with sensitive or protected information systems, demonstrating a strong understanding of data management and security protocols Demonstrated experience working with customer databases and analytic tools Proven ability to analyze and integrate information from multiple sources to inform and support technical operations, with a focus on identifying and prioritizing targets Proven experience and working knowledge of telecommunication systems, including mobile networks and computer networks with a strong understanding of thein underlying technologies and architectures Education Requirement: BA/BS (or equivalent experience) Experience Requirement: 8-10 years of experience Target Salary Range: Cyber Technical Analyst - Senior: $156,500 Cyber Technical Analyst - Principal: $182,500 ABOUT Acclaim Technical Services (ATS) , founded in 2000, is a premier provider of tech-enabled solutions and operational services to a broad range of U.S. Federal agencies. As an Employee Stock Ownership Plan (ESOP) company-an uncommon advantage in our sector-we foster a culture of ownership, accountability, and shared success. This commitment to our people shows: ATS is consistently recognized as a top workplace in the DC area and continues to experience strong, strategic growth. SALARY TRANSPARANCY There are many factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employee owners value the flexibility at ATS that allows them to balance quality work and their personal lives. We offer competitive compensation, career growth, benefits and learning and development opportunities. Our broad mix of exceptional benefits options is designed to support and protect employees and their families. At ATS, you will be eligible to participate in a comprehensive benefits package such as healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more at Employee Resources EQUAL EMPLOYMENT OPPORTUNITY (EEO) STATEMENT ATS is committed to a program of equal employment opportunity without regard to race, color, ethnicity, national origin, ancestry, citizenship, sex, pregnancy, marital status, sexual orientation, age, religion/creed, hairstyles and hair textures, handicap/disability, genetic information/history, military/veteran status, or any other characteristic or condition protected by applicable law. We support the employment and advancement in employment of individuals with disabilities and of protected veterans, and we treat qualified individuals without discrimination on the basis of their physical or mental disability or veteran status. Powered by JazzHR WJbCfoGguH

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

Job Description Job Description Job Title: QA Analyst Location: Lansing, MI, (Hybrid)-Onsite Wednesdays and Thursdays Position Type: Contract Interview Mode : MS Teams Resources MUST provide 2 professional references. Please attach a separate Reference Page to your bid (not within resume) that includes at least 2 professional references! Be sure to include the reference's full name, phone number, email, affiliation to the candidate (Company Name, Title, Relationship, etc). The QA Tester will work closely with DTMB teams and project stakeholders to: Develop, execute, and maintain test plans, test cases, and test scripts. Perform functional, regression, integration, and user acceptance testing. Identify, document, and track defects, ensuring clear communication and timely resolution. Validate system changes and enhancements to support agency goals and compliance with DTMB standards. Participate in project meetings, provide input on requirements from a testing perspective, and support continuous improvement efforts. Additionally, this role serves as a key member of the DTMB Agency Services QA/BA team, contributing to various QoL support requests and operational team activities. Candidate Expectations The successful candidate will: Demonstrate strong customer service and communication skills. Help guide agency partners through DTMB processes, policies, and quality standards. Quickly learn new applications, workflows, and project contexts. Be self-directed, well organized, and confident in building strong working relationships. Adapt easily to shifting priorities, changing project needs, and evolving agency requirements. DTMB Agency Services welcomes candidates who are detail oriented, collaborative, analytical, and committed to delivering high quality technology outcomes. Required Skills: Minimum of 5 years conducting comprehensive software testing activities, including test planning, test case design, execution, defect documentation, and process analysis to improve quality and reliability. Minimum of 5 years creating, refining, and managing test cases and acceptance criteria within Agile development projects, including supporting user story validation and participating in sprint ceremonies. Minimum of 2 years working directly with senior management to communicate testing impacts, facilitate discussions on quality strategy, contribute to risk assessments, and gain alignment on testing approaches and defect resolution. Minimum of 2 years testing IT solutions designed for public use, including validating functionality, accessibility, performance, and security considerations for customer-facing applications. Required Education: Bachelors Degree Preferred Skills Recommended to have 2 years experience with ADA/WCAG accessibility and compliance testing. Recommended to have 2 years experience with reviewing and triaging vulnerability scan results. Recommended to have 1 year experience working with systems or programs governed by state and/or federal regulations, ensuring quality practices support compliance requirements.

Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver on a scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for an Information Technology Specialist at the journeyman level supporting Headquarters Air Force Materiel Command (HQ AFMC) A4/10 in Wright Patterson AFB, OH. The HQ AFMC Directorate of Logistics, Civil Engineering, Force Protection, and Nuclear Integration (A4/10) is responsible for shaping the workforce and infrastructure needed to deliver logistics, sustainment, installation support, and force protection capabilities across the command. This includes providing oversight for acquisition logistics, supply chain management, depot maintenance, base-level logistics operations, and enterprise security programs. Additionally, the directorate delivers strategic facility and infrastructure oversight while providing command-wide direction for Major Command (MAJCOM) security operations, ensuring the readiness and responsiveness required to support war-winning expeditionary capabilities. Responsibilities include, but are not limited to the duties listed below: Provide day-to-day Information Technology Specialist support within Sensitive Compartmented Information Facilities (SCIFs) supporting DoD agencies, the Office of the Secretary of Defense (OSD), and HQ AFMC, including classified enclave activities. Provide Information Assurance (IA) and technical security administrative assistance, IT endpoint administration and support, network engineering assistance, and Site Information Systems Security Manager (ISSM)/Information Systems Security Officer (ISSO) support. Install, maintain, audit, refresh, and support a secure Microsoft Windows endpoint environment. Maintain DoD and Air Force internet applications and protocols, including Internet Protocol (IP), Transmission Control Protocol (TCP), Hypertext Transfer Protocol (HTTP), Secure Hypertext Transfer Protocol (HTTPS), File Transfer Protocol (FTP), and Secure Sockets Layer (SSL). Interface with AFMC HQ customers and provide IT-related support to quickly resolve technical issues. Analyze and troubleshoot system anomalies to ensure optimum equipment performance. Perform periodic maintenance, hardware upgrades and replacement, firmware updates, and system configuration changes. Attend planning and requirements meetings with IT staff, program managers, analysts, and customers as required. Prepare systems for operational use and support operational tests and inspections. Provide technical guidance and Information Assurance support for AFMC technologies. Apply working knowledge of Local Area Network (LAN) and Wide Area Network (WAN) technologies to maintain system operations. Aid with the acquisition and sustainment of IT systems for weapon systems, subsystems, components, and equipment. Assist with security accreditation and information technology certification processes. Assist in the operation of necessary IT systems to ensure standardized file structures and seamless file sharing to support daily interactions with the SIO, SSO, staff, and directorate senior staff. Advise and assist in the development of system security management plans, computer Certification and Accreditation documentation, security vulnerability analyses, and other system security documents identified in MIL-HDBK 1785, DoDI 5000.02, and AF Supplement 1. Attend meetings and prepare/present briefings, graphics, and visuals for/to leadership. Prepare security paperwork, including but not limited to DD Form 2875 and Communications Security (COMSEC) inspection criteria. Assist in access control and perform escort duties for Video Teleconferencing (VTC) visitors. Answer telephones and other modes of administrative communication in the performance of duties. Perform self-inspections; identify security discrepancies; and report security incidents. Support security inspections; identify security discrepancies; and assist in report preparation. Perform courier responsibilities within the local area. Control program media and information within Air Force Materiel Command (AFMC) security guidelines. Populate and update databases, including but not limited to suspense tracking, personnel access, facility, JWICS system, and SharePoint databases, in the performance of assigned duties. Perform daily opening and closing of the SCIF and respond to SCIF after-duty-hour alarm activations when notified. Support AFMC/A2 Directorate JWICS communications to ensure cognizant parties are informed and appropriate responses are prepared, coordinated, and communicated while maintaining required security disciplines. Support the proper handling, preparation, and tracking of physical classified products entering or leaving the facility. Support planning, formulation, editing, development, publication, and storage of Special Access Program (SAP) and Top Secret/Sensitive Compartmented Information (TS/SCI) products. Support meetings and events attended or hosted by the Senior Intelligence Officer (SIO) on an as-required basis. Develop, maintain, and modify schedules and calendars as required on multi-level security systems. Use updated Security Classification Guides (SCGs) or other source documents to perform classification reviews on JWICS IT documentation and ensure proper derivative classification on all documents encountered during performance of duties. Support administrative tasks as necessary to support management, acquisition, and operations functions. Requirements Must have an active or current Top Secret security clearance with Sensitive Compartmented Information eligibility, verifiable in the Defense Information System for Security (DISS). BA/BS and at least three (3) years of experience in the respective technical/professional discipline being performed with proper certifications required in the labor category performance requirements OR six (6) years of directly related experience with proper certifications as described in the labor category performance requirements. Must be able to work successfully in a dynamic environment and effectively interact with numerous DoD, Agency, military/civilian personnel, and industry partners. Must be able to lift up to 50 pounds. Must meet position and certification requirements outlined in DoD Directive 814 for IA Technician Level II within six months of the date of hire. Must have working knowledge of various DODIIS Cryptologic SCI Information Systems Security Standards, Common Criteria, and System Security Policy as they relate to Certification and Accreditation (C&A). Must be familiar with security policy manuals, appropriate Intelligence Community Directives (ICDs), and other guiding policy documents. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national security and public well-being. Growth-Oriented Environment - Learn from technical leaders, innovate within Agentic AI, and mentor those around you in AI best practices. Culture of Empowerment - You'll be part of a team that values innovation, trust, collaboration, and mission success Please join us, as together we build a better world one mission at a time powered by Technology Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development

Job Description Job Description Experienced assessor sought to lead rigorous, evidence-based security assessments of cloud and hybrid systems supporting federal missions. Who we are looking for: Spry Methods is seeking an experienced Senior Cloud Security Assessor to join our team in the Washington, DC area. The successful candidate will bring extensive hands-on experience conducting independent security control assessments of cloud and hybrid systems, with particular depth in federal cloud environments. This role requires sound professional judgment, strong analytical skills, and a practical, common-sense approach to applying security requirements to system data, technical evidence, mission context, and actual risk. Key Responsibilities: • Lead full-cycle Security Assessment and Authorization (SA&A) activities for cloud, hybrid, and enterprise systems as an independent assessor. • Assess Microsoft Azure and Amazon Web Services (AWS) environments, including the implementation and operating effectiveness of administrative, operational, and technical security controls. • Retrieve and review FedRAMP authorization packages and supporting documentation, then analyze the package for applicability, control inheritance, residual risk, gaps, and customer responsibilities. • Conduct detailed analysis of assessment artifacts, including system security plans, policies, procedures, architecture and data-flow diagrams, inventories, configurations, logs, scan results, test outputs, and other supporting evidence. • Develop Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Required Evidence Lists, and Plans of Action and Milestones (POA&Ms). • Perform network, system, application, and NIST security control testing from administrative, operational, and technical perspectives. • Analyze vulnerability scan results, interpret risk, and use manual validation and corroborating evidence to distinguish actionable findings from false positives or unsupported conclusions. • Apply security requirements using practical judgment and data context rather than relying solely on checklist compliance. Evaluate whether evidence is relevant, reliable, sufficient, and representative of the assessed environment. • Clearly communicate findings, risk, root cause, and feasible mitigation options to technical teams, system owners, executives, and other assessment stakeholders. • Coordinate evidence requests, interviews, test activities, and assessment schedules with customer personnel and Information Systems Security Analysts. • Support security assessment program operations and contribute to consistent assessment methods, quality reviews, and defensible reporting. Minimum Qualifications • Active Certified Information Systems Security Professional (CISSP) certification is required. • At least eight years of demonstrated, hands-on experience conducting security control assessments, including substantial experience serving as an independent assessor for cloud and hybrid systems. • Extensive experience conducting independent security assessments of federal systems hosted in Microsoft Azure and AWS environments, including evaluation of security controls, architecture, inherited controls, customer-configured controls, and cloud-specific risks. • Demonstrated experience retrieving, navigating, and analyzing FedRAMP authorization packages and associated security artifacts. • Strong knowledge of federal Risk Management Framework (RMF) processes and NIST security control assessment practices. • Ability to analyze large volumes of technical and governance evidence, connect information across artifacts, identify inconsistencies, and reach clear, supportable conclusions. • Strong understanding of IT security requirements, technical countermeasures, vulnerability management, risk management, contingency planning, secure data communications, and system security architecture. • Excellent technical writing and stakeholder communication skills, with the ability to explain risk and recommended mitigation in clear, decision-oriented language. • Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or eight additional years of relevant specialized experience. • Experience using CSAM or a comparable governance, risk, and compliance platform. Preferred Qualifications • Certificate of Cloud Security Knowledge (CCSK), Certified Cloud Security Professional (CCSP), Certified Governance, Risk and Compliance (CGRC), or comparable cloud or assessment certification. • Experience supporting federal cybersecurity programs and conducting assessments, audits, or control implementation reviews in accordance with NIST Special Publications. • Experience assessing cloud service offerings that rely on FedRAMP-authorized services and documenting control inheritance and customer responsibility requirements. • DoD 8570/8140 IAM Level II eligibility or an equivalent qualification, when required by the customer environment. • Experience evaluating privacy and data protection considerations as part of security assessments. Success in this role: The successful assessor is technically credible, independent, and evidence-driven. They know when the data supports a finding, when additional validation is needed, and when a requirement must be interpreted in light of architecture, mission use, and actual exposure. They produce assessment results that are clear, consistent, defensible, and actionable. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero-trust initiatives, resiliency, and enterprise-wide security posture. The successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments. This role requires a hands-on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Network Security Engineering and Architecture Design, engineer, and implement enterprise network security architectures spanning next-generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls. Evaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approaches. Lead network segmentation and secure connectivity initiatives, including data-flow mapping, security-zone design, enclave development, firewall rule review, ACL rationalization, and routing coordination. Design and implement network access control and device-posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategies. Advance zero-trust networking principles, least-privilege access, micro-segmentation, and encrypted communications strategies. Evaluate and recommend emerging security technologies to improve enterprise security capabilities. Engineer secure connectivity between on-premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologies. Optimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance. Project Execution Lead network security projects from concept through implementation. Perform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activities. Develop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plans. Coordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure modifications. Collaborate with network engineering, cybersecurity, operations, project management, and subject matter experts to successfully deliver network security initiatives. Support security accreditation, compliance, STIG implementation, vulnerability remediation, POA&M activities, and authorization requirements. Technical Leadership Serve as the senior technical authority for network security architecture and design decisions. Provide technical direction, mentoring, and engineering guidance to network engineers, security engineers, administrators, and analysts. Manage multiple concurrent technical efforts and maintain accountability against project schedules. Present security architecture recommendations, implementation strategies, risks, and technical decisions to government leadership, cybersecurity authorities, and approval boards. Improve engineering processes, documentation standards, implementation playbooks, migration runbooks, and operational handoff procedures. Documentation Develop and maintain network security architecture diagrams and logical/physical design documentation. Create data-flow diagrams, segmentation models, security-zone designs, and secure connectivity documentation. Maintain firewall policy standards, ACL documentation, and rule-set baselines. Develop implementation plans, rollback procedures, test plans, validation packages, risk registers, and dependency documentation. Create accreditation artifacts, technical standards, SOPs, runbooks, as-built documentation, and transition-to-operations documentation. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills. Experience providing technical guidance and developing engineering documentation. Must meet applicable cybersecurity workforce qualification requirements for the assigned position. How you will wow us: CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certification. Experience implementing Comply-to-Connect, 802.1X, or comparable network access control and device-posture enforcement solutions at enterprise scale. Experience with zero-trust architecture, micro-segmentation, SASE, or secure cloud connectivity designs. Experience integrating network security platforms with SIEM, SOAR, ITSM, and analytics platforms. Experience utilizing Python, Ansible, REST APIs, or similar technologies for security automation and infrastructure-as-code initiatives. Experience with automated firewall policy management. Experience supporting enterprise certificate management, PKI environments, encrypted-traffic inspection, and key management services.

Job Description Job Description GES is seeking an experienced Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed network environment. The role is responsible for advancing network security architecture through the execution of strategic design and implementation efforts that improve the security posture, segmentation, access control, and resiliency of the enterprise network. This position is responsible for overall network security engineering support across a broad range of efforts, including planning, designing, and evaluating the security components of the network. Duties include providing specifications for network security architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, configuration, testing, and tuning of network security infrastructure. The successful candidate serves as a technical leader and subject matter expert - assessing the current security architecture, defining the controls and segmentation model the enterprise needs, building practical implementation plans with realistic risk and rollback provisions, and directing a team of engineers to deliver them under aggressive timelines. Days Required in Office: Five Days in Office Until Acclimated and then possibly One Day Remote Clearance Required: Secret Scope and Impact Impact: Influences development of solutions that impact strategic project and program goals and business results. Recommends and develops new technical solutions, products, and security standards. Leads and manages the work of other technical staff that has significant impact on project results and outputs. Complexity: Resolves highly complex problems through significant application of technical knowledge, conceptualization, reasoning, and interpretation. Develops solutions that are highly innovative and achieved through research and integration of best practices. Communication: Communicates with government, program, cybersecurity, and technical leadership on matters of significant technical importance. Presents security architecture recommendations, implementation plans, risks, dependencies, and status to technical leadership, cybersecurity authorities, stakeholders, and approval boards, and works to build consensus around new concepts, practices, and approaches. Knowledge: In-depth understanding of network security principles, theories, and concepts and their application across a range of programs. Serves as a subject matter expert within the network security domain. Primary Responsibilities: Network Security Engineering and Architecture Design, engineer, and implement enterprise network security architecture spanning next-generation firewalls, intrusion detection and prevention, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls. Evaluate the current network security architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to strengthen enterprise security capabilities. Lead network segmentation and secure connectivity efforts, including data-flow mapping, security-zone and enclave design, firewall rule set and ACL review and rationalization, routing and security policy coordination, cutover sequencing, validation, and stakeholder approval. Design and implement network access control and device-posture enforcement (Comply-to-Connect style), including identity and device authentication, posture assessment, policy enforcement points, remediation workflows, and phased enforcement rollout. Advance zero-trust-aligned networking, micro-segmentation, least-privilege access policy, and encrypted-transport strategies across the enterprise. Provide specifications for network security architecture, evaluate and recommend emerging security technologies, and perform needs assessments to inform design and investment decisions. Engineer secure connectivity between on-premises, cloud, and remote environments, including IPsec and TLS VPN, secure cloud interconnects, and perimeter and boundary protection designs. Tune and optimize security controls to reduce false positives, close coverage gaps, and improve detection and enforcement without degrading network performance or availability. Project Execution Drive security engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical security changes. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact security policy and infrastructure changes. Partner with network architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Support accreditation and compliance activities, including security control implementation, STIG application, vulnerability remediation, POA&M support, and the technical artifacts required for authorization. Technical Leadership Serve as the senior technical authority for network security design decisions, providing technical direction, mentoring, and day-to-day guidance to network and security engineers, administrators, and analysts. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Provide clear, well-reasoned technical information and recommendations to government stakeholders and approval authorities. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Documentation Develop and maintain engineering and operational documentation, including: Network security architecture and logical/physical design diagrams Data-flow diagrams, security-zone models, and segmentation designs Firewall policy standards, rule set baselines, and ACL documentation Port, protocol, and services (PPS) requirements Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Security control implementation statements and accreditation artifacts Technical standards, playbooks, runbooks, and standard operating procedures As-built and operations transition documentation Key Success Factors: This position requires more than a firewall administrator working a change queue. It requires a security engineer who can look at an enterprise network, determine where the real exposure is, design the segmentation and control model that closes it, and sequence the implementation so the enterprise stays up while it happens. The successful engineer is equally comfortable in the technical detail - policy, routing, identity, certificates, inspection, and automation - and in front of cybersecurity authorities and approval boards defending a design, its residual risk, and its dependencies. Required Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing the work of network and security engineers, administrators, analysts, or implementation resources. Experience leading security engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Hands-on engineering experience with next-generation firewalls, intrusion detection and prevention systems, proxies and TLS inspection, VPN and encryption services, and network access control platforms. Experience with network segmentation or similar secure connectivity efforts, including data-flow analysis, firewall and ACL policy review, routing changes, security-zone design, stakeholder coordination, and implementation planning. Strong working knowledge of core networking concepts, including TCP/IP, routing protocols, switching, VLANs, DNS/DHCP/IPAM, NAT, QoS, and software-defined and cloud-connected network environments. Hands-on experience with two or more of the following technologies: Palo Alto, Cisco, Aruba, Dell, Infoblox, and Brocade. Working knowledge of Federal Government application, server, and network security requirements such as NIST, FedRAMP, FISMA, RMF, DISA STIGs, and DoD cybersecurity requirements. Demonstrated ability to organize work, track details, manage competing priorities, meet aggressive schedules, and drive complex technical efforts to completion with a high degree of accountability. . click apply for full job details

Job Description Job Description Security Team Lead (Technical & Compliance) Why Digacore? We're a fast-paced, people-first MSP with: Real career growth Autonomy to own projects and make decisions A collaborative culture (we back each other up, no egos) Paid certifications, ongoing training, and leadership that invests in your success Recognized as one of New Jersey's Top Workplaces for 2026 About the Role The Security Team Lead is a hands-on technical role responsible for leading day-to-day security operations, guiding our Security Analysts, and driving Digacore's compliance initiatives (HIPAA, SOC 2, cyber insurance requirements, and related frameworks). What You'll Do Provide day-to-day technical direction and hands-on support to Security Analysts, working incidents and investigations directly alongside them Serve as the primary escalation point for complex security incidents and high-risk situations Own and drive compliance initiatives including HIPAA, SOC 2, cyber insurance requirements, and related frameworks - audits, documentation, and remediation tracking Conduct security assessments and help clients identify opportunities to reduce risk and improve security posture Advise clients on cybersecurity best practices, compliance requirements, and security strategy Own and optimize security platforms including Microsoft Defender, Entra ID, Huntress, email security, vulnerability management, and related tools Drive root cause analysis and continuous improvement following security events Improve security processes, documentation standards, reporting, and operational efficiency Partner with Account Managers and leadership on security improvement opportunities Help evolve and expand Digacore's security services as client needs and threats change Mentor and guide Security Analysts on technical growth (light day-to-day coaching, not formal people management) What You Bring 4+ years of hands-on cybersecurity experience in an MSP, MSSP, healthcare, regulated industry, or similar environment Direct experience supporting compliance programs (HIPAA, SOC 2, cyber insurance requirements, or similar frameworks) - audits, evidence gathering, remediation Strong technical depth in Microsoft security technologies, identity management, endpoint security, and incident response Comfortable being the senior technical hand on deck, not just directing others Experience conducting risk assessments and security reviews Strong troubleshooting, analytical, and decision-making skills Excellent communication skills with the ability to explain security and compliance concepts to both technical and non-technical audiences Strong documentation habits and process-oriented mindset Willingness and ability to work full-time on-site at our office Perks & Benefits Nationwide medical, dental, life, and LTD insurance (we cover LTD + life 100%) Generous PTO + Mental Health Days 401(k) with company match HSA & FSA options Paid training & certification assistance $500 sign-on bonus Quarterly team events and career coaching Veterans encouraged to apply

Job Description Job Description Description: OCH Technologies is seeking a Security Assessment Lead to act as the technical authority for all independent risk assessments, vulnerability assessments, and analyses of alternatives conducted under this contract. The candidate will lead assessment planning, assign and mentor assessment teams, ensures assessment execution follows NIST 800-53A methodology, and is accountable for the quality and completeness of all System Security Assessment Reports (SARs) delivered. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. Location Hybrid - FAA Hubs Air Traffic Control System Command Center (ATCSCC) Washington, DC OR Mike Monroney Aeronautical Center (MMAC) Oklahoma City. OK. This position may require up to 50% travel to FAA facilities. Core Responsibilities & Duties Serve as primary technical POC for all security assessments, vulnerability assessments, and analyses of alternatives under the contract. Lead assessment planning and coordination at FAA facilities nationwide, including developing System Security Assessment Test Plans and managing pre- and post-assessment activities. Personally lead complex or high-visibility assessment events. Ensure all assessments use the three NIST 800-53A methods (Examine, Interview, Test) and produce compliant SARs. Develop and maintain vulnerability scanning strategies including Tactics, Techniques, and Procedures (TTPs). Evaluate and recommend scanning tools and configurations for NAS and Mission Support environments. Conduct risk translation from assessment findings and develop draft Plans of Action and Milestones (POAMs) with actionable remediation guidance. Lead regression assessment activities to validate that patches, fixes, and configuration changes mitigate previously identified vulnerabilities. Attend all Program Management Reviews and report on assessment status, deliverable timelines, and technical issues. Mentor and develop junior assessment staff. Build a team culture where analysts take ownership of their assigned systems and drive assessments to completion independently. Coordinate with NAS system owners, FAA facility staff, AIT/AIS, and ACG to schedule assessments and resolve access and logistical issues. Ensure assessment work in NAS operational environments follows safety protocols. Test methods for NAS systems may need to be conducted in lab environments due to air traffic safety constraints. Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role. Requirements: Minimum Qualifications Education Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics from an accredited institution. Master's degree in a related field preferred Experience At least fifteen (15)+ years of cybersecurity experience. Minimum of five (5) years of management and supervisory responsibility leading risk and vulnerability assessment teams. At least two (2) years of relevant experience performed within the last 3 years. Demonstrated track record of successful completion of multiple independent risk assessments and vulnerability assessments on complex, multi-system environments. Deep working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-53A, NIST SP 800-37 (RMF), and FIPS-199 security categorization. Hands-on experience with vulnerability assessment tools including Nessus, WebInspect, AppDetective Pro, nMap, and Tcpdump. Experience developing System Security Assessment Reports (SARs), Plans of Action and Milestones (POAMs), and assessment test plans. Experience working in Operational Technology (OT), Industrial Control Systems (ICS), or other safety-critical infrastructure environments. Security Clearance Requirement Candidate must have the ability to obtain and maintain a Public Trust Active Secret level clearance preferred Certifications Current cybersecurity certification aligned with security assessment and risk management disciplines, including CISSP, GCED, CompTIA CASP+, CISA, or an equivalent. CAP (Certified Authorization Professional) or equivalent RMF certification preferred Preferred Qualifications Prior experience assessing National Airspace System (NAS) systems or other FAA Air Traffic Organization (ATO) systems. Familiarity with FAA Order 1370.82, FAA Order 1370.121, and the ATO ISCM Plan. Experience supporting FAA Assessment & Authorization (A&A) processes. Experience conducting assessments of cloud-based services and web-facing applications in federal environments. Experience supporting international assessments or telecommunications infrastructure assessments. Other Required Skills and Abilities Strong written and verbal communication skills with the ability to produce clear, defensible, and actionable technical documentation. Proven leadership and team development capabilities. Ability to manage multiple assessment efforts simultaneously while maintaining quality standards. Strong analytical and problem-solving skills. Ability to work effectively with government stakeholders, technical teams, and senior leadership. About Us : At OCH, we are more than just a government contracting firm; we are innovators and leaders in providing cutting-edge IT services and cybersecurity solutions. Driven by a set of fundamental values, we excel in creating secure, efficient, and forward-thinking solutions that empower the government agencies we work with. Our commitment to maintaining the highest standards of integrity, adapting swiftly to new challenges, and focusing on the people we serve ensures that we consistently exceed expectations and lead the industry in innovation and reliability. What Defines Us: Integrity - We act with unwavering honesty, ensuring every decision is rooted ethically. Adaptable - We swiftly adapt to changes, seizing opportunities to innovate and lead. People-Focused - We prioritize relationships, championing growth and mutual success. Accountable - We own our outcomes, striving for excellence through continuous improvement. Collaborative - We cultivate teamwork, harnessing diverse talents to forge groundbreaking solutions. Why Join Us? Step into a role at OCH where your contributions make a tangible impact. Join a team that values creativity and initiative, offering a platform to transform the landscape of government IT services. Here, your work is not just a career-it's a mission. Embrace the opportunity to grow, innovate, and excel alongside industry leaders who are as passionate about technology as they are about making a difference. Plus, we offer a comprehensive benefits package designed to support your wellbeing and work-life balance, including: Paid time off and Holidays Medical, Dental, and Vision Insurance Paid Parental Leave Short-term disability, long-term disability, and life insurance - Employer Paid! 401(k) Additional Voluntary Life Insurance Tuition Reimbursement & More! E-Verify Participation: OCH Technologies, LLC is a participant of E-Verify to verify the identity and employment eligibility of newly hired employees. Veteran's Preference and Accessibility Statement : At OCH Technologies, we deeply respect and appreciate the unique skills and experiences that veterans bring to our team. As a federal contractor, we encourage qualified veterans to apply and provide preference where permitted by law. Your service and dedication are valued here. We are committed to creating a workplace that is open, welcoming, and accessible to everyone. In accordance with the Americans with Disabilities Act (ADA) and Section 503 of the Rehabilitation Act, we provide reasonable accommodations throughout the hiring process to ensure individuals with disabilities can apply without barriers. If you need assistance or an accommodation, please contact us at . OCH Technologies, LLC is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, disability, gender identity, or any other protected characteristic as outlined by federal, state, or local laws.

Job Description Job Description Mobile Application Architect Location: Alexandria, VA (On site) Position Type: Contract app architect working on both web and mobile application. Generally prior transportation experience does well here. 5+ years experience, End-to-end architecture, O365 Job Description Job Description We are looking for a Senior Application Architect to support the modernization of our clients websites. The architect will focus on application integration, configuration, testing, deployment, and ongoing support of SmarTrip Mobile App 2.0, while ensuring alignment with Enterprise Architecture framework, IT strategy, SDLC standards, and security requirements. What You'll Do Apply application architecture principles to support teams developing requirements across multiple functional areas Support the build, configuration, testing, and deployment of SmarTrip backend system components for SmarTrip Mobile App 2.0 Coordinate work efforts to prevent overlap and ensure alignment with Enterprise Architecture, IT strategy, SDLC standards, and architectural governance Prepare as-is and to-be architecture artifacts, including system connectivity diagrams, application reference models, interface documentation, data dictionaries, and staging plans Collaborate closely with data architects, infrastructure engineers, and software program managers to ensure enterprise-wide architectural integrity Guide and support business analysts, test analysts, and documentation specialists Review system hardening activities and assist with vulnerability remediation efforts Complete mandatory annual security awareness training What You'll Need Required Bachelor's degree in Computer Science, Information Technology, Management Information Systems, or a related discipline 5+ years of experience in application architecture for web and mobile applications Strong understanding of end-to-end application architecture, from conception through deployment Proven experience planning and deploying complex custom web application solutions and process improvements Experience coordinating software requirements and working directly with development teams Experience with administration and architecture of Business Process Management (BPM) solutions Proficiency using Microsoft 365 tools, including: Visio and Moqups for documenting application architectures and system relationships Excel for basic software requirements documentation Word and PowerPoint for technical documentation and presentations Strong analytical, verbal, and written communication skills Preferred Experience supporting third-party mobile applications (iOS and Android) integrated with enterprise backend systems Prior experience working within large, regulated, or public-sector enterprise environments Physical Demands Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state, and local standards Sedentary work that involves sitting or remaining stationary most of the time, with occasional movement around the office for meetings Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

Job Description Job Description Pentest Operator Secret Clearance required to start Beltsville, MD - ONSITE What You Will Do: The Pentest Operator will support and lead pentesting engagements on High Value Asset (HVA) systems and enterprise security assessments, helping clients understand real-world attack paths, validate defensive controls, and prioritize remediation activities based on mission risk. The role includes internal and external network testing, web application testing, Active Directory assessment, adversary emulation, red team and purple team activities, vulnerability validation and reporting, and developing and presenting executive-level out-briefs. The ideal candidate brings hands-on offensive security experience, strong client-facing communication skills, and the ability to translate technical findings into risk-based recommendations for system owners, security teams, and senior leaders. The candidate should be comfortable working in commercial and federal environments and collaborating with technical operators, analysts, engineers, and government stakeholders as required. Key Responsibilities include: • Performing penetration testing activities across internal networks, external networks, web applications, enterprise systems, cloud-connected systems, and mission environments. • Supporting High Value Asset (HVA) cybersecurity assessments by identifying and communicating exploitable vulnerabilities, validating security control effectiveness, and determining risk to critical systems and data. • Conducting network mapping, reconnaissance, vulnerability validation, exploitation, post-exploitation analysis, and documentation of attack paths within approved Rules of Engagement. • Draft and/or provide input into Rules of Engagement, test plans and objectives, scope input and documentation, and revising and updating assessment procedures required to obtain management and stakeholder approval. • Conduct external testing to evaluate what an outside attacker may be able to access, exploit, or exfiltrate within the approved scope. • Conduct internal testing to evaluate risk posed by users or systems with different access levels, including privilege escalation, lateral movement, persistence, and Active Directory attack paths. • Support red team and adversary emulation activities that simulate realistic threat behavior, including targeted access objectives, command-and-control simulation, crafted test artifacts, and controlled social engineering when authorized. • Conduct web application testing for common vulnerability classes, including broken access control, authentication and authorization weaknesses, injection flaws, cross-site scripting, insecure configuration, and other OWASP Top 10 risks. • Use offensive security tools and frameworks such as Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, CrackMapExec, Cobalt Strike, Sliver, and similar tools within approved engagement boundaries. • Drive vulnerability analysis and validation using manual techniques, automated tools, and custom scripts or proof-of-concept code where appropriate. • Support purple team and detection validation activities by mapping attacker behavior to defensive telemetry, identifying detection gaps, and recommending improvements to SIEM, EDR, and incident response processes. • Analyze logs, endpoint artifacts, and network telemetry during exercises or assessments to help validate whether adversary behaviors are detected and escalated appropriately. • Write and present clear, evidence-based reports that document findings, affected assets, exploitability, business or mission impact, and prioritized remediation recommendations. • Deliver technical and executive out-briefs to client stakeholders, including system owners, security operations teams, engineering teams, and senior leaders. • Stay current on emerging attack techniques, offensive tooling, detection approaches, and federal cybersecurity requirements, and apply that knowledge to strengthen client security posture. What You Will Need: • An ACTIVE and MAINTAINED SECRET Federal or DoD security clearance. • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; additional relevant experience may be considered in lieu of degree. • Minimum of FIVE (5) or more years of demonstrated hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, application security testing, cyber operations, or related offensive security work. • Experience performing internal and external network penetration testing, including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and documentation of attack paths. • Experience performing web application penetration testing using manual and automated techniques. • Experience assessing Active Directory environments, Windows and Linux systems, and common enterprise network services. • Experience using common penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver, or similar tools. • Experience developing test plans, documenting Rules of Engagement, tracking assessment activities, and producing formal penetration test reports. • Ability to explain technical findings, attack paths, business impact, and remediation options to both technical and non-technical stakeholders. • Strong written and verbal communication skills, including the ability to develop client-ready deliverables and executive-ready summaries. • Ability to work independently, manage multiple priorities, and collaborate across multidisciplinary teams in complex federal environments. What Would Be Nice To Have: • An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance. • Experience supporting HVA cybersecurity assessments or federal enterprise penetration testing programs. • One or more relevant offensive security certifications such as OSCP, GPEN, GWAPT, GXPN, GRTP, PenTest+, CEH, GCIH, or similar certification. • Experience with adversary emulation, purple team operations, detection engineering support, or validation of SIEM and EDR detection coverage. • Experience with Cobalt Strike, Sliver, custom payload development, or command-and-control simulation in approved assessment environments. • Experience with cloud security testing or assessment activities across AWS, Azure, or other cloud environments. • Experience supporting incident response, threat hunting, or post-incident analysis. • Experience creating proof-of-concept exploit examples for reports or live demonstrations in controlled, authorized environments. • Experience mentoring junior penetration testers or leading small offensive security workstreams. • Excellent oral and written communication and presentation skills. Ref:

GovCIO LLC seeks a Senior CSOC Support Engineer to bolster cybersecurity operations for federal customers. In this role, you'll support a 24x7 Cyber Security Operations Center by managing and tuning SIEM and security tools, integrating new data sources, and improving alert fidelity. You'll troubleshoot complex issues, guide junior analysts, and collaborate with engineers to refine detection use cases and automation. You'll also document playbooks, liaise with government stakeholders, and help drive continuous improvements that strengthen mission-critical federal networks and systems against evolving cyber threats. Responsibilities Support and enhance tools and workflows for a 24x7 Cyber Security Operations Center (CSOC). Administer, tune, and integrate SIEM and other security platforms to improve alert quality. Troubleshoot complex security tooling and data ingestion issues. Develop and maintain detection content, runbooks, and standard operating procedures. Collaborate with analysts, engineers, and government stakeholders on incident handling and improvements. Mentor junior CSOC staff on tools, processes, and best practices. Monitor system health and performance of security infrastructure. Support automation initiatives to streamline triage and response activities. Required Skills Cybersecurity operations SIEM tools (Splunk/Elastic/etc.) IDS/IPS management Incident detection and triage Linux/Windows administration Network security and TCP/IPSecurity automation and scripting Vulnerability management Ticketing and ITSM tools Documentation and reporting

GovCIO LLC seeks a Senior Cyber Security Administrator to secure mission-critical federal IT systems. In this role, you will administer and harden security tools, monitor and investigate security events, and lead incident response to protect complex, multi-cloud and on-prem environments. You'll implement security baselines, support NIST/FISMA compliance, manage identity and access controls, and drive remediation of vulnerabilities. Working in a mission-driven, collaborative culture, you'll mentor others, influence security architecture, and help modernize government technology at scale. Responsibilities Administer and harden security tools, firewalls, IDS/IPS, and endpoint protection across federal environments. Monitor security events, investigate incidents, and coordinate response and remediation. Implement and maintain security baselines, configurations, and patch management processes. Support compliance with federal security standards (e.g., NIST, FISMA) and internal policies. Conduct vulnerability scans, analyze findings, and drive remediation with engineering teams. Manage identity and access controls, including privileged account management and MFA. Develop and update security documentation, runbooks, and standard operating procedures. Collaborate with Dev, Cloud, and Network teams to embed security into system designs. Support security audits, assessments, and ATO-related activities for federal systems. Mentor junior staff and contribute to continuous improvement of cybersecurity operations. Required Skills Network security administration (firewalls, IDS/IPS) Security Information and Event Management (SIEM) tools Endpoint protection and EDR platforms Vulnerability assessment and remediation Identity and Access Management (IAM) and MFANIST and FISMA compliance frameworks Incident detection, triage, and response Security hardening and configuration management Cloud security (AWS/Azure/GCP) fundamentals Scripting/automation (Power Shell, Python, or similar)

Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh

Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh

Job Description Job Description Experienced assessor sought to lead rigorous, evidence-based security assessments of cloud and hybrid systems supporting federal missions. Who we are looking for: Spry Methods is seeking an experienced Senior Cloud Security Assessor to join our team in the Washington, DC area. The successful candidate will bring extensive hands-on experience conducting independent security control assessments of cloud and hybrid systems, with particular depth in federal cloud environments. This role requires sound professional judgment, strong analytical skills, and a practical, common-sense approach to applying security requirements to system data, technical evidence, mission context, and actual risk. Key Responsibilities: • Lead full-cycle Security Assessment and Authorization (SA&A) activities for cloud, hybrid, and enterprise systems as an independent assessor. • Assess Microsoft Azure and Amazon Web Services (AWS) environments, including the implementation and operating effectiveness of administrative, operational, and technical security controls. • Retrieve and review FedRAMP authorization packages and supporting documentation, then analyze the package for applicability, control inheritance, residual risk, gaps, and customer responsibilities. • Conduct detailed analysis of assessment artifacts, including system security plans, policies, procedures, architecture and data-flow diagrams, inventories, configurations, logs, scan results, test outputs, and other supporting evidence. • Develop Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Required Evidence Lists, and Plans of Action and Milestones (POA&Ms). • Perform network, system, application, and NIST security control testing from administrative, operational, and technical perspectives. • Analyze vulnerability scan results, interpret risk, and use manual validation and corroborating evidence to distinguish actionable findings from false positives or unsupported conclusions. • Apply security requirements using practical judgment and data context rather than relying solely on checklist compliance. Evaluate whether evidence is relevant, reliable, sufficient, and representative of the assessed environment. • Clearly communicate findings, risk, root cause, and feasible mitigation options to technical teams, system owners, executives, and other assessment stakeholders. • Coordinate evidence requests, interviews, test activities, and assessment schedules with customer personnel and Information Systems Security Analysts. • Support security assessment program operations and contribute to consistent assessment methods, quality reviews, and defensible reporting. Minimum Qualifications • Active Certified Information Systems Security Professional (CISSP) certification is required. • At least eight years of demonstrated, hands-on experience conducting security control assessments, including substantial experience serving as an independent assessor for cloud and hybrid systems. • Extensive experience conducting independent security assessments of federal systems hosted in Microsoft Azure and AWS environments, including evaluation of security controls, architecture, inherited controls, customer-configured controls, and cloud-specific risks. • Demonstrated experience retrieving, navigating, and analyzing FedRAMP authorization packages and associated security artifacts. • Strong knowledge of federal Risk Management Framework (RMF) processes and NIST security control assessment practices. • Ability to analyze large volumes of technical and governance evidence, connect information across artifacts, identify inconsistencies, and reach clear, supportable conclusions. • Strong understanding of IT security requirements, technical countermeasures, vulnerability management, risk management, contingency planning, secure data communications, and system security architecture. • Excellent technical writing and stakeholder communication skills, with the ability to explain risk and recommended mitigation in clear, decision-oriented language. • Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or eight additional years of relevant specialized experience. • Experience using CSAM or a comparable governance, risk, and compliance platform. Preferred Qualifications • Certificate of Cloud Security Knowledge (CCSK), Certified Cloud Security Professional (CCSP), Certified Governance, Risk and Compliance (CGRC), or comparable cloud or assessment certification. • Experience supporting federal cybersecurity programs and conducting assessments, audits, or control implementation reviews in accordance with NIST Special Publications. • Experience assessing cloud service offerings that rely on FedRAMP-authorized services and documenting control inheritance and customer responsibility requirements. • DoD 8570/8140 IAM Level II eligibility or an equivalent qualification, when required by the customer environment. • Experience evaluating privacy and data protection considerations as part of security assessments. Success in this role: The successful assessor is technically credible, independent, and evidence-driven. They know when the data supports a finding, when additional validation is needed, and when a requirement must be interpreted in light of architecture, mission use, and actual exposure. They produce assessment results that are clear, consistent, defensible, and actionable. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.