1100 jobs found

We are seeking a highly motivated and experienced AI Consultant with a proven background in AI adoption to join our AI Center of Excellence (AI COE). This position is ideal for a senior, hands-on candidate who advises customers on how to apply AI to their business, turns that advice into working results, and reports to the AI COE Lead. The role supports Client business domains, primarily in an advisory capacity, across Security (enterprise security and cybersecurity), Manufacturing, Infrastructure (build and operations), and Connected Services, with Security having the highest demand for support, followed by Manufacturing. The successful candidate will use a strong technical background to run proofs of concept (POCs) and product evaluations hands-on, and translate the results into clear recommendations, while project delivery remains owned by the Delivery Teams. Essential Functions: Description / Essential Functions: AI Advisory Advise customers and domain teams on AI adoption, from identifying and prioritizing use cases to defining roadmaps, governance and success measures. Analyze customer business processes end to end, identify where AI and automation deliver measurable value, and build the business case (ROI, cost/benefit). Lead workshops and executive briefings, and present recommendations to senior customer stakeholders. Advise on responsible and secure AI adoption, including data protection, access control and AI-specific risks such as prompt injection and data leakage. Domain Support Security (highest demand): Prioritize AI adoption for patch management and system hardening, while also advancing AI-assisted security operations such as playbook automation, incident response and investigation. Manufacturing: Shape AI use cases around factory production processes and IoT/OT data, such as predictive maintenance, quality inspection and anomaly detection. Infrastructure: Support AI use cases in infrastructure build and operations as demand arises. Connected Services: Support AI use cases in connected services as demand arises. Hands-on POC and Product Evaluation Plan, build and run POCs, including scope, success criteria, test scenarios and evaluation reports. Lead hands-on evaluations of AI and automation products and platforms (for example, Tines for security workflow automation and Ignition for industrial/OT data), and deliver objective fit/gap findings and go/no-go recommendations. Design solution architectures for AI, GenAI and AI Agent solutions on Microsoft Azure or AWS, and provide technical input to proposals, POC plans and SoWs. Knowledge Assets and Partners Capture reusable assets such as use cases, reference architectures, evaluation reports, and demo/POC materials for horizontal deployment across domains and customers. Coordinate with external partners (cloud providers, AI and security vendors, system integrators) on joint demos, POCs and validations. Requirements Minimum qualification: Required Education & Experience: Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience. 8+ years of experience in IT consulting, solution architecture, or related technical roles, including at least 3 years of hands-on experience delivering AI, GenAI or intelligent automation solutions in production or customer POCs. Proven experience advising customers on AI adoption (use case identification, business case, roadmap and governance), credible with both business and executive stakeholders. Strong hands-on technical skills in GenAI and AI Agent technologies (for example, LLMs, RAG, prompt engineering, agent orchestration, Power Platform/Copilot Studio) and in cloud AI services on Microsoft Azure or AWS. Proven track record of running POCs and product evaluations hands-on, from planning through final recommendation. Experience applying technology or AI in at least one of Client focus domains, with enterprise security or cybersecurity strongly preferred and manufacturing as the next priority. Business-analyst capability: experience mapping end-to-end business processes and identifying where AI and automation pay off. Excellent communication, facilitation and presentation skills, and the ability to work independently in cross-functional, multicultural teams. (Candidate would be disqualified if they do not meet these requirements) Preferred Qualifications: Security domain experience, such as SOC operations, incident response, SIEM/XDR (for example, Microsoft Sentinel, Microsoft Defender or Splunk) and SOAR or security automation platforms such as Tines. Manufacturing domain experience, such as factory production processes (production, quality, maintenance, MES), IoT/OT data, and platforms such as Ignition or SCADA. Experience in infrastructure build and operations. Experience with connected services. Experience with AI Agent frameworks and protocols (for example, Semantic Kernel, LangChain/LangGraph, AutoGen or MCP) and AI platforms such as Azure AI Foundry, Azure OpenAI or Amazon Bedrock. Experience applying AI across the software development lifecycle (SDLC), including Requirements, Architecture, Story Creation, Development, and QEA Execution. Relevant certifications, such as Microsoft Azure AI Engineer, AWS Certified Machine Learning Engineer, AWS Certified Generative AI Developer, AWS Certified Data Engineer, CompTIA Security+, CISSP or CBAP. Experience working with Japanese companies or in a global, bilingual environment. Position Type/Expected Hours of Work: Hybrid work environment (2 days per week in the office). Contract-to-hire position. Occasional evening and weekend work may be required as job duties demand. Working hours are Monday Friday from 9AM 6PM. Travel: This position requires up to 10-20% travel.

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution. Technology is our Passion. People are our Purpose. We know tech, but we love people. NuAxis is home to thinkers and feelers, engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind. We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivated Corporate IT Systems Administrator for a full-time position. Position Summary: The Corporate IT Systems Administrator is responsible for the day-to-day administration, support, security, and maintenance of NuAxis Innovations' corporate technology environment. Reporting to the Director, Program Management Office, this position provides hands-on technical support across cloud infrastructure, networks, endpoints, corporate systems, websites, user access, software licensing, and IT assets at the Corporate Headquarters in Vienna, VA. This role serves as a primary internal technical resource for employees and helps ensure the company's technology environment is secure, reliable, properly licensed, documented, and aligned with organizational requirements. The successful candidate will independently resolve routine and moderately complex issues, identify recurring problems and risks, improve processes, and escalate advanced infrastructure or security matters when appropriate. Key Responsibilities Azure & Cloud Administration Support the administration, maintenance, and documentation of the company's Microsoft Azure environment. Monitor Azure resources, configurations, permissions, and usage; assist with cloud troubleshooting and optimization. Maintain appropriate administrative access and escalate architecture, security, or capacity concerns. Microsoft 365, Identity & Access Management Administer Microsoft 365 accounts, groups, licenses, permissions, and related services. Support Microsoft Entra ID administration, including authentication, multifactor authentication, role-based access, and account recovery. Provision, modify, review, and remove access based on approved business requirements and least-privilege principles. Monitor usage and licensing and identify opportunities to reclaim or optimize licenses. Network & Firewall Administration Administer and support corporate wired, wireless, remote-access, and VPN connectivity. Configure, monitor, troubleshoot, and maintain network equipment and services. Administer corporate firewall configurations and access in accordance with established security requirements. Maintain network and firewall documentation and coordinate escalated support with vendors or specialized resources. Endpoint, Imaging & Asset Management Configure, image, deploy, maintain, and support company computers and related equipment. Administer endpoints through Microsoft Intune and other approved management tools. Maintain standard device configurations and support operating system, application, security, and configuration updates. Manage the IT asset lifecycle, including inventory, assignment, transfer, recovery, replacement, secure disposition, warranty status, and refresh planning. Software & License Administration Administer corporate software subscriptions, licenses, user assignments, renewals, and administrative ownership. Provision and remove software access as employees join, leave, or change roles. Maintain accurate records of applications, licenses, administrative accounts, and assigned users. Coordinate software purchasing and renewal requirements with Finance, Procurement, and business owners. Website Administration Support the administration and maintenance of NuAxis internal and external websites. Coordinate website updates, permissions, availability, and technical troubleshooting with internal stakeholders and external vendors. Maintain appropriate administrative access and supporting technical documentation. Internal Customer Support Serve as a primary point of contact for internal IT support requests. Troubleshoot issues involving computers, software, Microsoft 365, accounts, permissions, connectivity, and corporate applications. Document, prioritize, resolve, and appropriately escalate service requests while communicating status and resolution clearly. Identify recurring issues and recommend permanent fixes, automation, documentation, or process improvements. Employee Lifecycle Support Provision employee accounts, equipment, software licenses, and approved access for onboarding. Modify access and licensing when employee responsibilities change. Disable accounts, revoke access, recover licenses, and coordinate equipment return during offboarding. Maintain records demonstrating completion of employee lifecycle activities. Security, Compliance & Process Documentation Implement established access-control, endpoint-security, and IT operating requirements. Identify and promptly escalate suspected security incidents, vulnerabilities, and configuration risks. Support remediation, audits, assessments, and evidence collection related to corporate IT systems. Maintain procedures, work instructions, configuration records, access records, inventories, and other required operational documentation. Support IT processes and documentation required by CMMI and other applicable management-system requirements. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline, or an equivalent combination of education, training, and relevant experience. Three to five years of relevant experience in IT systems administration, infrastructure administration, or corporate IT support. Comptia A+ Hands-on experience supporting Microsoft Azure and Microsoft 365 environments. Experience with Microsoft Entra ID, identity and access management, permissions, multifactor authentication, and role-based access. Experience administering Windows endpoints and endpoint-management technologies such as Microsoft Intune. Experience supporting corporate networks, VPNs, firewalls, and network troubleshooting. Experience imaging, deploying, maintaining, and troubleshooting computers and peripherals. Experience with IT asset management and software-license administration. Demonstrated learning agility, including the ability to quickly understand new technologies, troubleshoot unfamiliar systems, and independently develop proficiency with evolving tools and platforms. Strong troubleshooting, analytical, organizational, and technical-documentation skills. Ability to communicate technical issues clearly to technical and nontechnical audiences, manage competing priorities, protect sensitive information, and escalate issues appropriately. Preferred Qualifications Experience supporting CMMI requirements, processes, documentation, or assessments. Current Microsoft Azure certification, such as Microsoft Certified: Azure Administrator Associate. Additional Microsoft 365, endpoint administration, networking, or security certification. Experience using Nextthink for digital employee experience, endpoint visibility, or IT operations. Familiarity with Barracuda Backup or comparable backup, recovery, and disaster-recovery technologies. Familiarity with Drupal administration, including user access, modules, updates, configuration, and technical troubleshooting. Experience working in a government contracting environment. Experience supporting internal and external corporate websites. Core Technologies & Areas of Responsibility Microsoft Azure • Microsoft 365 • Microsoft Entra ID • Microsoft Intune • Nextthink • Windows • Networking • Firewalls and VPN • Endpoint Management • IT Asset Management • Software Licensing • Website Administration • Identity and Access Management Success in This Role Employee accounts, equipment, access, and licenses are provisioned and removed accurately and on time. Hardware, software, and licensing inventories are complete, current, and reconcilable to employee records. Endpoints, networks, and cloud services are actively administered, documented, and supported. Internal support requests are resolved promptly or escalated with clear documentation and ownership. Administrative access and security-related issues are identified, documented, remediated, or escalated appropriately. Recurring IT activities become more standardized, measurable, and automated over time. Working Relationships This position works closely with the Program Management Office, People & Culture, Information Security, Finance and Procurement, program and delivery leadership, employees and managers, and external technology vendors and service providers. Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now Our Profile: We are an IT company with a unique mission-to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed. Time after time, programs failed because the focus was on the tools and products and not the people using them. Learn More. NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!

At Credit Acceptance, we are building on the foundation of a successful business while investing in the future through technology, data, AI, and continuous improvement. As we continue to evolve, our Team Members play an active role in improving experiences, driving meaningful change, and shaping the future of our business. We foster an environment where people are empowered to contribute ideas, develop their careers, make an impact, and help lead our continued transformation. Our Engineering teams are helping shape the future of Credit Acceptance through innovation. Team Members collaborate across the organization to solve complex challenges, build impactful solutions, challenge the status quo, and support informed business decisions. We value curiosity, continuous learning, and new ideas from people who are passionate about driving modernization and meaningful business impact. Dealers and customers trust Credit Acceptance with their financial data. Regulators expect us to prove that trust is earned. As the Vice President, Engineering - Security, Compliance and Trust (CISO), you will own how Credit Acceptance stays secure and compliant as we move to the cloud and put AI agents to work across the business. You will set the security strategy, lead the team that delivers it, and report on it to executive leadership and the Board. You are the company's designated CISO for regulatory purposes. You report to the CTO and have direct access to the Audit Committee, including a private session at least once a year. You will lead a team across security operations, security engineering (application, cloud, identity and AI security) and governance, risk and compliance. You will work closely with Engineering, Legal, Risk and Fraud so the secure path is also the fast path. Agents are a new kind of actor in our environment. They have their own identities and make their own decisions. You will own the controls and evidence that let us adopt them quickly and keep the trust of our customers and regulators. Hybrid from Southfield, MI; Bellevue, WA; or the San Francisco Bay Area. Outcomes and Activities Own the enterprise information security strategy, tied to business goals, regulatory requirements and Engineering's AI and modernization plans. Own security for the move from on-premises data centers to AWS. Every workload lands in a secure, standard landing zone, and we modernize or retire legacy technology. Lead vulnerability and exposure operations. Critical findings are fixed in hours, with AI-assisted prioritization and a person accountable for every decision. Own identity and privileged access for people, services and agents. Own data protection and privacy: classification, handling standards and controls on where sensitive data can go. Review privacy engineering with product and engineering teams so privacy-by-design holds across the product lifecycle, including how AI systems use and keep data. Manage third-party and vendor cyber risk, from due diligence through ongoing monitoring, including security service providers, auditors and penetration testers. Any partner that builds or runs AI for us meets the same controls as our own teams. Lead threat detection and incident response, including playbooks for compromised or misbehaving agents and executive tabletop exercises. Defend against AI-enabled attacks such as deepfake impersonation and synthetic identity fraud, with our fraud and operations teams. Define how AI agents are secured, with Engineering's architecture and platform leaders. Each agent is a first-class identity with least-privilege access. Govern how agents call tools and data, including Model Context Protocol servers, and set policy for what an agent may decide and what stays with a person. Test AI systems and agents before release and continuously in production for prompt injection, tool misuse and data exfiltration. Every agent has an audit trail and can be suspended. Keep a living inventory of AI systems, agents and the AI features inside the tools we buy, including unsanctioned use. Set acceptable-use, data-handling and third-party AI standards aligned to NIST AI RMF and ISO/IEC 42001. Build security into how software is specified, generated, tested and deployed, including AI-assisted development. Automated gates replace manual reviews. Lead compliance with the obligations of a public consumer lender: GLBA, NYDFS Part 500, SOX IT general controls, PCI DSS, state privacy laws and SEC cybersecurity disclosure. That includes audit and examiner response, and systems that produce evidence automatically, down to a record an examiner can follow of what an agent saw and what it changed. Report to the Board: regular updates, the annual NYDFS Part 500 CISO report to the Board and the annual NYDFS certification, using a small set of metrics that drive decisions. Lead the Company's Information Security Compliance Committee, which meets at least quarterly with the Company's Executive Leadership Team. Build and develop the security team: hiring, developing people, building the skills to secure and use AI, and a security-aware culture across Engineering and the business. Competencies Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer's shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience. Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions. One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively. Owner's Mindset: Owner's Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business. Requirements Bachelor's degree (computer science or a related field preferred). 10+ years in information security, compliance or a related field. 10+ years leading an information security, compliance or risk team. Regulatory compliance experience in financial services, such as GLBA, NYDFS Part 500, SOX and PCI DSS. Experience leading business continuity and cyber incident response, including executive tabletop exercises and response to a significant incident. Strong familiarity with NIST CSF, ISO 27001/27002 and SOC 2. Strong knowledge of security architecture for cloud-native environments: identity and access management, encryption, network and endpoint controls and vulnerability management. Experience building security into CI/CD and software delivery. Practical experience securing AI-enabled systems or AI-assisted development in production, including identity and access, data protection and testing. Experience reporting security and risk to executive leadership and a Board. Preferred Master's degree. Financial services, fintech or consumer lending experience. AWS and Databricks security at production scale, including securing a migration from on-premises infrastructure. Agentic AI in production: agent identity, governed tool access such as Model Context Protocol, runtime controls and agent-specific incident response. AI-assisted detection, triage and response in a security operations center, with human oversight. SEC cybersecurity disclosure experience as the security leader of a public company. Risk assessment for AI systems and third-party AI vendors. CISSP, CISM or an equivalent security certification. Knowledge and Skills Architecture: Ability to design security architecture that is built in by default and enforced through automation, not manual review. AI and Agent Security: Working knowledge of how agents are attacked and how they fail (prompt injection, tool misuse, identity and privilege abuse, memory poisoning) and the controls that contain them, drawing on the OWASP Top 10 for Agentic Applications, NIST AI RMF and ISO/IEC 42001. Risk Judgment: Ability to weigh security risk against business value, decide what an agent or a team may do on its own, and explain the tradeoff and the evidence plainly. Holds the higher bar and says so. Executive Communication: Ability to turn technical and AI risk into clear decisions for executives and the Board. Leadership and Influence: Ability to build a strong team, challenge the status quo, and earn trust across Engineering, Legal, Compliance, Risk and the business without relying on authority. Target Compensation: This position offers a competitive base salary, with a range of $300,000 - $400,000. This position is eligible for equity and annual cash bonuses. Final compensation within the range is influenced by many factors including assigned hub location, role-specific skills, depth and experience level, industry background, relevant education and certifications. This position follows a hybrid work model, offering two work-from-home days and three standard in-office days each week with the team and key stakeholders at a local office. INDENGLP Benefits Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/vision and many nonstandard benefits that make us a Great Place to Work Our Company Values: To be successful in this role . click apply for full job details

DCS has an exciting opportunity for a Principal Test Engineer to support the Command, Control, Communications, and Battle Management (C3BM) at Hill AFB in Ogden Utah. C3BM functions as the Air Force's technical, acquisition and sustainment experts providing unique and comprehensive support to the warfighter. The ADE Division is responsible for a vast array of USAF systems to include Electronic Warfare, Range Systems, Range Instrumentation, Air Combat Training and Aircrew Readiness, Command and Control Systems, Advanced Radar Threat Systems, Combat Survivor Evader Locator, P5 Combat Training Systems, Black Switch and Legacy Voice Systems. Furthermore, the ADE Division provides support to depot level sustainment and maintenance efforts, FMS, U.S. Army, Navy, Pacific Air Forces, Air Combat Command (ACC), Air Force Materiel Command (AFMC), and Air Education and Training Command (AETC) on a continuous basis. This is a full-time position located at Hill AFB. Essential Job Functions: Duties include, but not limited to: Support the entire testing lifecycle including test concept and methodology development, detailed test planning, execution, data analysis, and end-user operational testing. Develop and document test plans, criteria, specifications, cost estimates, and technical reports. Apply Design of Experiments (DoE) techniques to optimize test strategies and resource use. Evaluate test environments for configuration accuracy, operational relevance, and availability for fault testing and verification. Analyze and interpret complex data to assess software/hardware performance and draw meaningful conclusions. Provide detailed findings, analysis, and recommendations to program leadership and test teams. Identify schedule conflicts between multiple test events/releases and support deconfliction and prioritization. Apply engineering judgment and develop innovative solutions to address test and evaluation challenges. Independently manage tasks and deliverables, with only limited supervision and periodic detailed review. Travel: 5% Conus Required Skills: Due to the sensitivity of customer related requirements, U.S. Citizenship is required. Must hold an active Secret clearance. High School Diploma plus 23 years of experience or a Bachelors degree plus 15 years of experience. Desired Skills: Bachelor's Degree in a related field and 20 years of experience in the respective technical/professional discipline being performed, 10 of which must be in the DoD OR 30+ years of directly related experience, 12 of which must be in the DoD. Technical Skills: • Extensive experience supporting the full test and evaluation lifecycle, including test concept development, test planning, execution, data collection, analysis, verification, validation, and operational testing. • Strong knowledge of DoD test and evaluation requirements, standards, and acquisition frameworks, including DoDI 5000.02, AFI 63-, and lifecycle testing activities supporting defense acquisition programs. • Expertise in developing comprehensive test plans, procedures, evaluation criteria, technical reports, schedules, and cost estimates to support program objectives and milestone decisions. • Proficient in applying Design of Experiments (DoE) methodologies to optimize test strategies, improve data quality, reduce risk, and maximize resource utilization. • Skilled in evaluating and validating test environments and system configurations, ensuring operational relevance, accuracy, and readiness for verification and fault-testing activities. • Advanced ability to analyze complex software, hardware, and system-performance data, identify trends, assess effectiveness, and provide actionable recommendations to stakeholders. • Experience supporting systems acquisition and product lifecycle activities, ensuring test strategies align with program schedules, technical requirements, and mission objectives. Interpersonal Skills: • Demonstrates exceptional communication and coordination skills, effectively presenting technical findings, risks, and recommendations to program leadership, engineers, and operational stakeholders. • Excels in cross-functional collaboration, working closely with engineering, acquisition, cybersecurity, logistics, software, and operational test organizations to achieve testing objectives. • Applies strong problem-solving and critical-thinking abilities to resolve complex test challenges, evaluate alternatives, and recommend effective courses of action. • Exercises sound engineering judgment and innovation when addressing emerging technical issues, schedule conflicts, and test execution constraints. • Possesses a strong customer-focused support mindset, ensuring testing activities provide meaningful insights that support mission success and informed decision-making. • Capable of independently managing multiple priorities, coordinating competing test events, and maintaining focus in fast-paced, high-visibility environments. • Demonstrates leadership through initiative, accountability, adaptability, and a commitment to delivering high-quality technical products with minimal supervision.

Summary We are seeking a highly technical, hands-on IT Security Engineer to help build and mature the cybersecurity program of a food & beverage manufacturing organization. This role is ideal for a driven, detail-oriented engineer who enjoys hardening systems, securing networks, performing technical investigations, and working side-by-side with IT and OT teams to improve our security posture. You will be the primary "hands-on keyboard" technical resource supporting cybersecurity initiatives and will partner closely with our IT teams, and our MSSP SOC. Key Responsibilities Review alerts and escalations from the MSSP to validate severity, impact, and required actions. Conduct technical investigation steps and support containment, eradication, and recovery activities. Harden and secure Windows servers, Windows clients, virtual machines, and other IT infrastructure. Ensure secure configuration, deployment, and management of endpoint protection (SentinelOne). Collaborate with the IT infrastructure team to ensure secure configurations across firewalls, switches, and network segments. Support network security improvements such as segmentation, least privilege network access, and secure remote access. Perform firewall rule reviews and contribute to network hardening efforts. Support secure configuration of identity platforms. Enforce role-based access controls, privileged access hygiene, and identity hardening standards. Work with the MSSP to ensure vulnerability scans are properly executed and tuned. Validate findings, prioritize risk, and coordinate remediation work with system and network teams. Lead patching and configuration remediation efforts for high-risk assets. Work with developers to identify, prioritize, and fix security issues (OWASP Top 10). Conduct security reviews of applications and servers. Collaborate with OT engineers to understand legacy systems, PLCs, and plant-floor constraints and assist in implementation of OT network segmentation and ICS security controls. Actively monitor emerging threats affecting OT and IT environments. Conduct periodic threat modeling for high-risk applications and systems. Required Qualifications 5-8+ years of experience in IT security engineering, SOC, or incident response roles. Strong hands-on experience with: Windows Server and client security; Network and firewall security; Endpoint security tools; MFA and identity systems. Strong knowledge of Active Directory and identity security best practices. Practical experience hardening servers, endpoints, and network devices. Familiarity with log analysis and security event triage. Comfort working directly with SOC alerts and vulnerability scan reports. Understanding of security frameworks (NIST CSF, CIS Controls, SOC 2). Strong documentation habits and process-oriented mindset. Preferred Qualifications Experience in manufacturing, industrial, or OT/ICS environments. Working knowledge of PLCs, or ISA/IEC 62443 principles. Familiarity with Office 365 security configuration and best practices. Experience automating workflows using PowerShell or Python. Exposure to segmentation projects or Zero Trust principles. Relevant certifications: GSEC, GCED, GCIH, GDSA, GDAT, GICSP, GCIP, and GRID Work Authorization Notice: Please note that we do not provide visa sponsorship or immigration support for this position. Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship. The salary for this position is determined by a combination of experience, skills, and education level. The compensation range is $120K-130k annually.

Job Title: Cybersecurity Operations Lead - SOC & Incident Response Position Overview Take a leadership role in advancing enterprise cybersecurity operations, strengthening threat detection and response capabilities, and improving Security Operations Center (SOC) maturity. This opportunity involves leading cybersecurity operations initiatives, overseeing incident response activities, mentoring SOC analysts, and implementing continuous improvements across security processes and procedures. The role works closely with IT, application development, business, and compliance teams to strengthen enterprise security capabilities across on-premises and cloud-based environments. The ideal candidate brings extensive IT experience, enterprise infrastructure design and deployment expertise, and a strong background in SOC leadership, cyber threat response, and security operations. What You'll Do / Key Responsibilities Drive innovation and continuous improvement in Security Operations Center capabilities. Serve as an escalation point while providing leadership, mentorship, and guidance to SOC Analyst I, II, and III. Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution. Lead and mentor Security Operations analysts, ensuring they are well-trained and motivated. Assist with staffing Security Operations personnel. Perform threat identification and analyze risks to the enterprise. Assist in implementing and advancing continuous monitoring and incident response processes and procedures. Review and refine security playbooks, processes, and alerts to identify opportunities for improvement. Assist with advanced threat hunting to identify potential attacker presence within the environment. Collaborate with IT, application development, and business teams to advance enterprise security initiatives. Lead security team projects and continuous improvement initiatives. Collaborate with compliance teams to maintain audit-ready status. Required Qualifications 10+ years of IT experience working with Windows, Linux, and web-based applications. 5+ years of experience with enterprise infrastructure design and deployment. 5 years of related experience in a SOC Lead capacity. Must possess any one of the following certifications: Certified Information Systems Security Professional (CISSP). GIAC Certified Incident Handler (GCIH). Security+. Ability to communicate clearly, both verbally and in writing, and interact effectively with internal and external vendors, project team members, management, and technical and non-technical stakeholders. Experience organizing technical information and communicating it appropriately to different audiences. Ability to work independently and collaborate with multiple teams and vendors. Ability to multitask, prioritize tasks, and meet deadlines. Intermediate to advanced skills in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio. Strong attention to detail and ability to maintain a broader organizational perspective. Experience evaluating and selecting products and vendors to support initiatives. Ability to adapt to changes and constructive feedback in a fast-paced environment. Strong understanding of cloud service provider offerings and capabilities. Preferred Qualifications Experience identifying, testing, and leading remediation efforts related to OWASP Top Ten and CWE/SANS Top 25 Most Dangerous Software Errors. Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements. Prior experience working with eGRC systems. Bachelor's degree in Computer Science, Information Technology, Engineering, or a similar discipline. Cloud certification (e.g., CASP+). Network security certifications. What Makes HTC A Great Place To Build Your Future HTC Global Services wants you to join our team. Come build new things with us and advance your career. At HTC Global, you'll collaborate with experts, work alongside clients, and be part of high-performing teams driving success together. You'll have long-term opportunities to grow your career and develop skills in the latest emerging technologies. At HTC Global Services, our employees have access to a comprehensive benefits package. Benefits can include Group Health (Medical, Dental, and Vision), Paid Time Off, Paid Holidays, 401(k) matching, Group Life and Disability insurance, Professional Development opportunities, Wellness programs, and a variety of other perks. Our success as a company is built on inclusion and diversity. HTC Global Services is committed to providing a workplace free from discrimination and harassment, where every employee is treated with dignity and respect. We celebrate differences and believe that diverse cultures, perspectives, and skills drive innovation and success. HTC is an Equal Opportunity Employer and a proud National Minority Supplier. We seek to empower each individual, fostering an environment where everyone feels valued, included, and respected.

Lead the design, integration, commissioning, and ongoing support of industrial controls and automation systems at a manufacturing plant. Develop control architectures and software, coordinate equipment and system integration, oversee testing and startup, ensure safety and compliance, and prepare documentation and training for long-term site support. Responsibilities Lead controls, instrumentation, automation, and system integration from design through commissioning and operational handoff. Develop control architectures, functional requirements, interface specifications, control narratives, and technical execution plans. Coordinate machine-to-machine interfaces, operating sequences, interlocks, fault handling, and recovery strategies. Provide technical direction during design reviews and guide suppliers, system integrators, and cross-functional plant teams. Develop, review, and troubleshoot PLC, HMI/SCADA, motion, vision, instrumentation, and supervisory-control applications. Lead testing, startup, documentation, training, and lifecycle support while ensuring safety, quality, cybersecurity, and regulatory compliance. Required Skills PLC development and troubleshooting HMI/SCADA development and troubleshooting Industrial control system architecture Machine-to-machine integration Instrumentation and supervisory controls Motion control Machine vision systems Factory and site acceptance testing Commissioning and startup Industrial control cybersecurity

Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI11172d4500bc-5088

Job Description Job Description DPP is seeking a Junior Network Security Analyst for an opportunity with our client in Columbia, SC. Work Location: Onsite in Columbia, SC Duration: 12 months with possibility of extension Terms: W2 Contract Candidate Location: Must be a SC resident; no relocation Position Summary: The Office of Cybersecurity ensures the confidentiality, integrity and availability of systems and services. Strong candidate must have hands-on experience with: Data network design best practices Routing and switching protocols Network security best practices On-premises and/or cloud networking environments This role requires someone who can contribute independently on technical tasks and support more senior analysts on complex initiatives. This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced professionals, and we are seeking individuals who are highly productive, flexible, and comfortable working in an environment where priorities can shift. Team members are expected to contribute with minimal supervision. Candidates who enjoy complex, change-driven projects and collaborating with motivated colleagues will find this position appealing. Responsibilities: Assist in maturing network security and compliance solutions. Investigate and respond to daily network alerts. Perform network security assessments for proposed firewall and infrastructure changes. Conduct technical analysis for network security planning and engineering. Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency. Analyze on-premises and cloud networks for potential threats. Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services. Monitor emerging threat vectors and recommend countermeasures. Collaborate with other areas of the agency to implement security controls. Support cloud and on-premises network changes and enhancement projects. Ensure compliance with ARC-AMPE, HIPAA and SCDIS-200. Assist with KPI creation and trend report monitoring. Participate in firewall configuration reviews and ruleset recertification. Provide guidance on best practices to technical teams. Perform additional duties as assigned. Required Qualifications: Approximately 3-5 years of hands-on experience in network design, implementation, or support. Hand-on experience in IT security or system administration. Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models. Ability to analyze logs, alerts, and network telemetry. Proficiency with Microsoft Office tools. Security Program Experience: Strongly desired experience includes: CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks Performing repeatable security processes supporting compliant enterprise architectures Supporting security considerations for multi-tenant cloud environments and vendor integrations Technical Experience: Candidates should have hands-on experience with: Secure network design principles Windows, macOS, and Linux operating systems Switching and Routing Enterprise Firewalls Network auditing IDS/IPS platforms Network security monitoring SIEM platforms such as QRadar, Splunk (Preferred) Vulnerability scanning tools (Nessus, Qualys, etc.) Cloud Infrastructure Security (Preferred) Required Education & Certifications: Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field; or equivalent experience. A network security centric certification such as PCNSE or CCNA. Preferred Qualifications: Experience working in regulatory environments. Experience supporting health IT or state government. Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards. Cloud network security controls (Azure or AWS). Preferred Certifications: CISSP or Security+. Authorized US Worker - US Citizens and those authorized to work in the US are encouraged to apply. We are unable to sponsor at this time. Interested? Learn more: Click the apply button to learn more about this position ().

Job Description Job Description Requisition Name: Security Architect - Consultant - SIEM Engineer Work Address - Remote Work - 100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.). Duration of the Contract: 12 Months Possibility for Extension: Yes Security Architect - Consultant - SIEM Engineer Daily Duties and Responsibilities This position is 100% remote and participates in a monthly on-call rotation supporting a 24x7 Security Operations Center serving multiple state agencies. Additional after-hours work may be required as needed. Enterprise SIEM and XDR Primarily assist in the planning, design, deployment, administration, and operational support of enterprise SIEM and XDR capabilities, including: Palo Alto Cortex XSIAM and Cortex XDR platform engineering, configuration, optimization, and troubleshooting Multi-tenant agency onboarding, tenant-specific configuration, role-based access, data segregation, dashboards, and reporting Detection engineering, correlation rules, analytics, threat-hunting queries, watchlists, suppression logic, and false-positive reduction Log Management and Security Data Pipelines Secondarily assist in the planning, design, deployment, and operational support of log management and security data pipelines, including: Cribl data modeling, log pipeline design, routing, parsing, normalization, enrichment, filtering, replay, and ingestion Onboarding and health monitoring of cloud, endpoint, network, identity, SaaS, and custom application telemetry Log volume, retention, performance, and cost optimization while maintaining security and compliance requirements Integrations with ticketing, case management, notification, identity, threat intelligence, and other enterprise systems as needed Additional Responsibilities Develop, test, deploy, and maintain automated response workflows and playbooks for enrichment, triage, containment, escalation, notifications, case management, and incident response. Create and maintain operational runbooks, standard operating procedures, escalation matrices, troubleshooting guides, architecture diagrams, data-flow documentation, use-case catalogs, and analyst knowledge articles. Support Tier 1 through Tier 3 SOC analysts and incident responders through platform troubleshooting, detection tuning, threat hunting, technical escalation, knowledge transfer, and shift handoffs. Monitor and report on ingestion health, platform availability, alert volumes, detection coverage, false positives, service levels, mean time to detect, mean time to respond, and tenant-specific operational metrics. Ensure high availability, resilience, backup, recovery, lifecycle management, and controlled change processes for SIEM, XDR, and supporting log pipeline services. Collaborate with security architects, engineers, analysts, and agency stakeholders to align solutions with business goals, industry-standard frameworks, regulatory requirements, and organizational risk tolerance. Required Skills (Ranked in Order of Importance) Hands-on Palo Alto Cortex XSIAM and Cortex XDR design, implementation, administration, and operational support. Experience engineering and supporting SIEM capabilities for multi-tenant environments and 24x7 Security Operations Center operations. Experience developing and tuning detections, correlation rules, analytics, threat-hunting queries, dashboards, reporting, and alert suppression logic. Strong experience creating and managing complex playbooks. Cribl data modeling, log pipeline design, parsing, normalization, enrichment, routing, and ingestion. Experience developing automation, integrations, playbooks, and response workflows using scripting languages such as Python and Bash. Experience onboarding and troubleshooting telemetry from cloud, endpoint, network, identity, SaaS, Linux, Windows, and custom application sources. Strong understanding of enterprise security architecture, incident response, networking, access control, secure system design, and industry-standard cybersecurity frameworks. Preferred Skills (Ranked in Order of Importance) Hands-on experience operating Cortex XSIAM and Cortex XDR in a large, multi-tenant environment. Hands-on Cribl administration, data modeling, and log pipeline optimization experience. Experience supporting Tier 1 through Tier 3 SOC analysts, threat hunting, incident response, and 24x7 operational handoffs. Familiarity with industry-standard security and compliance frameworks and experience developing playbooks, runbooks, procedures, and technical documentation. Required Education and Certifications Bachelor's degree in an Information Technology or Information Security-related field. Eight years of relevant work experience may be substituted in lieu of education. Five years of experience supporting large IT environments and/or system deployments. Preferred Education and Certifications CISSP, Security+, or GIAC certification. Palo Alto Cortex, Cribl, or other relevant SIEM/security platform certification.

Job Description Job Description COMPANY OVERVIEW XCEL Engineering, Inc. is an award-winning small business that provides trusted information technology, engineering, consulting and project management solutions and services to federal agencies and organizations. Originally founded in 1971 by professional engineers at the University of Tennessee, XCEL was acquired in 2003 by U.S. Army and Navy veterans and in 2023 became a MartinFed company. XCEL Engineering is a part of IT Lab Partners (ITLP) which was created to support a leading research facility in the East Tennessee region in recruiting the best and the brightest technical talent. Considering joining our impressive team today! JOB OVERVIEW We are seeking a highly skilled and experienced Senior Cybersecurity Engineer - Vulnerability & Security Monitoring to support enterprise cybersecurity operations across complex, mission-critical computing environments. This position is responsible for administering, maintaining, and enhancing enterprise vulnerability management, security monitoring, and event logging capabilities to ensure the confidentiality, integrity, and availability of information systems. The ideal candidate will bring extensive hands-on experience with Tenable Security Center, enterprise SIEM platforms, vulnerability assessment, log management, and security automation, along with a strong understanding of federal cybersecurity requirements. This role requires a technically proficient engineer capable of troubleshooting complex security technologies, analyzing vulnerabilities and security events, developing automated solutions, and collaborating with cross-functional teams to strengthen the organization's overall security posture across classified and unclassified environments. ESSENTIAL FUNCTIONS Vulnerability Management & Assessment Administer, configure, maintain, and optimize enterprise vulnerability management platforms, primarily Tenable Security Center (Tenable.sc). Manage vulnerability scanning infrastructure, including scanner deployment, scan policies, scheduling, credential management, plugin updates, and operational troubleshooting. Conduct comprehensive vulnerability assessments across diverse enterprise computing environments, including servers, networks, applications, and infrastructure systems. Analyze vulnerability scan results to validate findings, identify false positives, assess severity, and prioritize remediation efforts based on risk and operational impact. Troubleshoot failed scans, scanner connectivity issues, credential failures, performance limitations, and detection anomalies. Collaborate with system administrators, infrastructure teams, and security personnel to develop remediation strategies, track vulnerabilities, and verify corrective actions. Engage directly with vendors, including Tenable, to resolve technical issues, investigate inaccurate findings, and validate software updates or detection improvements. Develop vulnerability reports, dashboards, and metrics to communicate security risks, remediation progress, and overall program effectiveness. Security Information & Event Management (SIEM) / Logging Administer, configure, maintain, and enhance enterprise SIEM and centralized security logging platforms. Design, implement, and troubleshoot log collection architectures, event collectors, processing pipelines, indexing systems, and data ingestion workflows. Develop and maintain ETL (Extract, Transform, Load) processes to collect, normalize, transform, and integrate security event data from multiple enterprise sources. Integrate logs from operating systems, network devices, applications, security tools, and infrastructure platforms to improve enterprise security visibility. Monitor and troubleshoot log ingestion failures, parsing errors, data quality issues, and system performance concerns. Collaborate with system owners and cybersecurity teams to ensure logging and auditing practices align with NIST SP 800-53 Audit and Accountability (AU) controls across multiple classified enclaves. Identify gaps in logging coverage and implement enhancements to improve threat detection, incident investigation, and security monitoring. Develop and optimize security event searches, correlation rules, dashboards, and reporting capabilities to support threat hunting and incident response. Coordinate with software and technology vendors to resolve SIEM platform issues and improve logging capabilities. Required Qualifications: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline, or an equivalent combination of education and relevant experience. Significant professional experience in cybersecurity engineering, vulnerability management, security monitoring, or enterprise security operations. Demonstrated hands-on experience administering and troubleshooting Tenable Security Center (Tenable.sc) or comparable enterprise vulnerability management platforms. Strong understanding of vulnerability scanning methodologies, credentialed scanning, vulnerability validation, risk assessment, and remediation processes. Hands-on experience administering, configuring, or supporting enterprise SIEM and centralized logging solutions. Experience with log collection, ingestion pipelines, event processing, indexing, parsing, and security event analysis. Knowledge of ETL processes, data integration, and security log normalization. Experience supporting security monitoring, incident response, threat analysis, or security investigations. Familiarity with NIST SP 800-53, particularly Audit and Accountability (AU) controls, and federal cybersecurity compliance requirements. Experience troubleshooting complex technical issues across enterprise operating systems, networks, applications, and security technologies. Ability to develop or maintain scripts and automated workflows using Python, PowerShell, Bash, or similar scripting languages. Strong analytical, problem-solving, technical documentation, and communication skills. Ability to work effectively with multidisciplinary technical teams and communicate cybersecurity risks to stakeholders. Preferred Qualifications: US Citizen with an active Department of Defense (DoD) TS, Department of Energy (DOE) Q security clearance or equivalent. Bachelors degree in computer science, information assurance or related technical field with 7+ years of relevant experience. Experience supporting cybersecurity operations within Department of Defense (DoD), Department of Energy (DOE), or other federal government environments. Experience working within classified computing environments or multiple security enclaves. Advanced knowledge of Tenable Security Center, Nessus scanners, scan policy development, and vulnerability reporting. Experience with enterprise SIEM platforms such as Splunk, Elastic Security, IBM QRadar, or similar technologies. Experience designing or maintaining custom log ingestion pipelines, data transformations, and automated security workflows. Familiarity with Linux and Windows system administration, enterprise networking, and infrastructure security. Experience with security automation, REST APIs, system integrations, and scripting. Knowledge of NIST Risk Management Framework (RMF), continuous monitoring, and federal information security requirements. Experience supporting threat hunting, detection engineering, security analytics, or incident response activities. Relevant industry certifications such as CompTIA Security+, CySA+, CASP+/SecurityX, CISSP, GIAC, or equivalent cybersecurity credentials. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS Inside office environment. Working on a computer for long periods of time. May involve long period of sitting at a desk. OTHER DUTIES This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. Xcel Engineering is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Xcel Engineering's current openings as a result of your disability. You can request reasonable accommodations by calling . Thank you for your interest in Xcel Engineering. All positions at Xcel Engineering, Inc. are contingent upon passing both a background check and drug screening prior to a start date and are subject to random drug screenings during the employment period. In addition, Xcel Engineering is an E-Verify employer. Job Posted by ApplicantPro

Job Description Job Description Position is 100% ONSITE in Columbia, SC. Candidate MUST currently be a SC resident. No relocation allowed. Interview Process: 2 rounds - 1st interview will be virtual, 2nd round will be onsite in Columbia, SC (Onsite interview will be non-negotiable) Duration of the Contract: 12 months Possibility for Extension: Yes Work Location: Fully Onsite Candidate Location: Candidate MUST be a SC resident. No relocation allowed. Must be able to pass standard background checks! SCOPE OF THE PROJECT: This is an ongoing project with aggressive timelines. A majority of the team is made up of experienced professionals, and we are seeking individuals who are highly productive, flexible, and comfortable working in an environment where priorities can shift. Team members are expected to contribute with minimal supervision. Candidates who enjoy complex, change-driven projects and collaborating with motivated colleagues will find this position appealing. The Office of Cybersecurity ensures the confidentiality, integrity and availability of the Agency's systems and services. Strong candidate must have hands-on experience with: Data network design best practices Routing and switching protocols Network security best practices On-premise and/or cloud networking environments This role requires someone who can contribute independently on technical tasks and support more senior analysts on complex initiatives. DAILY DUTIES / RESPONSIBILITIES: This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead. The analyst will support Agency leadership, business units, partners, and vendors in day-to-day cybersecurity operations. Security Program Experience: Strongly desired experience includes: CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks Performing repeatable security processes supporting compliant enterprise architectures Supporting security considerations for multi tenant cloud environments and vendor integrations Technical Experience: Candidates should have hands-on experience with: Secure network design principles Windows, macOS, and Linux operating systems Switching and Routing Enterprise Firewalls Network auditing IDS/IPS platforms Network security monitoring SIEM platforms such as QRadar, Splunk (Preferred) Vulnerability scanning tools (Nessus, Qualys, etc.) Cloud Infrastructure Security (Preferred) Essential Responsibilities: Assist in maturing network security and compliance solutions Investigate and respond to daily network alerts Perform network security assessments for proposed firewall and infrastructure changes Conduct technical analysis for network security planning and engineering Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency Analyze on-premise and cloud networks for potential threats Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services. Monitor emerging threat vectors and recommend countermeasures Collaborate with other areas of the agency to implement security controls Support cloud and on-premise network changes and enhancement projects Ensure compliance with ARC-AMPE, HIPAA and SCDIS-200 Assist with KPI creation and trend report monitoring Participate in firewall configuration reviews and ruleset recertification Provide guidance on best practices to technical teams Perform additional SOC duties as assigned REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE): Approximately 3-5 years of hands-on experience in network design, implementation, or support Hand-on experience in IT security or system administration Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models Ability to analyze logs, alerts, and network telemetry. Proficiency with Microsoft Office tools PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE): Experience working in regulatory environments Experience supporting health IT or state government. Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards Cloud network security controls (Azure or AWS). REQUIRED EDUCATION/CERTIFICATIONS: BS degree in Computer Science, information systems, Cybersecurity, or related field; or equivalent experience A network security centric certification such as PCNSE or CCNA PREFERRED EDUCATION/CERTIFICATIONS: CISSP or Security+

Job Description Job Description Job Title: Programmer Project Lead M365 SharePoint Online Engineer (13816) Location: Blythewood, SC 29016 Work Arrangement: Fully Onsite No Remote/Hybrid Duration: 12 Months Interview Process: 1st Round Virtual followed by 2nd Round Onsite Candidate Location Requirement: Candidates must currently reside in South Carolina, North Carolina, or Georgia and must be willing to relocate to South Carolina at their own expense. Fingerprinting must take place in South Carolina at least five business days prior to the start date . Key Responsibilities Design, administer, and maintain SharePoint Online sites, subsites, and links. Configure and manage site collections, hubs, libraries, lists, and permissions. Design and manage security groups, advanced permissions, and settings using Entra ID best practices. Perform site and content permission audits. Work with site owners to improve departmental SharePoint Online sites and subsites. Manage site layouts, content, workflows, and automation. Design and develop intranet solutions, custom layouts, workflows, and automation. Provide SharePoint Online support and functionality training to end users. Create user-friendly and accessible SharePoint interfaces. Create and maintain Power Automate workflows. Review SharePoint usage reports and optimize adoption. Clean up and decommission unused sites. Manage site quotas and file-size limits. Integrate Microsoft 365 applications with SharePoint Online. Create and maintain detailed technical documentation, configuration documentation, architecture diagrams, and technical runbooks. Implement governance standards, taxonomy, metadata, and content-management policies. Manage site lifecycle activities including provisioning, archival, and decommissioning. Monitor Microsoft 365 and SharePoint Online roadmap changes and implement appropriate enhancements. Plan and implement project milestones through completion. The role includes significant responsibility for SharePoint permissions, workflows, automation, documentation, governance, site architecture, and Microsoft 365 integration. Required Skills 5 years of experience with development support for SharePoint Online (Office 365), Microsoft 365 hybrid infrastructure, Microsoft Windows platform, advanced permissions, and Entra ID . 5 years of experience with SharePoint Framework (SPFx) to customize and integrate Microsoft 365 applications. 5 years of experience with front-end design, user interface, and user experience . 5 years of experience implementing SharePoint roadmap enhancements and changes and developing technical runbooks . 5 years of experience creating and maintaining workflow and Power Automate configurations . Understanding of Microsoft SharePoint Online best practices and technical documentation . Preferred Skills Experience with data governance, data governance frameworks, data policy, and policy documentation . Advanced knowledge of business processes . Strong understanding of PowerShell . Additional Skills Excellent verbal and written communication skills for both business and technical audiences. Ability to stay current with the Microsoft development lifecycle management process. Preferred Certifications Microsoft Power Platform certifications. Microsoft 365 certifications. Education: Bachelor's degree in a technical or business field. Years of relevant experience may substitute for formal education. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job Description Job Description Job Title: Software Engineer / System Software Programmer - Project Lead Location: Columbia, SC Work Arrangement: Hybrid (SC Locals Only) Position Type: Contract Interview: MS Teams Daily Duties / Responsibilities: Design, develop, maintain, and enhance enterprise web applications. Develop applications using Microsoft .NET technologies. Create and maintain REST APIs and web services. Perform application troubleshooting, debugging, and performance tuning. Participate in requirements gathering and technical design discussions. Develop database objects including stored procedures, functions, and queries. Support system integrations with internal and external applications. Participate in Agile/Scrum ceremonies. Perform code reviews and ensure development standards. Create technical documentation. Support production deployments and issue resolution. Required Skills: 7 years software development experience. 5 years C# / ASP.NET / .NET Core experience. 5 years SQL Server development experience. Experience developing REST API / Web API services. Experience with JavaScript frameworks: Angular React TypeScript Experience with HTML5, CSS, JavaScript. Experience with Entity Framework. Experience with enterprise application integration. Experience troubleshooting production applications. Experience with SDLC methodologies. Experience using Azure DevOps / TFS / Git. Experience creating technical documentation. Preferred Skills: Healthcare / Medicaid experience. Government project experience. Azure Cloud experience. CI/CD pipeline experience. Power Platform exposure. SSIS / SSRS reporting experience. Microservices architecture experience. Security best practices. Education: Bachelor's Degree in Computer Science, Information Technology, or related field. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job Description Job Description Job Title: Security Analyst Job Location: Columbia, SC, 29201 (Onsite) Job Duration: 12 Months Job Summary: The Office of Cybersecurity ensures the confidentiality, integrity and availability of systems and services. Strong candidate must have hands-on experience with: Data network design best practices Routing and switching protocols Network security best practices On-premises and/or cloud networking environments This role requires someone who can contribute independently to technical tasks and support more senior analysts on complex initiatives. This is a hands-on technical role reporting to the Office of Cybersecurity SOC lead. The analyst will support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations. Security Program Experience: Strongly desired experience includes: CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks Performing repeatable security processes supporting compliant enterprise architectures Supporting security considerations for multi-tenant cloud environments and vendor integrations Job Responsibilities: Assist in maturing network security and compliance solutions Investigate and respond to daily network alerts Perform network security assessments for proposed firewall and infrastructure changes Conduct technical analysis for network security planning and engineering Review and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agency Analyze on-premises and cloud networks for potential threats Develop, review, and analyze network traffic reports that violate the agency's approved standards governing Ports, Protocols and Services. Monitor emerging threat vectors and recommend countermeasures Collaborating with other areas of the agency to implement security controls Support cloud and on-premises network changes and enhancement projects Ensure compliance with ARC-AMPE, HIPAA and SCDIS-200 Assist with KPI creation and trend report monitoring Participate in firewall configuration reviews and ruleset recertification Provide guidance on best practices to technical teams Perform additional duties as assigned Qualifications: Candidates should have hands-on experience with: Secure network design principles Windows, macOS, and Linux operating systems Switching and Routing Enterprise Firewalls Network auditing IDS/IPS platforms Network security monitoring SIEM platforms such as QRadar, Splunk (Preferred) Vulnerability scanning tools (Nessus, Qualys, etc.) Cloud Infrastructure Security (Preferred) Required Skills: Approximately 3-5 years of hands-on experience in network design, implementation, or support Hand-on experience in IT security or system administration Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models Ability to analyze logs, alerts, and network telemetry. Proficiency with Microsoft Office tools BS degree in Computer Science, information systems, Cybersecurity, or related field; or equivalent experience A network security centric certification such as PCNSE or CCNA Preferred Skills: Experience working in regulatory environments Experience supporting health IT or state government. Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards Cloud network security controls (Azure or AWS). CISSP or Security

Job Description Job Description We're looking for a Security Analyst for an onsite role in Columbia, SC . Skills & Qualifications : 3-5 years of hands-on experience in network design, implementation, or support Hands-on experience in IT security or system administration Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models Ability to analyze logs, alerts, and network telemetry Proficiency with Microsoft Office tools Preferred Skills : Experience working in regulatory environments Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards Cloud network security controls (Azure or AWS) experience Key Responsibilities : Assist in maturing network security and compliance solutions Investigate and respond to daily network alerts Perform network security assessments for proposed firewall and infrastructure changes Conduct technical analysis for network security planning and engineering Education/Certifications : BS degree in Computer Science, Information Systems, Cybersecurity, or related field; or equivalent experience A+ network security-centric certification, such as PCNSE or CCNA CISSP or Security+ Ideal Candidate : The ideal candidate will have a strong background in network design and IT security, with experience in regulatory environments and familiarity with industry standards such as FISMA, NIST, and HIPAA. A candidate with cloud network security experience and relevant certifications will be highly preferred. The salary range for this position is $82,000 - $97,000. TM Floyd & Company is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability. We offer a generous array of benefits, depending on the length of assignment. We also offer a referral bonus of up to $1,000. Ask us for more details! TM Floyd & Company participates in E-VERIFY AAP, EEO

Job Description Job Description Greystones Group is a fast-growing woman-owned small business supporting our Nation?s Defense and Critical Infrastructure Agencies with best-in-class artificial intelligence and big data analytics capabilities. Our capabilities include mission planning, operational support, leader development and education, cybersecurity, electronic warfare, and information technology solutions. We are looking for dedicated and motivated candidates that can grow with the company. At Greystones, we recognize that everyone brings their own important skill sets and unique talents to create a highly competent team to deliver quality solutions. We ensure that each member?s needs are addressed effectively, and our employees are not just a number. We offer a close-knit community that ensures your growth and development in a setting that provides world-class support to our customers. Greystones Group is seeking a detail-oriented and motivated Junior Data Engineer to support data-driven decision-making through the collection, processing, analysis, and visualization of complex datasets. This is an excellent opportunity for an early-career professional to gain hands-on experience working with large-scale government data while developing technical skills alongside experienced data engineers and data scientists. The ideal candidate is eager to learn, enjoys solving problems, and is interested in growing their career in data engineering and analytics. Experience or exposure to IRS or other federal government data is preferred. Remote Salary will be determined based on experience. Range: $60K?$75K Benefits 401(k) with matching Health, dental, and vision insurance Life insurance Flexible spending account Flexible schedule Paid time off Referral program Retirement plan Key Responsibilities Support senior team members in meetings with Government clients to understand business needs, data sources, and analysis plans Assist data scientists and senior engineers with the development, testing, and maintenance of data pipelines supporting data engineering and machine learning Assist software developers in building and maintaining tools for data visualization and analysis Assist with the development and testing of responsive web applications Write clean, maintainable code in Python and JavaScript under the guidance of senior engineers Participate in code reviews to learn and apply security and performance best practices Participate in Agile/Scrum ceremonies and collaborate with cross-functional teams Write and execute unit and integration tests under established development practices Assist with debugging and troubleshooting code and maintain technical documentation Use Git for version control and support application deployment processes Assist with production support and application health monitoring Gather, clean, and explore datasets to identify patterns, trends, and anomalies Support exploratory data analysis and data mining using government data sources Assist in preparing reports, dashboards, and presentations summarizing analytical findings Qualifications Bachelor?s degree in Computer Science, Engineering, Data Science, Mathematics, or a related technical field 1?3 years of experience in data engineering, data analysis, software development, or a related technical area; internships, co-ops, and relevant academic projects may be considered Working knowledge of Python and SQL Familiarity with Git and basic software development practices Basic understanding of databases, data structures, data processing, and software development concepts Ability to obtain a Federal Public Trust Clearance Exposure to JavaScript or web application development Some coursework, training, or hands-on exposure to cloud platforms such as AWS, Azure, or GCP Some familiarity with data visualization tools such as Tableau, Power BI, or Python plotting libraries Basic understanding of Agile/Scrum development methodologies Exposure to relational databases and SQL-based data querying Exposure to APIs, ETL/ELT processes, or data integration concepts Exposure to Python data libraries such as Pandas or NumPy is desirable Exposure to machine learning concepts or workflows is desirable Interest in data analytics, fraud detection, compliance, or working with regulated data Ability to follow established technical, security, and development practices and apply feedback from senior team members Greystones Group is an Equal Opportunity Employer. Greystones complies with applicable federal, state, and local employment laws and does not discriminate against qualified individuals on the basis of race, color, religion, sex, national origin, disability, protected veteran status, genetic information, or any other status protected by applicable law. Greystones Group is committed to providing equal employment opportunities to qualified individuals with disabilities and protected veterans in accordance with applicable federal requirements. If you are a qualified individual with a disability or a protected veteran and require a reasonable accommodation to apply for a position or participate in the application process, please contact our Human Resources Department at , option , or . Greystones Group participates in E-Verify.

Job Description Job Description What Success Looks Like (Objectives): Design and deploy a scalable IAM framework that standardizes multi-factor authentication, single sign-on, and privileged access controls for internal employees and external supply chain vendors to meet security OKRs Implement a Zero Trust Architecture utilizing identity-driven user and network segmentation to restrict unauthorized lateral movement across corporate networks Establish data-driven metrics to evaluate the operational effectiveness of production IAM controls and proactively remediate identified deficiencies Integrate AI-driven threat detection tools and automation into the identity and access control stack to enhance behavioral anomaly detection and incident response capabilities Lead security intake processes for new enterprise initiatives, defining technical IAM and security architecture requirements to ensure seamless control integration into new deployments Core Skills, Competencies, and Key Experiences (What you'll bring) Strong skills in enterprise IAM architecture, privileged access management, and Zero Trust design principles, including user- and network-level segmentation controls Ability to analyze Cyber Threat Intelligence (CTI) frameworks to anticipate identity-based attack vectors and proactively update security architectures against emerging vulnerabilities Problem solving in utilizing vulnerability assessment tools, penetration testing methodologies, and automated control verification platforms to remediate access vulnerabilities AI Application in leveraging AI-driven security operations and tooling to automate identity threat research and technical risk identification Decision making and cross-functional leadership to align complex IAM and cybersecurity engineering requirements with corporate business objectives Additional Qualifications: Exposure to threat modeling, secure architecture design, or enterprise security audits within large-scale network infrastructure environments Candidates must be willing to participate in at least one in-person interview. Visa sponsorship not available for this role. Minimum Requirements Minimum Education: Bachelor's Degree in Computer Science, Information Technology, related discipline, or commensurate industry experience Minimum Experience: Critical experience demonstrating comprehensive understanding of cybersecurity principles, concepts, and technologies Required Technical Skills: Must have experience with: Identity and Access Management (IAM) frameworks Zero Trust Architecture and network segmentation controls Cyber Threat Intelligence (CTI) frameworks Vulnerability assessment and penetration testing tools Benefits: We offer meaningful health perks, including flexible spending accounts, HSA, a 401(k) plan with company match, employee stock purchase plan, career opportunities, and a flexible time away plan. Review a benefits summary here: EchoStar Benefits The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies. Compensation is based on the role's location and is subject to change. Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws. This job posting will be active for a minimum of 3 days and will continue to extend by 3 days until the position is filled. We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process. EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make and jobs.accessible to users. Please contact if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications. If you have questions regarding your application or the recruitment process please email . Click the links to access the following statements: EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English/Spanish) Salary Range Compensation: $127050 - $181500/YearlyAbout our Department Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow. About Our Company EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products. Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.