12 jobs found

Job Description Job Description Asia's leading robotics solutions provider, automating enterprise supply chains since 2017. Botsync is a Singapore-based robotics and automation company building autonomous mobile robots (AMRs) and intelligent orchestration software that transform warehouse and factory operations across APAC. Founded in 2017, we design, manufacture, and deploy intelligent robots - including our MAG series - that handle material movement at scale, so humans can focus on higher-value work. Alongside our hardware, we've built syncOS, the industry's first no-code, vendor-agnostic orchestration and fleet management platform that coordinates robots, industrial systems, and workflows across modern facilities - turning weeks-long deployments into hours, without halting production or calling in specialists. Today we're still that young, passionate team - just with more like-minded people who've joined us along the way. We're all obsessed with one thing: making robotics and automation simpler, faster to adapt, and more reliable on real factory floors. If you love robots, hate inefficiency, and want to build things that actually run in production - you'll fit right in. Key Responsibilites: Own technical discovery, site assessment, solution design, and proposal development for Botsync's North American customer opportunities. Define and support pilots from technical scoping through testing, commissioning, acceptance, and handover to full deployment. Participate in customer discovery meetings and identify operational, technical, and integration requirements. Conduct site assessments covering workflows, material flow, layouts, throughput, payloads, safety constraints, infrastructure, and interfaces. Translate customer needs into solutions using Botsync AMRs, SyncOS, and third-party automation systems. Develop process flows, solution architectures, system layouts, cycle-time calculations, fleet sizing, and operating concepts. Prepare technical proposals, scopes of work, compliance statements, architecture diagrams, and customer presentations. Deliver SyncOS and AMR demonstrations during customer workshops, partner meetings, industry events, and ecosystem programs. Define pilot scope, success criteria, system requirements, timelines, responsibilities, and acceptance conditions. Support pilots through testing, commissioning, validation, customer acceptance, go-live, hypercare, and handover. Plan integrations with WMS, WES, ERP, MES, PLCs, conveyors, robotic arms, sensors, elevators, and third-party fleet systems. Work with interfaces and protocols including REST APIs, MQTT, TCP/IP, OPC UA, Modbus TCP, WebSockets, and VDA 5050. Coordinate technical validation, configuration, integration development, and costing with Botsync's global engineering team. Build reusable discovery, pilot, deployment, validation, and SI handover documentation; support 10-15 discovery sessions, qualify five pilot prospects, develop 2-3 viable proposals, and help execute the first two paid pilots. Requirements Essential: Bachelor's degree in Robotics, Mechatronics, Electrical, Mechanical, Computer Science, Industrial Engineering, or a related field. 5-8 years of experience in robotics, warehouse automation, material handling, industrial automation, or systems integration. Experience designing or deploying AMR, AGV, conveyor, robotic, WMS/WES, or manufacturing-automation solutions. Strong understanding of site assessment, process mapping, system sizing, workflow design, and technical proposal development. Working knowledge of PLC interfaces, industrial protocols, APIs, networking, and enterprise-system integration. Ability to interpret facility layouts, CAD drawings, process-flow diagrams, equipment specifications, and interface documents. Strong customer-facing communication and presentation skills across engineering, operations, IT, and management stakeholders. Ability to manage multiple opportunities with global engineering teams; travel up to 50% across the United States with periodic travel to Mexico; US work authorization required. Highly Desirable: Experience with multi-vendor orchestration or fleet platforms, AMRs, AGVs, industrial robots, conveyors, ASRS, WMS, WES, ERP, MES, and PLC systems. knowledge of Linux, networking, databases, APIs, cloud and on-premise infrastructure, industrial mobile-robot safety, paid pilots, system integrators, and AutoCAD. Benefits Competitive salary Comprehensive health benefits package Hustle of a young startup, always something to do and something to improve Opportunities for professional development and growth into management roles Collaborative and inclusive work environment

Job Description Job Description Title: Subject Matter Expert II Description: Solutions LLC is supporting a U.S. Government customer to support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. Solutions LLC is seeking an experienced and technically proficient Subject Matter Expert (SME) Hardware Reverse Engineer to provide specialized expertise in hardware reverse engineering focused on operational technology (OT) and industrial control systems. This position requires deep technical knowledge of proprietary hardware systems, exploitation methodologies, and defensive strategies to support forensic investigations of compromised edge devices and systems where threat actors have embedded malware deeply within hardware components. This position focuses on the analytical and investigative aspects of hardware forensics, with particular emphasis on operational technology and industrial control systems. The ideal candidates will have strong reverse engineering skills and deep understanding of threat actor methodologies targeting critical infrastructure. Eligibility: Must be a US Citizen Must have an active Secret clearance with the ability to obtain a TS/SCI Must be able to obtain DHS Suitability prior to starting employment 10+ years of experience in hardware reverse engineering or embedded systems analysis Responsibilities Include: Conduct comprehensive hardware reverse engineering of OT and ICS devices Analyze network-edge devices and embedded systems compromised by advanced threats Perform deep-dive analysis of proprietary hardware targeted by adversaries Conduct reverse engineering, failure analysis, vulnerability analysis, and other research techniques to understand complex hardware systems, assess the functionality of components, and identify exploitation risks Identify and extract deeply embedded malware from hardware components Reverse engineer firmware and low-level software on embedded devices Collaborate with Solutions LLC research teams to leverage cutting-edge analytical capabilities Utilize and enhance KI2 system emulation capabilities for hardware analysis Document exploitation methodologies and defensive countermeasures Develop standard operating procedures for hardware forensics workflows Train CSD analysts on hardware reverse engineering techniques Provide expert consultation on edge device security and vulnerabilities Support forensic investigations in environments lacking EDR visibility Analyze proprietary communication protocols and embedded systems functions Identify hardware backdoors, implants, and malicious modifications Collaborate with electrical engineers on chip-off forensics procedures Provide reach-back support to operational analysts during active investigations Contribute to research initiatives on emerging hardware threats Document technical findings and intelligence for stakeholder dissemination Required Skills: Deep expertise in OT/ICS hardware platforms and vulnerabilities Ability to analyze novel or proprietary systems with limited documentation Strong communication skills for explaining complex technical findings Experience working collaboratively in research-oriented environments Strong experience with firmware reverse engineering and analysis Proficiency with reverse engineering tools (IDA Pro, Ghidra, Binary Ninja) Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures Experience analyzing network-edge devices (routers, switches, firewalls, IoT devices) Knowledge of hardware debugging interfaces (JTAG, SWD, UART) Strong programming and scripting skills (Python, C, Assembly) Understanding of exploitation techniques targeting embedded systems Experience with malware analysis in hardware/firmware contexts Excellent analytical and problem-solving abilities Desired Skills: Experience supporting federal cybersecurity or critical infrastructure protection programs Experience performing inspection, imaging, decapsulation, deprocessing, and other activities related to hardware reverse engineering and exploitation in a state-of-the-art microelectronics exploitation laboratory Background in offensive security or penetration testing of OT environments Advanced certifications in reverse engineering (GREM, GXPN, or similar) Experience with SCADA, PLC, RTU, and other industrial control components Knowledge of critical infrastructure sector technologies (energy, utilities, manufacturing) Familiarity with supply chain security and hardware implant detection Experience with system emulation platforms and virtual hardware analysis Understanding of threat actor TTPs targeting OT and edge devices Background in electronics manufacturing or hardware security research Experience with chip decapsulation and invasive hardware analysis techniques Desired Certifications: DoD 8140 IAT Level III

Job Description Job Description BCMC is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. BCMC is seeking a Subject Matter Expert with hardware reverse engineering to support this critical customer mission. The Subject Matter Expert Hardware Reverse Engineers will provide specialized expertise in hardware reverse engineering focused on operational technology (OT) and industrial control systems. This position requires deep technical knowledge of proprietary hardware systems, exploitation methodologies, and defensive strategies to support forensic investigations of compromised edge devices and systems where threat actors have embedded malware deeply within hardware components. This position focuses on the analytical and investigative aspects of hardware forensics, with particular emphasis on operational technology and industrial control systems. The ideal candidates will have strong reverse engineering skills and deep understanding of threat actor methodologies targeting critical infrastructure. Responsibilities: - Conduct comprehensive hardware reverse engineering of OT and ICS devices - Analyze network-edge devices and embedded systems compromised by advanced threats - Perform deep-dive analysis of proprietary hardware targeted by adversaries - Conduct reverse engineering, failure analysis, vulnerability analysis, and other research techniques to understand complex hardware systems, assess the functionality of components, and identify exploitation risks - Identify and extract deeply embedded malware from hardware components - Reverse engineer firmware and low-level software on embedded devices - Collaborate with research teams to leverage cutting-edge analytical capabilities - Utilize and enhance KI2 system emulation capabilities for hardware analysis - Document exploitation methodologies and defensive countermeasures - Develop standard operating procedures for hardware forensics workflows - Train CSD analysts on hardware reverse engineering techniques - Provide expert consultation on edge device security and vulnerabilities - Support forensic investigations in environments lacking EDR visibility - Analyze proprietary communication protocols and embedded systems functions - Identify hardware backdoors, implants, and malicious modifications - Collaborate with electrical engineers on chip-off forensics procedures - Provide reach-back support to operational analysts during active investigations - Contribute to research initiatives on emerging hardware threats - Document technical findings and intelligence for stakeholder dissemination Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 10+ years of experience in hardware reverse engineering or embedded systems analysis - Deep expertise in OT/ICS hardware platforms and vulnerabilities - Ability to analyze novel or proprietary systems with limited documentation - Strong communication skills for explaining complex technical findings - Experience working collaboratively in research-oriented environments - Strong experience with firmware reverse engineering and analysis - Proficiency with reverse engineering tools (IDA Pro, Ghidra, Binary Ninja) - Deep understanding of ARM, MIPS, PowerPC, and other embedded processor architectures - Experience analyzing network-edge devices (routers, switches, firewalls, IoT devices) - Knowledge of hardware debugging interfaces (JTAG, SWD, UART) - Strong programming and scripting skills (Python, C, Assembly) - Understanding of exploitation techniques targeting embedded systems - Experience with malware analysis in hardware/firmware contexts - Excellent analytical and problem-solving abilities Desired Skills: - Experience supporting federal cybersecurity or critical infrastructure protection programs - Experience performing inspection, imaging, decapsulation, deprocessing, and other activities related to hardware reverse engineering and exploitation in a state-of-the-art microelectronics exploitation laboratory - Background in offensive security or penetration testing of OT environments - Advanced certifications in reverse engineering (GREM, GXPN, or similar) - Experience with SCADA, PLC, RTU, and other industrial control components - Knowledge of critical infrastructure sector technologies (energy, utilities, manufacturing) - Familiarity with supply chain security and hardware implant detection - Experience with system emulation platforms and virtual hardware analysis - Understanding of threat actor TTPs targeting OT and edge devices - Background in electronics manufacturing or hardware security research - Experience with chip decapsulation and invasive hardware analysis techniques Required Education: Bachelor's degree in Electrical Engineering, Computer Engineering or related discipline; Master's degree or PhD preferred Desired Certifications: - DoD 8140.01 IAT Level III - PMP Our Company Overview Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services to all of our clients. Benefits Extremely competitive salary 95% employer paid for employee medical, dental, & vision coverages 100% employer paid for employee life, STD & LTD disability coverages 401k with company match and profit sharing Flexible Spending Account (FSA) for dependent & health care 11 standard holidays & 3 weeks of annual leave ESS-3418 ESS-3417 Subject Matter Expert II - SME02 Powered by JazzHR z8ZBtpjvL4

Job Description Job Description Description The IT Business Analyst III - Application Support is the link between the people who run Trinidad Benham's business and the team that builds the software they depend on. This role owns complex areas of our ERP and business applications from end to end: working with operations, finance, and supply chain teams to understand how the work actually gets done, designing solutions that fit, writing the requirements engineers build from, and validating the result before it reaches production. The role also provides day-to-day support for those same applications. That means seeing the same problems users report and being in a position to fix the cause rather than the symptom and the patterns that surface in support are what drive the next round of improvements. Time is divided roughly 75% business analysis and 25% application support. This is not an order-taking role. When a request does not solve the underlying problem, the Business Analyst III is expected to say so, weigh the tradeoffs, and recommend a better approach. The role works independently on complex assignments, coaches newer analysts, and helps shape how business analysis is practiced across the team. Trinidad Benham is employee-owned, so the improvements this role delivers are improvements to a company its employees hold a stake in. Key Responsibilities Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions. Business Analysis Develop comprehensive knowledge of assigned business processes, operational workflows, and related ERP and application functionality. Independently lead business stakeholders through discovery of complex business needs, operational challenges, and improvement opportunities. Develop and recommend sound solution options-including application workflows, functionality, and user interface designs-that address complex business requirements and consider alternatives, tradeoffs, dependencies, and downstream impacts. Lead requirements gathering workshops and business discussions involving multiple stakeholders, processes, or functional areas. Analyze complex and cross-functional business problems and identify impacts across related processes and application domains. Identify opportunities to simplify, standardize, or redesign assigned business processes rather than replicating existing processes within new technology. Anticipate dependencies, risks, and unintended consequences of proposed business or application changes and recommend appropriate solutions. Resolve complex business problems independently, referring only the most complex or highest-risk issues to more senior Business Analysts or management. Requirements Development Independently translate complex business objectives into detailed functional requirements. Write clear and complete user stories with well-defined acceptance criteria for complex functionality. Develop process flows, workflow diagrams, wireframes, use cases, and supporting documentation. Lead functional solution design for assigned features and business processes. Ensure requirements are complete, testable, technically understandable, and aligned with broader business processes and product objectives. Identify and resolve requirement gaps, conflicting requirements, and cross-functional dependencies before development begins. Work with stakeholders and technical teams to evaluate alternative solutions and build alignment around recommended approaches. Maintain product documentation throughout the software lifecycle. Product Delivery Support Serve as the primary Business Analyst for complex features, business processes, or functional areas from discovery through implementation. Work closely with Software Engineers throughout development to answer functional questions, clarify requirements, and resolve complex functional issues. Provide functional guidance when development decisions require interpretation of business requirements, processes, or intended system behavior. Review completed functionality to verify it satisfies business requirements and the intended solution design. Identify requirement or solution gaps and recommend refinements as needed. Partner with Product Managers and/or Product Owners during backlog refinement to evaluate priorities, dependencies, risks, and business value. Coordinate with UX/UI, QA, other Business Analysts, and technical teams when functionality spans multiple application or business areas. Support production implementation and post-implementation validation of complex functionality. Assist in identifying implementation risks, business readiness considerations, and dependencies that could affect successful delivery. Communicate upcoming process and system changes to affected business users and support organizational change management for assigned functionality. Partner with business stakeholders to identify training needs and verify that documentation, job aids, and training materials accurately reflect delivered functionality. Monitor business adoption following implementation and identify where additional training, documentation, or functional changes are needed. Functional Testing Develop comprehensive functional test scenarios and detailed test scripts for complex features and business processes. Ensure testing addresses end-to-end business processes, integration points, exceptions, and downstream impacts where applicable. Execute functional testing against completed software. Validate that software performs according to documented business requirements and intended business outcomes. Identify, document, analyze, and appropriately prioritize software defects. Work with Software Engineers and QA to investigate complex defects, clarify expected behavior, and validate solutions. Lead and coordinate User Acceptance Testing (UAT) with business stakeholders for assigned functionality. Maintain reusable test cases that support future automated testing initiatives. Identify gaps in test coverage and recommend improvements based on business process risk, system dependencies, and prior defects. Reporting & Business Intelligence Collaborate with report developers to define reporting and analytics requirements for assigned business processes. Identify reporting, data, and analytics needs during requirements development rather than after implementation. Validate reporting accuracy, calculations, and data integrity against documented business rules. Apply consistent reporting standards and data definitions across assigned application areas. Application Support & Service Desk Resolve complex application and system issues for assigned business areas, referring only the most complex issues to more senior staff. Coordinate investigations to resolve information system issues, conducting research to understand, explain, and resolve technology problems. Communicate status and updates to users who have been or may be affected by an application problem, and follow up after resolution to confirm the issue is fully resolved. Use help desk tracking software to manage assigned requests and ensure response times are quick and effective in resolving user requests. Coordinate referrals to technical, professional, or vendor personnel depending on the repair, training, service, or software issue. Support onboarding procedures for new users of assigned applications, including access requests and initial orientation. Analyze support ticket trends to identify underlying process gaps, training needs, or application defects, and recommend improvements. Develop and maintain user-facing documentation, knowledge base articles, and job aids for assigned applications. Business Analyst Leadership & Collaboration Serve as a resource to less experienced Business Analysts on requirements development, solution design, stakeholder facilitation, and functional testing. Coach and mentor less experienced Business Analysts and share business, application, and Business Analysis knowledge across the team. Review requirements, user stories, solution recommendations, and test approaches developed by less experienced Business Analysts when requested, and provide constructive feedback. Facilitate alignment when requirements or priorities cross multiple business functions or application domains. May act as a functional lead on assigned projects or initiatives. Continuous Improvement Monitor user feedback and business outcomes following implementation and recommend appropriate enhancements. Identify opportunities to improve assigned business processes, application functionality, and user experience. Partner with Product Managers and/or Product Owners on backlog refinement and prioritization. Contribute to improvements in Business Analysis processes, documentation, requirements quality, solution design, and testing practices. Maintain comprehensive knowledge of assigned ERP and other applicable application functionality and emerging business technologies. Evaluate opportunities to use technology to simplify or automate assigned business processes. Utilize AI-assisted development and support tools responsibly to speed up and improve work product while maintaining accountability for solution quality and business outcomes. . click apply for full job details

Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Partner directly with cybersecurity engineering and DevSecOps prototyping teams to integrate security controls early in the development lifecycle. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 3-5+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $150,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA with hybrid/remote opportunities. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Bridge the gap between OffSec and development by applying software design best practices. Lead technical exchange meetings (TEMs), participate in Discovery & Framing workshops, and maintain effective communication with cross-functional teams and stakeholders. Act as the primary subject matter expert and lead developer for custom offensive tooling, integrating disparate capabilities into a cohesive, mission-ready platform. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 5-7+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Experience with GitLab CI/CD (pipeline design, runners, artifact management) and AWS Cloud services (EC2, VPC, IAM, S3). Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $160,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Job Description Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure Support incident response activities related to application security Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs) Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: Bachelor's degree in Computer Science, Cybersecurity, or a related field 3-5 years of experience in application security, with a strong focus on code security practices Experience in payments, money transmission, digital wallets, or related financial platforms Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10) Proficiency in Python or Rust and experience with secure coding practices in these languages Experience securing CI/CD pipelines and implementing DevSecOps practices Familiarity with software supply chain security and SBOM generation tools Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementing agentic and LLM-based solutions for security problems Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences PREFERRED SKILLS AND EXPERIENCE: Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus Relevant security certifications (e.g., BSCP, OSCP, OSWE) Experience managing bug bounty programs Background in data privacy and compliance relevant to financial products and cloud-native applications Experience with GitOps and infrastructure-as-code security Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. 1157, or (iv) Asylee under 8 U.S.C. 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Partner directly with cybersecurity engineering and DevSecOps prototyping teams to integrate security controls early in the development lifecycle. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 3-5+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $150,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Job Description Job Description Dark Wolf Solutions is seeking Security Control Assessor/Representatives (SCA/Rs) to lead security control assessments across high-priority projects. Working at the intersection of cybersecurity engineering, cloud architecture, and DevSecOps prototyping, you will evaluate security controls for cutting-edge AI/LLM technologies across multiple classification levels. This position is ideal for a pragmatic cloud assessor or SCAR who excels in fast-paced DevSecOps environments, understands AWS cloud security, and is eager to shape the cybersecurity posture of next-generation DoD AI capabilities.This position will be based out of Arlington, VA with hybrid/remote opportunities. Additional responsibilities include: Key Responsibilities Execute formal SCA/R duties. Lead security assessment efforts, establishing reusable security playbooks and assessment frameworks for rapid AI deployment into enterprise workflows. Evaluate technical control effectiveness across AWS cloud infrastructure, DevSecOps pipelines, microservices, containerized workloads, and GenAI/LLM application stacks. Bridge the gap between OffSec and development by applying software design best practices. Lead technical exchange meetings (TEMs), participate in Discovery & Framing workshops, and maintain effective communication with cross-functional teams and stakeholders. Act as the primary subject matter expert and lead developer for custom offensive tooling, integrating disparate capabilities into a cohesive, mission-ready platform. Review, author, and maintain assessment packages-including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms-tailored to rapid prototyping and AI systems. Assess technical security risks specific to AI/LLM implementations, such as API exposure, vector database access controls, model integration surface area, and software supply chain dependencies. Support continuous monitoring (ConMon), technical risk evaluations, and cloud architecture reviews across multi-tenant, multi-classification environments. Coordinate with Authorizing Officials (AOs), program managers, and engineering leads to deliver decision-ready risk briefings and ATO recommendations. Provide technical input and oversight for cybersecurity engineering and penetration testing activities across prototype projects. Required Qualifications Active Top Secret security clearance Current DoD 8570/8140 IAM Level II or Level III certification (e.g., Security+, CySA+, CISM, CISSP, CCISO, CAP/CISC) 5-7+ years of experience conducting security control assessments, compliance testing, or A&A/RMF activities for DoD or federal information systems Solid operational understanding of core AWS cloud services (EC2, S3, IAM, VPCs, Security Groups, Security Hub) and how security controls function within cloud-native and CI/CD pipeline environments. Experience with GitLab CI/CD (pipeline design, runners, artifact management) and AWS Cloud services (EC2, VPC, IAM, S3). Strong working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-37 (RMF), DoD Cloud Computing SRG, and FedRAMP baselines. Demonstrated experience writing and evaluating core RMF artifacts (SSPs, SAPs, SARs, POA&Ms) Exceptional written and verbal communication skills, with the ability to articulate technical risk clearly to executive stakeholders, Authorizing Officials, and engineering teams. Hands-on experience navigating government GRC repositories, such as eMASS or XACTA. Desired Qualifications Hands-on experience mapping security controls to the NIST AI Risk Management Framework (AI RMF), the OWASP Top 10 for LLM Applications, or the DoD Responsible AI (RAI) Guidelines. Familiarity evaluating secure design patterns for autonomous AI Agents (e.g., tool-calling permissions, sandboxing agent execution environments, prompt boundaries, and ReAct/LangGraph architectures). Experience assessing cloud-managed AI ecosystems and foundation model platforms (e.g., AWS Bedrock, AWS SageMaker, Hugging Face Enterprise, or self-hosted open-source models). Understanding of data protection, access controls, and boundary security for RAG pipelines and vector databases (e.g., OpenSearch Vector Engine, Pinecone, Milvus, or PostgreSQL pgvector). Familiarity evaluating risks unique to LLMs-including prompt injection, data poisoning, model inversion, insecure output handling, and open-source supply chain vulnerabilities in AI libraries (PyTorch, LangChain, LlamaIndex). Exposure to LLM guardrail platforms, evaluation frameworks, or AI security tools (e.g., Promptfoo, Garak, Giskard, NeMo Guardrails) used to test model robustness and output safety. Experience with cATO methodologies, Infrastructure as Code (IaC) templates (Terraform, CloudFormation), and container security (AWS EKS/ECS, Docker). Active AWS Certifications (e.g., AWS Certified Security - Specialty or AWS Certified Solutions Architect). Background or familiarity with offensive security, penetration testing The salary range for this position is estimated to be between $135,000.00 - $160,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.