Job Description DataStaff, Inc is seeking a Database Administrator for a long-term contract opportunity with one of our direct clients located in Raleigh, NC This role is hybrid Job Description: Our client is seeking a Database Administrator (DBA) who will be responsible for installing, configuring, maintaining, and securing database systems. This role ensures high availability, performance, integrity, and security of data across production, test, and development environments. The Database Administrator will support database operations, optimization, security, backup, recovery, and collaboration with developers and stakeholders. Responsibilities Install, configure, upgrade, and maintain database servers and application tools. Establish system storage requirements and modify database structures as needed. Perform regular maintenance, debugging, patching, performance tuning, and reporting. Monitor database performance, identify bottlenecks, and implement optimization strategies. Tune SQL queries, indexing strategy, and database parameters to improve efficiency. Set up cybersecurity measures and authentication controls, and enforce security policies. Manage user permissions, privileges, and audit activities to protect sensitive data. Ensure compliance with regulatory and organizational data governance requirements. Design and implement backup and disaster recovery strategies. Ensure availability and integrity of backed-up data and support recovery operations. Support database design, schema creation, and testing activities. Consult with developers and stakeholders to ensure optimal database usage. Implement event triggers, stored procedures, and performance alerts. Monitor transaction volumes, concurrency, response times, and other performance indicators. Perform housekeeping tasks such as tuning, indexing, and data cleanup. Knowledge, Skills and Experience: Problem-solving and analytical thinking with attention to detail. Knowledge of compliance-heavy environments (healthcare, finance, government). Required Skills: 7 Years - Hands-on experience with database management systems (e.g., Oracle, SQL Server, MySQL, PostgreSQL). 7 Years - Strong knowledge of SQL, database architecture, backup/recovery, and security best practices. 7 Years - Experience with performance tuning, query optimization, and capacity planning. 7 Years - Knowledge of modern database technologies and strategies for migrating and modernizing database systems 5 Years - Familiarity with programming languages, APIs, and database design principles. 3 Years - Experience with cloud database technologies (Azure SQL, AWS RDS, Cloud SQL). 5 Years - Experience with Agile/Scrum Framework environments. 7 Years - Strong communication and collaboration skills to work with cross-functional teams, including developers, business analysts, and stakeholders. Desired Skills: 2 Years - State Government experience This opportunity is available on a corp-to-corp basis or as a W2 position with a competitive benefits package. DataStaff, Inc. offers medical, dental, and vision coverage options as well as paid vacation, sick, and holiday leave. As many of our opportunities are long-term, we also have a 401k program available for employees after 6 months.
11/14/2026
Full time
Job Description DataStaff, Inc is seeking a Database Administrator for a long-term contract opportunity with one of our direct clients located in Raleigh, NC This role is hybrid Job Description: Our client is seeking a Database Administrator (DBA) who will be responsible for installing, configuring, maintaining, and securing database systems. This role ensures high availability, performance, integrity, and security of data across production, test, and development environments. The Database Administrator will support database operations, optimization, security, backup, recovery, and collaboration with developers and stakeholders. Responsibilities Install, configure, upgrade, and maintain database servers and application tools. Establish system storage requirements and modify database structures as needed. Perform regular maintenance, debugging, patching, performance tuning, and reporting. Monitor database performance, identify bottlenecks, and implement optimization strategies. Tune SQL queries, indexing strategy, and database parameters to improve efficiency. Set up cybersecurity measures and authentication controls, and enforce security policies. Manage user permissions, privileges, and audit activities to protect sensitive data. Ensure compliance with regulatory and organizational data governance requirements. Design and implement backup and disaster recovery strategies. Ensure availability and integrity of backed-up data and support recovery operations. Support database design, schema creation, and testing activities. Consult with developers and stakeholders to ensure optimal database usage. Implement event triggers, stored procedures, and performance alerts. Monitor transaction volumes, concurrency, response times, and other performance indicators. Perform housekeeping tasks such as tuning, indexing, and data cleanup. Knowledge, Skills and Experience: Problem-solving and analytical thinking with attention to detail. Knowledge of compliance-heavy environments (healthcare, finance, government). Required Skills: 7 Years - Hands-on experience with database management systems (e.g., Oracle, SQL Server, MySQL, PostgreSQL). 7 Years - Strong knowledge of SQL, database architecture, backup/recovery, and security best practices. 7 Years - Experience with performance tuning, query optimization, and capacity planning. 7 Years - Knowledge of modern database technologies and strategies for migrating and modernizing database systems 5 Years - Familiarity with programming languages, APIs, and database design principles. 3 Years - Experience with cloud database technologies (Azure SQL, AWS RDS, Cloud SQL). 5 Years - Experience with Agile/Scrum Framework environments. 7 Years - Strong communication and collaboration skills to work with cross-functional teams, including developers, business analysts, and stakeholders. Desired Skills: 2 Years - State Government experience This opportunity is available on a corp-to-corp basis or as a W2 position with a competitive benefits package. DataStaff, Inc. offers medical, dental, and vision coverage options as well as paid vacation, sick, and holiday leave. As many of our opportunities are long-term, we also have a 401k program available for employees after 6 months.
Job Description Front-Office Risk Data Quality Analyst Company Overview Business Integration Partners (BIP) is Europe's fastest growing digital consulting company and are on track to reach the Top 20 by 2030, with an expanding global footprint in the US (New York, Charlotte, Chicago, and Houston). Operating at the intersection of business and technology we design, develop, and deliver sustainable solutions at pace and scale creating greater value for our customers, employees, shareholders, and society. BIP specializes in high-impact consulting services across multiple industries with 6,000 employees worldwide. Our domains include Life Sciences, Energy, Retail, and Financial Service businesses including Capital Markets, Insurance and Payments verticals, supplemented with Data & AI, Cybersecurity, Risk & Compliance, Change Management and Digital Transformation practices. We integrate deep industry expertise with business, technology, and quantitative disciplines to deliver high-impact results for our clients. With a strong presence across Healthcare, Life Sciences, Pharmaceutical, and MedTech industries, we partner with some of the world's most innovative organizations to solve mission-critical operational challenges through intelligent automation, AI-powered decision support, and scalable enterprise solutions. Position Summary Responsible for the design, implementation, and execution of data quality controls, reconciliation activities, operational reporting, and the investigation of data issues impacting batch runs on a Strategic Full Revaluation VaR platform. This role ensures the completeness, accuracy, and integrity of reporting risk data across batch runs. Responsibilities Execute data quality validation checks for daily batch-processing cycles. Run risk reporting scripts and generate operational, control, and management reports. Perform reconciliations between upstream, downstream, and reporting systems. Investigate front-office valuation data quality exceptions, reconciliation breaks, and unexplained variances. Analyse trends and identify recurring data issues requiring remediation. Partner with front-office and risk Business, Technology, Data Engineering, and Production Support teams to resolve defects. Validate fixes and support UAT and production implementation activities. Build and maintain manual and automated data quality reporting processes. Document findings, root causes, and remediation recommendations. Support regulatory, risk, and audit-related reporting requirements. Required Qualifications Strong data analysis and investigative skills. Strong written and verbal communication skills. Advanced SQL skills. Experience performing data reconciliation and data quality analysis. Experience within Market Risk, Global Markets, FRTB, VaR, SVaR, CCR, or P&L reporting environments. Strong Excel skills, including pivot tables, lookups, and complex data analysis. Ability to interpret large datasets and identify anomalies. Experience producing operational or management reports. Desired Qualifications Experience with Python and the automation of reporting processes. Experience with data warehousing and ETL concepts. Familiarity with Splunk and production-support tools. Knowledge of regulatory and risk-reporting processes. Benefits Choice of medical, dental, vision insurance. Voluntary benefits. Short- and long-term disability. HSA and FSAs. Matching 401k. Discretionary performance bonus. Employee referral bonus. Employee assistance program. 11 public holidays. 20 days PTO. 7 Sick Days. PTO buy and sell program. Volunteer days. Paid parental leave. Remote/hybrid work environment support. For more information about BIP US, visit Equal Employment Opportunity: It is BIP US Consulting policy to provide equal employment opportunities to all individuals based on job-related qualifications and ability to perform a job, without regard to age, gender, gender identity, sexual orientation, race, color, religion, creed, national origin, disability, genetic information, veteran status, citizenship, or marital status, and to maintain a non-discriminatory environment free from intimidation, harassment or bias based upon these grounds. BIP US provides a reasonable range of compensation for our roles. Actual compensation is influenced by a wide array of factors including but not limited to skill set, education, level of experience, and knowledge.
11/14/2026
Full time
Job Description Front-Office Risk Data Quality Analyst Company Overview Business Integration Partners (BIP) is Europe's fastest growing digital consulting company and are on track to reach the Top 20 by 2030, with an expanding global footprint in the US (New York, Charlotte, Chicago, and Houston). Operating at the intersection of business and technology we design, develop, and deliver sustainable solutions at pace and scale creating greater value for our customers, employees, shareholders, and society. BIP specializes in high-impact consulting services across multiple industries with 6,000 employees worldwide. Our domains include Life Sciences, Energy, Retail, and Financial Service businesses including Capital Markets, Insurance and Payments verticals, supplemented with Data & AI, Cybersecurity, Risk & Compliance, Change Management and Digital Transformation practices. We integrate deep industry expertise with business, technology, and quantitative disciplines to deliver high-impact results for our clients. With a strong presence across Healthcare, Life Sciences, Pharmaceutical, and MedTech industries, we partner with some of the world's most innovative organizations to solve mission-critical operational challenges through intelligent automation, AI-powered decision support, and scalable enterprise solutions. Position Summary Responsible for the design, implementation, and execution of data quality controls, reconciliation activities, operational reporting, and the investigation of data issues impacting batch runs on a Strategic Full Revaluation VaR platform. This role ensures the completeness, accuracy, and integrity of reporting risk data across batch runs. Responsibilities Execute data quality validation checks for daily batch-processing cycles. Run risk reporting scripts and generate operational, control, and management reports. Perform reconciliations between upstream, downstream, and reporting systems. Investigate front-office valuation data quality exceptions, reconciliation breaks, and unexplained variances. Analyse trends and identify recurring data issues requiring remediation. Partner with front-office and risk Business, Technology, Data Engineering, and Production Support teams to resolve defects. Validate fixes and support UAT and production implementation activities. Build and maintain manual and automated data quality reporting processes. Document findings, root causes, and remediation recommendations. Support regulatory, risk, and audit-related reporting requirements. Required Qualifications Strong data analysis and investigative skills. Strong written and verbal communication skills. Advanced SQL skills. Experience performing data reconciliation and data quality analysis. Experience within Market Risk, Global Markets, FRTB, VaR, SVaR, CCR, or P&L reporting environments. Strong Excel skills, including pivot tables, lookups, and complex data analysis. Ability to interpret large datasets and identify anomalies. Experience producing operational or management reports. Desired Qualifications Experience with Python and the automation of reporting processes. Experience with data warehousing and ETL concepts. Familiarity with Splunk and production-support tools. Knowledge of regulatory and risk-reporting processes. Benefits Choice of medical, dental, vision insurance. Voluntary benefits. Short- and long-term disability. HSA and FSAs. Matching 401k. Discretionary performance bonus. Employee referral bonus. Employee assistance program. 11 public holidays. 20 days PTO. 7 Sick Days. PTO buy and sell program. Volunteer days. Paid parental leave. Remote/hybrid work environment support. For more information about BIP US, visit Equal Employment Opportunity: It is BIP US Consulting policy to provide equal employment opportunities to all individuals based on job-related qualifications and ability to perform a job, without regard to age, gender, gender identity, sexual orientation, race, color, religion, creed, national origin, disability, genetic information, veteran status, citizenship, or marital status, and to maintain a non-discriminatory environment free from intimidation, harassment or bias based upon these grounds. BIP US provides a reasonable range of compensation for our roles. Actual compensation is influenced by a wide array of factors including but not limited to skill set, education, level of experience, and knowledge.
Job Description TECHEAD is celebrating over thirty-five years of incredible heritage, talent, and accomplishments! To learn more about TECHEAD, visit us at or on Glassdoor. In this role, you will maintain and secure endpoint infrastructure supporting critical Army operations at Fort Novosel, AL. The position exercises significant autonomy to manage enterprise security toolsets, conduct vulnerability assessments, prioritize risk remediations, automate administrative routines using PowerShell, and ensure full compliance across applicable military and federal cybersecurity standards. Responsibilities Manage, configure, and administer endpoint security toolsets, including Trellix ePolicy Orchestrator (ePO), Host Based Security System (HBSS), and Assured Compliance Assessment Solution (ACAS). Deploy, tune, and maintain security modules such as endpoint protection, host-based firewalls, and data loss prevention (DLP). Analyze vulnerability scan results, prioritize risks, and coordinate remediation workflows with system administrators to ensure system integrity. Automate routine administrative tasks, system configurations, and security data collection using PowerShell scripting. Collate, analyze, and visualize security telemetry from ACAS, ePO, Elastic, and adjacent IT systems for operational reporting and leadership decision-making. Enforce strict compliance with DISA STIGs, SCAP validation, CIS Benchmarks, organizational IT security policies, and applicable Army Regulations (ARs). Develop, track, and maintain Risk Management Framework (RMF) and Assessment & Authorization (A&A) documentation packages. Partner with end users and departmental teams to evaluate operational requirements and implement appropriate security controls. Must Have Qualifications 2+ years of professional experience in cybersecurity, systems analysis, or endpoint security administration. Active Secret security clearance (100% onsite at Fort Novosel, AL). Active DoD IAT Level II certification (one of the following: Security+ CE, CySA+, CCNA-Security, GICSP, GSEC, CND, or SSCP). Proven hands-on experience administering Trellix ePO/HBSS, running ACAS vulnerability scans, and utilizing SCAP/CIS Benchmark tools. Demonstrated proficiency with PowerShell scripting for administrative automation. Working knowledge of NIST Special Publication 800-37, Army Regulations (ARs), and RMF/A&A documentation processes. Bachelor's degree in a related technical discipline or equivalent professional experience. Preferred Qualifications Hands-on experience building visualizations, ingesting logs, and managing data flows within the Elastic Stack (ELK). Direct experience authoring and managing complete RMF authorization packages through operational approval. Prior experience working directly within U.S. Army or DoD network environments. TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less. TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. For more information on TECHEAD please visit . No second parties will be accepted.
11/14/2026
Full time
Job Description TECHEAD is celebrating over thirty-five years of incredible heritage, talent, and accomplishments! To learn more about TECHEAD, visit us at or on Glassdoor. In this role, you will maintain and secure endpoint infrastructure supporting critical Army operations at Fort Novosel, AL. The position exercises significant autonomy to manage enterprise security toolsets, conduct vulnerability assessments, prioritize risk remediations, automate administrative routines using PowerShell, and ensure full compliance across applicable military and federal cybersecurity standards. Responsibilities Manage, configure, and administer endpoint security toolsets, including Trellix ePolicy Orchestrator (ePO), Host Based Security System (HBSS), and Assured Compliance Assessment Solution (ACAS). Deploy, tune, and maintain security modules such as endpoint protection, host-based firewalls, and data loss prevention (DLP). Analyze vulnerability scan results, prioritize risks, and coordinate remediation workflows with system administrators to ensure system integrity. Automate routine administrative tasks, system configurations, and security data collection using PowerShell scripting. Collate, analyze, and visualize security telemetry from ACAS, ePO, Elastic, and adjacent IT systems for operational reporting and leadership decision-making. Enforce strict compliance with DISA STIGs, SCAP validation, CIS Benchmarks, organizational IT security policies, and applicable Army Regulations (ARs). Develop, track, and maintain Risk Management Framework (RMF) and Assessment & Authorization (A&A) documentation packages. Partner with end users and departmental teams to evaluate operational requirements and implement appropriate security controls. Must Have Qualifications 2+ years of professional experience in cybersecurity, systems analysis, or endpoint security administration. Active Secret security clearance (100% onsite at Fort Novosel, AL). Active DoD IAT Level II certification (one of the following: Security+ CE, CySA+, CCNA-Security, GICSP, GSEC, CND, or SSCP). Proven hands-on experience administering Trellix ePO/HBSS, running ACAS vulnerability scans, and utilizing SCAP/CIS Benchmark tools. Demonstrated proficiency with PowerShell scripting for administrative automation. Working knowledge of NIST Special Publication 800-37, Army Regulations (ARs), and RMF/A&A documentation processes. Bachelor's degree in a related technical discipline or equivalent professional experience. Preferred Qualifications Hands-on experience building visualizations, ingesting logs, and managing data flows within the Elastic Stack (ELK). Direct experience authoring and managing complete RMF authorization packages through operational approval. Prior experience working directly within U.S. Army or DoD network environments. TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less. TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. For more information on TECHEAD please visit . No second parties will be accepted.
BERING STRAITS PROFESSIONAL SERVICES LLC
Washington, Washington DC
About this position: Cybersecurity Incident Response Manager in Washington, DC, for Bering Straits Professional Services, LLC The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position. Wage/Salary Range: $150k Applicants will be notified via email or phone within ten business days regarding application status. Essential Duties & Responsibilities Lead, mentor, and manage cybersecurity personnel; establish priorities, assign work, assess performance, and support professional development and cross-training. Direct the team's incident response activities, including event triage, investigation, containment, eradication, recovery, documentation, and lessons learned. Coordinate with the SOC and client leadership to support timely escalation and reporting. Oversee the collection and analysis of cyber threat intelligence, ensuring that relevant indicators and adversary tactics, techniques, and procedures guide detection, threat hunting, incident response, and penetration testing activities. Guide hypothesis-driven threat hunts, digital forensic investigations, and malware analysis. Ensure evidence is collected, preserved, and documented in accordance with applicable requirements and chain-of-custody procedures. Manage authorized penetration testing, adversary emulation, and purple team exercises in coordination with federal leadership. Track findings and work with stakeholders to validate corrective actions. Lead the practical application of AI and ML to improve threat hunting and incident response, including evaluating use cases, guiding development and integration, and measuring effectiveness. Oversee the use of applicable Microsoft Azure AI services in accordance with client security and data-handling requirements. Maintain and improve incident response plans, playbooks, standard operating procedures, and detection and automation workflows. Coordinate tabletop exercises and incorporate lessons learned. Monitor workload, operational performance, risks, and deliverables; provide clear status reports, metrics, and briefings to technical stakeholders and senior leadership. Coordinate with client stakeholders and other teams on investigations, audits, information requests, and continuous improvement. Align activities with applicable federal requirements, client policies, and NIST guidance Required (Minimum Necessary) Qualifications Education Requirements: High school diploma or GED and substantial relevant cybersecurity experience; a bachelor's degree in cybersecurity, computer science, or a related field is preferred Level of Experience Requirements: 5 years of demonstrated IT experience Demonstrated experience leading cybersecurity personnel or coordinating multidisciplinary security operations and complex incident investigations. Strong knowledge of incident response, threat intelligence, threat hunting, digital forensics, and penetration testing principles, including the ability to translate technical findings into operational decisions. Experience with enterprise security technologies such as SIEM, endpoint detection and response, network monitoring, and cloud security tools. Familiarity with Microsoft Azure, Microsoft Sentinel, and Microsoft Defender is expected. In-depth knowledge of AI and ML concepts and practical experience applying these technologies to cybersecurity use cases, including threat hunting or incident response. Experience with Microsoft Azure AI services. Familiarity with the MITRE ATT&CK framework, NIST incident response guidance, and federal cybersecurity reporting and security requirements. Strong written and verbal communication, analytical, decision-making, and stakeholder management skills. S. citizenship and the ability to obtain and maintain the government security access required for the position, subject to applicable investigation and eligibility requirements. Knowledge, Skills, Abilities, and Other Characteristics Experience supporting a federal cybersecurity program and coordinating with a 24/7 SOC. Experience with Kusto Query Language, Python or PowerShell, Azure DevOps, or Power BI. Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Microsoft Security Operations Analyst Associate, or a relevant Azure AI certification Preferred N/A Necessary Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Work Environment The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Supervisory Responsibilities This position will have supervisory responsibilities. DOT Covered/Safety-Sensitive Role Requirements This position is not subject to federal requirements regarding Department of Transportation "safety-sensitive" functions. Additional Qualifying Factors As a condition of employment, you will be required to pass a pre-employment drug screening and have acceptable background check results. If applicable to the contract, you must also obtain and maintain the appropriate clearance levels required and must also be able to obtain access to military installations. Shareholder Preference BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job. Bering Straits Native Corporation is an equal opportunity employer. All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.
11/14/2026
Full time
About this position: Cybersecurity Incident Response Manager in Washington, DC, for Bering Straits Professional Services, LLC The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position. Wage/Salary Range: $150k Applicants will be notified via email or phone within ten business days regarding application status. Essential Duties & Responsibilities Lead, mentor, and manage cybersecurity personnel; establish priorities, assign work, assess performance, and support professional development and cross-training. Direct the team's incident response activities, including event triage, investigation, containment, eradication, recovery, documentation, and lessons learned. Coordinate with the SOC and client leadership to support timely escalation and reporting. Oversee the collection and analysis of cyber threat intelligence, ensuring that relevant indicators and adversary tactics, techniques, and procedures guide detection, threat hunting, incident response, and penetration testing activities. Guide hypothesis-driven threat hunts, digital forensic investigations, and malware analysis. Ensure evidence is collected, preserved, and documented in accordance with applicable requirements and chain-of-custody procedures. Manage authorized penetration testing, adversary emulation, and purple team exercises in coordination with federal leadership. Track findings and work with stakeholders to validate corrective actions. Lead the practical application of AI and ML to improve threat hunting and incident response, including evaluating use cases, guiding development and integration, and measuring effectiveness. Oversee the use of applicable Microsoft Azure AI services in accordance with client security and data-handling requirements. Maintain and improve incident response plans, playbooks, standard operating procedures, and detection and automation workflows. Coordinate tabletop exercises and incorporate lessons learned. Monitor workload, operational performance, risks, and deliverables; provide clear status reports, metrics, and briefings to technical stakeholders and senior leadership. Coordinate with client stakeholders and other teams on investigations, audits, information requests, and continuous improvement. Align activities with applicable federal requirements, client policies, and NIST guidance Required (Minimum Necessary) Qualifications Education Requirements: High school diploma or GED and substantial relevant cybersecurity experience; a bachelor's degree in cybersecurity, computer science, or a related field is preferred Level of Experience Requirements: 5 years of demonstrated IT experience Demonstrated experience leading cybersecurity personnel or coordinating multidisciplinary security operations and complex incident investigations. Strong knowledge of incident response, threat intelligence, threat hunting, digital forensics, and penetration testing principles, including the ability to translate technical findings into operational decisions. Experience with enterprise security technologies such as SIEM, endpoint detection and response, network monitoring, and cloud security tools. Familiarity with Microsoft Azure, Microsoft Sentinel, and Microsoft Defender is expected. In-depth knowledge of AI and ML concepts and practical experience applying these technologies to cybersecurity use cases, including threat hunting or incident response. Experience with Microsoft Azure AI services. Familiarity with the MITRE ATT&CK framework, NIST incident response guidance, and federal cybersecurity reporting and security requirements. Strong written and verbal communication, analytical, decision-making, and stakeholder management skills. S. citizenship and the ability to obtain and maintain the government security access required for the position, subject to applicable investigation and eligibility requirements. Knowledge, Skills, Abilities, and Other Characteristics Experience supporting a federal cybersecurity program and coordinating with a 24/7 SOC. Experience with Kusto Query Language, Python or PowerShell, Azure DevOps, or Power BI. Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Microsoft Security Operations Analyst Associate, or a relevant Azure AI certification Preferred N/A Necessary Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Work Environment The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Supervisory Responsibilities This position will have supervisory responsibilities. DOT Covered/Safety-Sensitive Role Requirements This position is not subject to federal requirements regarding Department of Transportation "safety-sensitive" functions. Additional Qualifying Factors As a condition of employment, you will be required to pass a pre-employment drug screening and have acceptable background check results. If applicable to the contract, you must also obtain and maintain the appropriate clearance levels required and must also be able to obtain access to military installations. Shareholder Preference BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job. Bering Straits Native Corporation is an equal opportunity employer. All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.
DTS is looking for Business Analyst (Procurement / Vendor Management) for our client position based in Detroit, MI Description: Engagement Description - Support the Vendor Management (VM) team as Enterprise Procurement progresses from 2026 capability building into the 2027 Procurement Transformation roadmap. The contractor will help convert current-state VM processes, data, controls, reporting, automation, and AI-enabled use cases into documented requirements and implementation-ready artifacts for the future operating model. Act as a hands-on bridge across Vendor Management, Procurement business stakeholders, analytics, technology, and change activities. The resource should move between business analysis, process redesign, data/reporting, UAT, documentation, training, and practical AI/automation use cases rather than operate as a narrowly focused developer. Expected work includes current/future-state process mapping; requirements and user stories; gap/root-cause analysis; control and risk documentation; data/KPI analysis; Power BI/Excel reporting; system/workflow requirements; test scenarios/UAT coordination; SOPs/job aids; training/knowledge transfer; and evaluation of responsible AI or automation opportunities. Success is defined by high-quality, reusable artifacts that accelerate transformation while preserving controls, data quality, stakeholder alignment, and knowledge transfer to the internal VM team. Top 3 Required Skills/Experience - • 5+ years of business/systems analysis or process transformation experience, including requirements gathering, current/future-state process mapping, root-cause analysis, process redesign, technical documentation, UAT, and cross-functional implementation support for complex business processes. • 3+ years of procurement, vendor/supplier management, source-to-pay, contract lifecycle, or adjacent supply-chain experience. Strong preference for hands-on Oracle Cloud Procurement and/or CLM/vendor management platform experience and ability to translate VM needs into system and data requirements. • Demonstrated analytics and AI-enabled process improvement capability: advanced Excel plus Power BI or Tableau, KPI/reporting analysis, and practical use of enterprise generative AI tools such as Microsoft Copilot, ChatGPT, Claude, or Gemini with appropriate human review and data/privacy controls. Required Skills/Experience - The rest of the required skills/experience. Include: • Facilitate stakeholder interviews/workshops and convert needs into functional requirements, process maps, acceptance criteria, decision logs, RACI inputs, and implementation documentation. • Support technology/transformation initiatives through design, integration/deployment readiness, testing, defect triage, UAT, change management, and post-implementation knowledge transfer. • Strong process optimization skills: root-cause analysis, control-point identification, exception/handoff analysis, and measurable improvement recommendations. • Working knowledge of supplier lifecycle activities including onboarding, risk/compliance, contract administration, supplier performance, data maintenance, monitoring, and issue resolution. • Oracle Cloud or comparable enterprise procurement/ERP experience; understand dependencies across procurement, contracts, master data, requisition-to-pay, and reporting. • Contract lifecycle management concepts/tools; document business rules, metadata, workflow requirements, alerts, approvals, and reporting needs. • Advanced Excel and working proficiency in Power BI or Tableau; profile data, analyze trends, validate data quality, develop/refine KPIs, and translate analysis into recommendations. • Practical generative AI and AI-enabled workflow experience, including validation, human-in-the-loop review, confidentiality, privacy, and responsible-use considerations. • Assess risk and controls in redesigned/automated processes, including data privacy, cybersecurity, auditability, segregation of duties, and approval controls. • Excellent written/verbal communication; produce executive summaries plus detailed SOPs, requirements, test scripts, job aids, and training materials. • Work independently in ambiguity, manage multiple priorities, surface risks early, and collaborate with business SMEs, technology teams, suppliers, and leaders. • Working understanding of cloud/SaaS concepts and integrations; deep cloud engineering expertise is not required. Preferred Skills/Experience - Optional but preferred skills/experience. Include: • Healthcare payer, health insurance, or another highly regulated industry. • AI/ML or generative-AI implementation in procurement, operations, contracting, supplier management, analytics, or knowledge management. • Microsoft Power Platform (Power Automate/Power Apps) and/or UiPath/RPA. • Modern procurement platforms such as Zip, Ironclad, Beeline, or comparable intake/orchestration, CLM, and contingent-labor solutions. • Supplier-performance, operational KPI, procurement, contract, or risk dashboards in Power BI. • Lean, Six Sigma, BPMN, SIPOC, Agile, Prosci/ADKAR, or equivalent process/change experience. • Procurement master data, supplier analytics, contract analytics, data governance, and data-quality controls. • Training development, working-session facilitation, and knowledge transfer to business users.
11/14/2026
Full time
DTS is looking for Business Analyst (Procurement / Vendor Management) for our client position based in Detroit, MI Description: Engagement Description - Support the Vendor Management (VM) team as Enterprise Procurement progresses from 2026 capability building into the 2027 Procurement Transformation roadmap. The contractor will help convert current-state VM processes, data, controls, reporting, automation, and AI-enabled use cases into documented requirements and implementation-ready artifacts for the future operating model. Act as a hands-on bridge across Vendor Management, Procurement business stakeholders, analytics, technology, and change activities. The resource should move between business analysis, process redesign, data/reporting, UAT, documentation, training, and practical AI/automation use cases rather than operate as a narrowly focused developer. Expected work includes current/future-state process mapping; requirements and user stories; gap/root-cause analysis; control and risk documentation; data/KPI analysis; Power BI/Excel reporting; system/workflow requirements; test scenarios/UAT coordination; SOPs/job aids; training/knowledge transfer; and evaluation of responsible AI or automation opportunities. Success is defined by high-quality, reusable artifacts that accelerate transformation while preserving controls, data quality, stakeholder alignment, and knowledge transfer to the internal VM team. Top 3 Required Skills/Experience - • 5+ years of business/systems analysis or process transformation experience, including requirements gathering, current/future-state process mapping, root-cause analysis, process redesign, technical documentation, UAT, and cross-functional implementation support for complex business processes. • 3+ years of procurement, vendor/supplier management, source-to-pay, contract lifecycle, or adjacent supply-chain experience. Strong preference for hands-on Oracle Cloud Procurement and/or CLM/vendor management platform experience and ability to translate VM needs into system and data requirements. • Demonstrated analytics and AI-enabled process improvement capability: advanced Excel plus Power BI or Tableau, KPI/reporting analysis, and practical use of enterprise generative AI tools such as Microsoft Copilot, ChatGPT, Claude, or Gemini with appropriate human review and data/privacy controls. Required Skills/Experience - The rest of the required skills/experience. Include: • Facilitate stakeholder interviews/workshops and convert needs into functional requirements, process maps, acceptance criteria, decision logs, RACI inputs, and implementation documentation. • Support technology/transformation initiatives through design, integration/deployment readiness, testing, defect triage, UAT, change management, and post-implementation knowledge transfer. • Strong process optimization skills: root-cause analysis, control-point identification, exception/handoff analysis, and measurable improvement recommendations. • Working knowledge of supplier lifecycle activities including onboarding, risk/compliance, contract administration, supplier performance, data maintenance, monitoring, and issue resolution. • Oracle Cloud or comparable enterprise procurement/ERP experience; understand dependencies across procurement, contracts, master data, requisition-to-pay, and reporting. • Contract lifecycle management concepts/tools; document business rules, metadata, workflow requirements, alerts, approvals, and reporting needs. • Advanced Excel and working proficiency in Power BI or Tableau; profile data, analyze trends, validate data quality, develop/refine KPIs, and translate analysis into recommendations. • Practical generative AI and AI-enabled workflow experience, including validation, human-in-the-loop review, confidentiality, privacy, and responsible-use considerations. • Assess risk and controls in redesigned/automated processes, including data privacy, cybersecurity, auditability, segregation of duties, and approval controls. • Excellent written/verbal communication; produce executive summaries plus detailed SOPs, requirements, test scripts, job aids, and training materials. • Work independently in ambiguity, manage multiple priorities, surface risks early, and collaborate with business SMEs, technology teams, suppliers, and leaders. • Working understanding of cloud/SaaS concepts and integrations; deep cloud engineering expertise is not required. Preferred Skills/Experience - Optional but preferred skills/experience. Include: • Healthcare payer, health insurance, or another highly regulated industry. • AI/ML or generative-AI implementation in procurement, operations, contracting, supplier management, analytics, or knowledge management. • Microsoft Power Platform (Power Automate/Power Apps) and/or UiPath/RPA. • Modern procurement platforms such as Zip, Ironclad, Beeline, or comparable intake/orchestration, CLM, and contingent-labor solutions. • Supplier-performance, operational KPI, procurement, contract, or risk dashboards in Power BI. • Lean, Six Sigma, BPMN, SIPOC, Agile, Prosci/ADKAR, or equivalent process/change experience. • Procurement master data, supplier analytics, contract analytics, data governance, and data-quality controls. • Training development, working-session facilitation, and knowledge transfer to business users.
GovCIO LLC seeks a ServiceNow Workflow Manager to lead design, optimization, and governance of ServiceNow workflows within our Information Technology & Digital Solutions organization supporting federal clients. You will own end-to-end workflow strategy, translating customer and cyber security needs into scalable ITSM and automation solutions aligned with ITIL. Partnering with cross-functional teams, you'll manage platform roadmaps, integrations, and releases while ensuring compliance with federal security and data standards. GovCIO's agile, innovative culture offers significant growth, visibility, and impact within mission-critical government IT programs. Responsibilities Lead design, configuration, and optimization of Service Now workflows across IT & Digital Solutions. Translate business requirements into scalable Service Now solutions aligned with ITIL best practices. Collaborate with cyber, infrastructure, and application teams to integrate Service Now with other enterprise tools. Oversee Service Now releases, upgrades, and change management processes. Develop dashboards and reports to track workflow performance and service quality. Provide technical guidance and mentorship to analysts and developers on the Service Now platform. Ensure compliance with federal security, data, and configuration management standards. Engage stakeholders to continuously improve processes and user experience. Document solutions, standards, and governance for Service Now workflows. Support incident, problem, and request fulfillment processes using Service Now. Required Skills Service Now platform administration Service Now workflow design ITSM/ITIL processes Service Now scripting (JavaScript, Glide) Integration via REST/SOAP APIs Agile project management Requirements gathering Change and release management Performance monitoring and reporting Stakeholder communication
11/14/2026
Full time
GovCIO LLC seeks a ServiceNow Workflow Manager to lead design, optimization, and governance of ServiceNow workflows within our Information Technology & Digital Solutions organization supporting federal clients. You will own end-to-end workflow strategy, translating customer and cyber security needs into scalable ITSM and automation solutions aligned with ITIL. Partnering with cross-functional teams, you'll manage platform roadmaps, integrations, and releases while ensuring compliance with federal security and data standards. GovCIO's agile, innovative culture offers significant growth, visibility, and impact within mission-critical government IT programs. Responsibilities Lead design, configuration, and optimization of Service Now workflows across IT & Digital Solutions. Translate business requirements into scalable Service Now solutions aligned with ITIL best practices. Collaborate with cyber, infrastructure, and application teams to integrate Service Now with other enterprise tools. Oversee Service Now releases, upgrades, and change management processes. Develop dashboards and reports to track workflow performance and service quality. Provide technical guidance and mentorship to analysts and developers on the Service Now platform. Ensure compliance with federal security, data, and configuration management standards. Engage stakeholders to continuously improve processes and user experience. Document solutions, standards, and governance for Service Now workflows. Support incident, problem, and request fulfillment processes using Service Now. Required Skills Service Now platform administration Service Now workflow design ITSM/ITIL processes Service Now scripting (JavaScript, Glide) Integration via REST/SOAP APIs Agile project management Requirements gathering Change and release management Performance monitoring and reporting Stakeholder communication
Title: Cybersecurity Analyst Location: New Orleans, LA (Hybrid) Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 12 hrs every alternate Saturday) Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 12 hrs every alternate Saturday) Onsite: Day Shift resources need to go onsite 2 days a week ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert triage, and incident escalation across cyber and physical-security environments. The role involves reviewing cybersecurity alerts and logs from network and application systems, as well as physical-security systems, to help identify and respond to potential incidents. Key Responsibilities: Monitor and triage alerts from SIEM, network, OT, application, and physical security systems, and investigate potential malware, phishing, unauthorized access, and suspicious activity. Analyze logs and alert data to determine an incident's cause, scope, severity, and impact. Correlate cyber and physical security events, document findings, and escalate incidents to the appropriate teams in accordance with established procedures. Support threat-hunting activities by reviewing alerts and logs, gathering threat intelligence, and using vulnerability findings to help prioritize investigations. Use the MITRE ATT&CK framework to analyze alerts and threat activity. Follow monitoring procedures and response playbooks, escalate incidents as required, and communicate investigation findings. Participate in attack simulations and tabletop exercises to support SOC readiness. Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews. Stay informed about emerging threats and the use of AI tools in cybersecurity. Participate in an on-call rotation approximately once every 4-6 weeks. Be willing to travel up to 25% for training and incident support. Required Skills: 5+ years of relevant cybersecurity or security operations experience, including security monitoring, alert triage, and incident response. Experience analyzing security alerts and logs, conducting investigations, and escalating complex or high-impact incidents. Hands-on experience with security monitoring platforms such as Splunk and CrowdStrike. Hands-on experience with email security tools and phishing detection. Experience with SIEM, SOAR, IDS/IPS, and digital forensics tools. Ability to analyze and validate data in support of security operations. Applied knowledge of adversary tactics and techniques, including the MITRE ATT&CK framework, to investigate and assess threats. Familiarity with physical security systems and foundational knowledge of OT/ICS, application, cloud, and network security. Knowledge of regulatory compliance like NERC CIP and/or the NIST Cybersecurity Framework, with experience supporting audits or assessments. Experience applying AI or agentic AI tools in SOC operations is a plus. Collaborative team player with strong analytical and communication skills. Self-motivated, resourceful, and customer-focused, with a strong sense of ownership. Certifications such as CompTIA, GIAC, or ISC2 are a plus.
11/14/2026
Full time
Title: Cybersecurity Analyst Location: New Orleans, LA (Hybrid) Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 12 hrs every alternate Saturday) Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 12 hrs every alternate Saturday) Onsite: Day Shift resources need to go onsite 2 days a week ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert triage, and incident escalation across cyber and physical-security environments. The role involves reviewing cybersecurity alerts and logs from network and application systems, as well as physical-security systems, to help identify and respond to potential incidents. Key Responsibilities: Monitor and triage alerts from SIEM, network, OT, application, and physical security systems, and investigate potential malware, phishing, unauthorized access, and suspicious activity. Analyze logs and alert data to determine an incident's cause, scope, severity, and impact. Correlate cyber and physical security events, document findings, and escalate incidents to the appropriate teams in accordance with established procedures. Support threat-hunting activities by reviewing alerts and logs, gathering threat intelligence, and using vulnerability findings to help prioritize investigations. Use the MITRE ATT&CK framework to analyze alerts and threat activity. Follow monitoring procedures and response playbooks, escalate incidents as required, and communicate investigation findings. Participate in attack simulations and tabletop exercises to support SOC readiness. Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews. Stay informed about emerging threats and the use of AI tools in cybersecurity. Participate in an on-call rotation approximately once every 4-6 weeks. Be willing to travel up to 25% for training and incident support. Required Skills: 5+ years of relevant cybersecurity or security operations experience, including security monitoring, alert triage, and incident response. Experience analyzing security alerts and logs, conducting investigations, and escalating complex or high-impact incidents. Hands-on experience with security monitoring platforms such as Splunk and CrowdStrike. Hands-on experience with email security tools and phishing detection. Experience with SIEM, SOAR, IDS/IPS, and digital forensics tools. Ability to analyze and validate data in support of security operations. Applied knowledge of adversary tactics and techniques, including the MITRE ATT&CK framework, to investigate and assess threats. Familiarity with physical security systems and foundational knowledge of OT/ICS, application, cloud, and network security. Knowledge of regulatory compliance like NERC CIP and/or the NIST Cybersecurity Framework, with experience supporting audits or assessments. Experience applying AI or agentic AI tools in SOC operations is a plus. Collaborative team player with strong analytical and communication skills. Self-motivated, resourceful, and customer-focused, with a strong sense of ownership. Certifications such as CompTIA, GIAC, or ISC2 are a plus.
This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Cyber Security Incident Response IR Manager will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Cloud Incident Response IR Manager will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Seasoned Cloud Security Incident Response leader with deep expertise in Azure, AWS, and GCP, driving rapid containment and remediation of complex threats across hybrid environments. Proven track record in orchestrating cross-cloud IR workflows and forensic investigations, ensuring resilient security posture and regulatory compliance. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness. Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense. Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements. Qualifications The Requirements Minimum 7 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred. Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The base salary compensation range being offered for this role is $120,000.00-$180,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus. Company Benefits WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles) Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans' eligibility requirements. Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records. This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets
11/14/2026
Full time
This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Cyber Security Incident Response IR Manager will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Cloud Incident Response IR Manager will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Seasoned Cloud Security Incident Response leader with deep expertise in Azure, AWS, and GCP, driving rapid containment and remediation of complex threats across hybrid environments. Proven track record in orchestrating cross-cloud IR workflows and forensic investigations, ensuring resilient security posture and regulatory compliance. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness. Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense. Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements. Qualifications The Requirements Minimum 7 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred. Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The base salary compensation range being offered for this role is $120,000.00-$180,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus. Company Benefits WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles) Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans' eligibility requirements. Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records. This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets
Job Title: Senior Business Management Analyst - Sector Risk Management Engagement - TS/SCI Location: Onsite/Hybrid - DHS CISA, Arlington, VA. Classified work at 1110 N. Glebe Road or 1310 N. Courthouse; unclassified work may occur at 4200 Wilson Boulevard or an approved remote worksite. Work Schedule: Monday through Friday, generally 8:00 a.m. to 4:30 p.m. Eastern Time, excluding federal holidays; schedule flexibility may be required for emergent events. Security Requirements: TS/SCI - Top Secret clearance required, with the ability to obtain and maintain SCI eligibility/access and favorable DHS fitness and required access determinations. Classified work is performed at approved Government facilities. Work Authorization: U.S. citizenship required for classified access. Must be authorized to work in the United States. AttainX is seeking a Senior Business Management Analyst to provide senior program analysis, policy research, and decision support for CISA's Sector Management leadership and Sector Risk Management Agency responsibilities for sector-specific and cross-sector engagement. This position supports the Stakeholder Engagement Division through critical infrastructure engagement and advisory services. Qualifications and Education Requirements: At least five (5) years of related business management, program analysis, policy research, or stakeholder engagement experience, including work with senior Government leaders. A bachelor's degree in business, public administration, public policy, management, or a related field, or an equivalent combination of education and relevant experience. Experience conducting qualitative and quantitative analyses, identifying operational risks, and developing actionable recommendations. Ability to develop executive briefings, research papers, process maps, project schedules, and performance dashboards. Experience independently coordinating complex projects and reviewing analytical products for quality, accuracy, and timeliness. Knowledge of critical infrastructure sectors, SRMA responsibilities, sector interdependencies, and cyber and physical risk considerations. A current IIBA Certified Business Analysis Professional (CBAP) certification is preferred. Must possess a Top Secret clearance and be able to obtain and maintain SCI eligibility/access; classified work must be performed at approved Government facilities. Job Duties: Lead complex sector risk management analyses and coordinate analytical work, review findings, and provide evidence-based recommendations to senior leaders. Support sector-specific and cross-sector engagement planning and coordination aligned with SRMA responsibilities and leadership priorities. Maintain sector charters, bylaws, membership criteria, participation records, and procedural documents using approved templates. Research sector challenges, cyber and physical risks, interdependencies, and information-sharing needs; develop decision-support products. Collect and analyze attendance, stakeholder feedback, participation trends, and cross-sector observations; prepare monthly reports and recommendations. Maintain weekly dashboards, decision logs, action trackers, schedules, and risk and milestone records to support integrated coordination. Prepare engagement packages and support post-engagement summaries and action updates within three business days unless directed otherwise. Support classified meetings at approved Government facilities, including registration, onsite logistics, attendance records, and accurate meeting notes; prepare and handle records using required classified protocols. Support rapid-response products during urgent events and contribute to the consolidated after-action summary within ten business days after deactivation. Non-Essential Functions: Other related duties as assigned. About Us AttainX, Inc. delivers technology solutions, software products, and professional services to Federal Government customers. Our people are central to achieving our customers' missions. We support quality, collaboration, and employee growth through teamwork and professional development. Benefits We are proud to offer competitive compensation and benefits packages, including paid vacation, medical, dental, and vision insurance, a matching 401(k) plan, tuition/training reimbursement, and long- and short-term disability coverage, subject to plan terms and eligibility. EEO Commitment: AttainX is an equal employment opportunity employer committed to a workplace free from discrimination. We provide equal opportunity to applicants and employees without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. Accommodations: Applicants and employees who need a reasonable accommodation for the application process or to perform essential job functions may contact Human Resources. Physical Demands: This position primarily involves computer-based work, reviewing technical materials, and communicating with team members and stakeholders. Essential functions may be performed with or without reasonable accommodation. Work Environment: Work is performed at DHS CISA facilities in Arlington, VA, with telework permitted only when approved by the COR. Classified work is performed at approved Government facilities; remote work is limited to authorized unclassified information. General work hours are 8:00 a.m. to 4:30 p.m. Eastern Time, Monday through Friday, excluding federal holidays. Office noise is generally moderate. Hours may be adjusted for emergent events, and Government-directed travel may be required. Compensation details: 00 Yearly Salary PI01384a97804a-7473
11/14/2026
Full time
Job Title: Senior Business Management Analyst - Sector Risk Management Engagement - TS/SCI Location: Onsite/Hybrid - DHS CISA, Arlington, VA. Classified work at 1110 N. Glebe Road or 1310 N. Courthouse; unclassified work may occur at 4200 Wilson Boulevard or an approved remote worksite. Work Schedule: Monday through Friday, generally 8:00 a.m. to 4:30 p.m. Eastern Time, excluding federal holidays; schedule flexibility may be required for emergent events. Security Requirements: TS/SCI - Top Secret clearance required, with the ability to obtain and maintain SCI eligibility/access and favorable DHS fitness and required access determinations. Classified work is performed at approved Government facilities. Work Authorization: U.S. citizenship required for classified access. Must be authorized to work in the United States. AttainX is seeking a Senior Business Management Analyst to provide senior program analysis, policy research, and decision support for CISA's Sector Management leadership and Sector Risk Management Agency responsibilities for sector-specific and cross-sector engagement. This position supports the Stakeholder Engagement Division through critical infrastructure engagement and advisory services. Qualifications and Education Requirements: At least five (5) years of related business management, program analysis, policy research, or stakeholder engagement experience, including work with senior Government leaders. A bachelor's degree in business, public administration, public policy, management, or a related field, or an equivalent combination of education and relevant experience. Experience conducting qualitative and quantitative analyses, identifying operational risks, and developing actionable recommendations. Ability to develop executive briefings, research papers, process maps, project schedules, and performance dashboards. Experience independently coordinating complex projects and reviewing analytical products for quality, accuracy, and timeliness. Knowledge of critical infrastructure sectors, SRMA responsibilities, sector interdependencies, and cyber and physical risk considerations. A current IIBA Certified Business Analysis Professional (CBAP) certification is preferred. Must possess a Top Secret clearance and be able to obtain and maintain SCI eligibility/access; classified work must be performed at approved Government facilities. Job Duties: Lead complex sector risk management analyses and coordinate analytical work, review findings, and provide evidence-based recommendations to senior leaders. Support sector-specific and cross-sector engagement planning and coordination aligned with SRMA responsibilities and leadership priorities. Maintain sector charters, bylaws, membership criteria, participation records, and procedural documents using approved templates. Research sector challenges, cyber and physical risks, interdependencies, and information-sharing needs; develop decision-support products. Collect and analyze attendance, stakeholder feedback, participation trends, and cross-sector observations; prepare monthly reports and recommendations. Maintain weekly dashboards, decision logs, action trackers, schedules, and risk and milestone records to support integrated coordination. Prepare engagement packages and support post-engagement summaries and action updates within three business days unless directed otherwise. Support classified meetings at approved Government facilities, including registration, onsite logistics, attendance records, and accurate meeting notes; prepare and handle records using required classified protocols. Support rapid-response products during urgent events and contribute to the consolidated after-action summary within ten business days after deactivation. Non-Essential Functions: Other related duties as assigned. About Us AttainX, Inc. delivers technology solutions, software products, and professional services to Federal Government customers. Our people are central to achieving our customers' missions. We support quality, collaboration, and employee growth through teamwork and professional development. Benefits We are proud to offer competitive compensation and benefits packages, including paid vacation, medical, dental, and vision insurance, a matching 401(k) plan, tuition/training reimbursement, and long- and short-term disability coverage, subject to plan terms and eligibility. EEO Commitment: AttainX is an equal employment opportunity employer committed to a workplace free from discrimination. We provide equal opportunity to applicants and employees without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. Accommodations: Applicants and employees who need a reasonable accommodation for the application process or to perform essential job functions may contact Human Resources. Physical Demands: This position primarily involves computer-based work, reviewing technical materials, and communicating with team members and stakeholders. Essential functions may be performed with or without reasonable accommodation. Work Environment: Work is performed at DHS CISA facilities in Arlington, VA, with telework permitted only when approved by the COR. Classified work is performed at approved Government facilities; remote work is limited to authorized unclassified information. General work hours are 8:00 a.m. to 4:30 p.m. Eastern Time, Monday through Friday, excluding federal holidays. Office noise is generally moderate. Hours may be adjusted for emergent events, and Government-directed travel may be required. Compensation details: 00 Yearly Salary PI01384a97804a-7473
Constellation Navigation and Trading, LLC
Norfolk, Virginia
U.S. Marine Management Position Description Disclaimer: The purpose of this document is to provide a summary of the generic functions/tasks associated with this position. It is not an exhaustive or comprehensive list of all possible position responsibilities, tasks, and duties. The responsibilities, tasks, and duties of the incumbent might differ from those outlined here and additional duties may be assigned at the manager's discretion. The position description details as outlined below are also subject to change or reassigned at any time. Business Title: Information Technology Manger Supervisory Responsibilities: No Status: Exempt Supervisor: Vice President, HSSE & Shared Services Purpose/Summary Responsible to the Vice President, HSSE & Shared Services for the effective, efficient, and compliant operation, maintenance, and sustainment of USMMI's shore-side and shipboard information technology (IT) systems to include all hardware and software systems, services, applications and licenses in accordance with approved project and department budgets. Acts as the primary liaison and manager of company outsourced IT resources and initiatives. Assists the Manger, Cyber & Physical Security with ensuring USMI compliance with cybersecurity regulations and standards. Supports company IT objectives including financial, operational and safety goals/objectives/KPIs. Liaise with internal and external stakeholders ensuring responsibility for satisfactory resolution to help tickets, complaints or project implementation. This position is in USMMI's Corporate office in Norfolk, Virginia. Key Responsibilities Manage the design, maintenance, development, and evaluation of all vessel and shoreside IT infrastructure systems, hardware and software including LANs, WANs, Cloud-based services, Internet ISPs, intranet, security, workstation, mobile telephony, SATCOM and wireless implementations. Act as the primary IT representative to USMMI owned and/or operated vessels. In this capacity, provide satisfactory resolution to help tickets outside of third party contracted services. Serve as account administrator for key software services and applications. Oversee third party on premises and after hours Help Desk service and ensure compliance with contracted response rates. Serve as the NSE Software Administrator: Submit, monitor, and ensure help tickets are processed by ABS Wavesight. Implement functional changes to the NSE interface in support of efficiency and data analytics. Assist the Manager, Cyber & Physical Security in ensuring company compliance with cybersecurity standards to include NIST 800-171, CMMC, ISO 27001:2022, and U.S. Coast Guard Cybersecurity in the Marine Transportation System regulations. Assist the Contracting & Proposal Analyst in ensuring compliance with applicable Defense Federal Acquisition Regulations (DFAR). Position Specifications Education & Experience IT relevant bachelor's level degree preferred (Degree must be from an accredited institution). Ten years' experience in actively managing day-to-day IT functions to include network administration, help ticket resolution, and interactions with third party hardware, software, and application providers. The following certifications are preferred: CISA, CISM, CRISC, CGEIT, CISSP Experience preferred in the development, deployment and support of SATCOM and other shipboard related IT systems. Technical Skills & Competencies Required Proficiency maintaining Microsoft Azure GCC-high architecture and applications. Technical proficiency installing and maintaining Microsoft Office 365 suite of programs in the GCC-high environment. SharePoint administration and design is required. Proficiency in the technical details and maintenance of Starlink as an internet service provider. Proficiency in video teleconferencing services and systems to include troubleshooting and system design. Preferred experience in the management and operation of ABS Nautical Systems (NS). Must be a U.S. citizen eligible to obtain a Secret security clearance. Travel Requirements Travel is estimated to be 10-20% of the calendar year to provide support to USMMI owned/operated/managed vessels. International and domestic travel is required for this position. Required to maintain a U.S. Passport. Physical Demands & Work Environment The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. General office setting, typically the employee may sit comfortably to perform the work, usually at a computer terminal with short breaks or lunch period. However, there may be some bending/stooping, reaching above shoulder level, walking; standing; carrying of light items such as papers, books, or packages of up to 25 pounds. Should be able to hear & speak clearly using phone / headset to communicate with customers; be able to navigate, view & enter information on the computer. Operations Setting: typically, the employee must be able to be in Confined Spaces, Sit, Stand, Walk, Bend, Push/Pull, Kneel, Squat, Reaching and Twisting. Can not have any Fear of Heights. Also need the ability to consistently be able to lift 10lb - 100lb utilizing Folding Hand Truck & Dolly, Rolling Utility Carts or Single Hand Trucks (70 - 100%) of time. PIbdd391ef1ab7-9462
11/14/2026
Full time
U.S. Marine Management Position Description Disclaimer: The purpose of this document is to provide a summary of the generic functions/tasks associated with this position. It is not an exhaustive or comprehensive list of all possible position responsibilities, tasks, and duties. The responsibilities, tasks, and duties of the incumbent might differ from those outlined here and additional duties may be assigned at the manager's discretion. The position description details as outlined below are also subject to change or reassigned at any time. Business Title: Information Technology Manger Supervisory Responsibilities: No Status: Exempt Supervisor: Vice President, HSSE & Shared Services Purpose/Summary Responsible to the Vice President, HSSE & Shared Services for the effective, efficient, and compliant operation, maintenance, and sustainment of USMMI's shore-side and shipboard information technology (IT) systems to include all hardware and software systems, services, applications and licenses in accordance with approved project and department budgets. Acts as the primary liaison and manager of company outsourced IT resources and initiatives. Assists the Manger, Cyber & Physical Security with ensuring USMI compliance with cybersecurity regulations and standards. Supports company IT objectives including financial, operational and safety goals/objectives/KPIs. Liaise with internal and external stakeholders ensuring responsibility for satisfactory resolution to help tickets, complaints or project implementation. This position is in USMMI's Corporate office in Norfolk, Virginia. Key Responsibilities Manage the design, maintenance, development, and evaluation of all vessel and shoreside IT infrastructure systems, hardware and software including LANs, WANs, Cloud-based services, Internet ISPs, intranet, security, workstation, mobile telephony, SATCOM and wireless implementations. Act as the primary IT representative to USMMI owned and/or operated vessels. In this capacity, provide satisfactory resolution to help tickets outside of third party contracted services. Serve as account administrator for key software services and applications. Oversee third party on premises and after hours Help Desk service and ensure compliance with contracted response rates. Serve as the NSE Software Administrator: Submit, monitor, and ensure help tickets are processed by ABS Wavesight. Implement functional changes to the NSE interface in support of efficiency and data analytics. Assist the Manager, Cyber & Physical Security in ensuring company compliance with cybersecurity standards to include NIST 800-171, CMMC, ISO 27001:2022, and U.S. Coast Guard Cybersecurity in the Marine Transportation System regulations. Assist the Contracting & Proposal Analyst in ensuring compliance with applicable Defense Federal Acquisition Regulations (DFAR). Position Specifications Education & Experience IT relevant bachelor's level degree preferred (Degree must be from an accredited institution). Ten years' experience in actively managing day-to-day IT functions to include network administration, help ticket resolution, and interactions with third party hardware, software, and application providers. The following certifications are preferred: CISA, CISM, CRISC, CGEIT, CISSP Experience preferred in the development, deployment and support of SATCOM and other shipboard related IT systems. Technical Skills & Competencies Required Proficiency maintaining Microsoft Azure GCC-high architecture and applications. Technical proficiency installing and maintaining Microsoft Office 365 suite of programs in the GCC-high environment. SharePoint administration and design is required. Proficiency in the technical details and maintenance of Starlink as an internet service provider. Proficiency in video teleconferencing services and systems to include troubleshooting and system design. Preferred experience in the management and operation of ABS Nautical Systems (NS). Must be a U.S. citizen eligible to obtain a Secret security clearance. Travel Requirements Travel is estimated to be 10-20% of the calendar year to provide support to USMMI owned/operated/managed vessels. International and domestic travel is required for this position. Required to maintain a U.S. Passport. Physical Demands & Work Environment The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. General office setting, typically the employee may sit comfortably to perform the work, usually at a computer terminal with short breaks or lunch period. However, there may be some bending/stooping, reaching above shoulder level, walking; standing; carrying of light items such as papers, books, or packages of up to 25 pounds. Should be able to hear & speak clearly using phone / headset to communicate with customers; be able to navigate, view & enter information on the computer. Operations Setting: typically, the employee must be able to be in Confined Spaces, Sit, Stand, Walk, Bend, Push/Pull, Kneel, Squat, Reaching and Twisting. Can not have any Fear of Heights. Also need the ability to consistently be able to lift 10lb - 100lb utilizing Folding Hand Truck & Dolly, Rolling Utility Carts or Single Hand Trucks (70 - 100%) of time. PIbdd391ef1ab7-9462
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board! Why you'll love this job As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline. Cyber Business Engagement partners closely with business and technology teams to understand strategic priorities, conduct security reviews for technology initiatives, and embed security early in the planning and delivery process to enable secure business outcomes. Through cyber awareness programs, targeted training, and phishing simulations, we strengthen security culture, increase risk awareness, and empower employees to make informed security decisions while advancing business objectives. Experience supporting cybersecurity communications, awareness campaigns, training delivery, stakeholder engagement, and reporting activities in a business or technology environment. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Support Cyber Business Engagement Activities: Partner with business and technology teams to strengthen cybersecurity awareness, promote secure practices, and support the integration of security into business initiatives and decision-making. Deliver Security Awareness, Training, and Education Programs: Assist with the development, coordination, communication, and continuous improvement of cybersecurity awareness campaigns, training content, and educational resources for employees. Execute Phishing Simulation and Human Risk Programs: Support the planning, execution, analysis, and reporting of phishing simulations and other human risk initiatives to drive behavior change and reduce cybersecurity risk. Analyze and Report Engagement Metrics: Gather, validate, and analyze awareness, training, phishing simulation, and engagement metrics to identify trends, measure program effectiveness, and provide insights to stakeholders and leadership. Partner with Business Stakeholders: Collaborate with business leaders, technology teams, and cybersecurity partners to understand business priorities, provide risk-informed guidance, and promote shared accountability for cybersecurity. Support Security Reviews and Consultations: Participate in security reviews for technology initiatives and business projects, helping identify risks, communicate security considerations, and embed cybersecurity early in the lifecycle. Drive Communication and Outreach Efforts: Develop and deliver communications that increase cybersecurity awareness, reinforce key behaviors, and keep employees informed of emerging threats and security best practices. Improve Engagement Processes and Program Effectiveness: Help identify opportunities to enhance awareness campaigns, training programs, phishing simulations, reporting, communications, and stakeholder engagement activities to strengthen the organization's security culture. All you'll need for success Minimum Qualifications - Education & Prior Job Experience Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training. 3+ years Experience supporting cybersecurity awareness, training, phishing simulation, business engagement, communications, or related cybersecurity programs. Preferred Qualifications - Education & Prior Job Experience Additional education, coursework, or training in cybersecurity, information security, information systems, risk management, compliance, audit, or a related field preferred. 4+ years of experience in cybersecurity awareness, training, phishing simulation, business engagement, communications, or related cybersecurity programs. Experience with cybersecurity awareness platforms, phishing simulation tools, learning management systems, communication campaigns, reporting and analytics, or related technologies preferred. Experience applying industry cybersecurity best practices and awareness frameworks, including human risk management, security culture development, phishing resilience, and cyber education programs preferred. Skills, Licenses, and Certifications Knowledge of cybersecurity awareness, training, phishing simulation, and human risk management principles, practices, and program lifecycle activities. Familiarity with cybersecurity best practices, security culture development, behavior change methodologies, phishing resilience, and cyber awareness frameworks. Ability to support the planning, coordination, execution, and continuous improvement of cybersecurity awareness campaigns, training programs, and phishing simulation exercises. Strong analytical skills with the ability to review awareness metrics, phishing simulation results, engagement data, and risk trends, translating findings into actionable insights, reporting, and stakeholder communications. Ability to support security reviews and business consultations by identifying cybersecurity considerations, communicating risks, and helping integrate security requirements into business and technology initiatives. Self-starter with a strong ownership mindset, including the ability to independently manage awareness initiatives, stakeholder communications, project deliverables, and follow-up activities. Strong organizational and prioritization skills, with the ability to manage multiple awareness campaigns, training initiatives, stakeholder requests, communications, and reporting deadlines with attention to detail. Excellent written and verbal communication skills, with the ability to develop clear, engaging, and audience-appropriate cybersecurity communications, presentations, training materials, and awareness content. Ability to work collaboratively across cybersecurity, technology, business, communications, human resources, legal, and compliance teams to advance cybersecurity culture and risk reduction objectives. Demonstrated curiosity and learning agility, including the ability to quickly build knowledge of emerging cyber threats, human risk trends, business priorities, and evolving cybersecurity practices. Ability to use awareness platforms, phishing simulation tools, learning management systems (LMS), reporting tools, dashboards, collaboration platforms, spreadsheets, and data analysis tools effectively. Relevant cybersecurity, awareness, communications, training, risk, or project management certifications preferred, such as Security+, SSAP (Security Awareness Practitioner), CISSP, CISM, PMP, Certified Security Culture Professional (CSCP), or comparable certifications. What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Member Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.
11/14/2026
Full time
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board! Why you'll love this job As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline. Cyber Business Engagement partners closely with business and technology teams to understand strategic priorities, conduct security reviews for technology initiatives, and embed security early in the planning and delivery process to enable secure business outcomes. Through cyber awareness programs, targeted training, and phishing simulations, we strengthen security culture, increase risk awareness, and empower employees to make informed security decisions while advancing business objectives. Experience supporting cybersecurity communications, awareness campaigns, training delivery, stakeholder engagement, and reporting activities in a business or technology environment. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Support Cyber Business Engagement Activities: Partner with business and technology teams to strengthen cybersecurity awareness, promote secure practices, and support the integration of security into business initiatives and decision-making. Deliver Security Awareness, Training, and Education Programs: Assist with the development, coordination, communication, and continuous improvement of cybersecurity awareness campaigns, training content, and educational resources for employees. Execute Phishing Simulation and Human Risk Programs: Support the planning, execution, analysis, and reporting of phishing simulations and other human risk initiatives to drive behavior change and reduce cybersecurity risk. Analyze and Report Engagement Metrics: Gather, validate, and analyze awareness, training, phishing simulation, and engagement metrics to identify trends, measure program effectiveness, and provide insights to stakeholders and leadership. Partner with Business Stakeholders: Collaborate with business leaders, technology teams, and cybersecurity partners to understand business priorities, provide risk-informed guidance, and promote shared accountability for cybersecurity. Support Security Reviews and Consultations: Participate in security reviews for technology initiatives and business projects, helping identify risks, communicate security considerations, and embed cybersecurity early in the lifecycle. Drive Communication and Outreach Efforts: Develop and deliver communications that increase cybersecurity awareness, reinforce key behaviors, and keep employees informed of emerging threats and security best practices. Improve Engagement Processes and Program Effectiveness: Help identify opportunities to enhance awareness campaigns, training programs, phishing simulations, reporting, communications, and stakeholder engagement activities to strengthen the organization's security culture. All you'll need for success Minimum Qualifications - Education & Prior Job Experience Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training. 3+ years Experience supporting cybersecurity awareness, training, phishing simulation, business engagement, communications, or related cybersecurity programs. Preferred Qualifications - Education & Prior Job Experience Additional education, coursework, or training in cybersecurity, information security, information systems, risk management, compliance, audit, or a related field preferred. 4+ years of experience in cybersecurity awareness, training, phishing simulation, business engagement, communications, or related cybersecurity programs. Experience with cybersecurity awareness platforms, phishing simulation tools, learning management systems, communication campaigns, reporting and analytics, or related technologies preferred. Experience applying industry cybersecurity best practices and awareness frameworks, including human risk management, security culture development, phishing resilience, and cyber education programs preferred. Skills, Licenses, and Certifications Knowledge of cybersecurity awareness, training, phishing simulation, and human risk management principles, practices, and program lifecycle activities. Familiarity with cybersecurity best practices, security culture development, behavior change methodologies, phishing resilience, and cyber awareness frameworks. Ability to support the planning, coordination, execution, and continuous improvement of cybersecurity awareness campaigns, training programs, and phishing simulation exercises. Strong analytical skills with the ability to review awareness metrics, phishing simulation results, engagement data, and risk trends, translating findings into actionable insights, reporting, and stakeholder communications. Ability to support security reviews and business consultations by identifying cybersecurity considerations, communicating risks, and helping integrate security requirements into business and technology initiatives. Self-starter with a strong ownership mindset, including the ability to independently manage awareness initiatives, stakeholder communications, project deliverables, and follow-up activities. Strong organizational and prioritization skills, with the ability to manage multiple awareness campaigns, training initiatives, stakeholder requests, communications, and reporting deadlines with attention to detail. Excellent written and verbal communication skills, with the ability to develop clear, engaging, and audience-appropriate cybersecurity communications, presentations, training materials, and awareness content. Ability to work collaboratively across cybersecurity, technology, business, communications, human resources, legal, and compliance teams to advance cybersecurity culture and risk reduction objectives. Demonstrated curiosity and learning agility, including the ability to quickly build knowledge of emerging cyber threats, human risk trends, business priorities, and evolving cybersecurity practices. Ability to use awareness platforms, phishing simulation tools, learning management systems (LMS), reporting tools, dashboards, collaboration platforms, spreadsheets, and data analysis tools effectively. Relevant cybersecurity, awareness, communications, training, risk, or project management certifications preferred, such as Security+, SSAP (Security Awareness Practitioner), CISSP, CISM, PMP, Certified Security Culture Professional (CSCP), or comparable certifications. What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Member Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders, helping team members reach their full potential and creating an inclusive work environment to meet and exceed the needs of our diverse world. Are you ready to feel a tremendous sense of pride and satisfaction as you do your part to keep the largest airline in the world running smoothly as we care for people on life's journey? Feel free to be yourself at American.
Job Description Job Description Summary : DXC's Global Cyber Security team is building AI-enabled security capabilities that make our risk management faster, more consistent, and more scalable. AI Security Engineers design, build, and operate the solutions that power vulnerability management, cloud security posture management, DevSecOps, risk management, and security metrics across DXC's global environment. You will combine security domain knowledge with software engineering and AI to turn manual security processes into automated, reliable, and measurable systems. You will work closely with the Vulnerability Management Lead, Data Protection Manager, security architects, risk analysts, cloud and platform engineers, and application development teams. The role suits a builder who is comfortable working in code, prototyping quickly with AI-assisted development tools, and taking solutions from proof of concept to production. Roles and Responsibilities Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing. Use AI-assisted development ("vibe coding") and modern engineering practices to rapidly prototype security tools, then harden them for production use. Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms. Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and guardrails for multi-cloud environments. Embed security into DevSecOps pipelines through automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions. Engineer AI solutions for risk management, such as evidence collection, control testing, risk register enrichment, and automated assessment support. Build security dashboards and metrics pipelines that give leadership and practitioners accurate, timely views of posture, backlog, remediation performance, and risk trends. Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions, so that automation is safe, governed, and explainable. Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations. Apply secure coding and engineering practices to security tooling itself, including secrets management, least-privilege access, dependency hygiene, and testing. Produce clear technical documentation, runbooks, and knowledge articles so that solutions can be operated and handed off reliably. Partner with the security operations, governance, and IT teams to identify manual processes that are good candidates for automation and deliver them iteratively. Skills and Attributes for Success Strong programming skills in Python and PowerShell, with working knowledge of JavaScript or TypeScript and familiarity with infrastructure-as-code tools such as Terraform or Bicep. Practical experience using AI-assisted coding tools and LLM APIs, with an understanding of prompt design, evaluation, and the limits of model output. Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues. Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP. Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab. Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks. Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms. Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions. Clear communication skills, with the ability to explain technical designs to both engineers and non-technical stakeholders. Requirements Bachelor's degree in computer science, Information Systems, Engineering, or a similar discipline, or equivalent experience. Minimum of 3 years of experience in security engineering, security automation, DevSecOps, or software engineering with a security focus. Demonstrated experience building automation or tooling that is in production use, ideally in a security context. Hands-on experience with at least one of: vulnerability management platforms, cloud security posture management tools, SAST/DAST/SCA tooling, or SIEM/SOAR platforms. Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, or equivalent platforms. Familiarity with Azure DevOps and Git-based version control workflows. Experience with AI or LLM application development, including retrieval-augmented generation, agent frameworks, or evaluation of model outputs, is strongly preferred.
11/14/2026
Full time
Job Description Job Description Summary : DXC's Global Cyber Security team is building AI-enabled security capabilities that make our risk management faster, more consistent, and more scalable. AI Security Engineers design, build, and operate the solutions that power vulnerability management, cloud security posture management, DevSecOps, risk management, and security metrics across DXC's global environment. You will combine security domain knowledge with software engineering and AI to turn manual security processes into automated, reliable, and measurable systems. You will work closely with the Vulnerability Management Lead, Data Protection Manager, security architects, risk analysts, cloud and platform engineers, and application development teams. The role suits a builder who is comfortable working in code, prototyping quickly with AI-assisted development tools, and taking solutions from proof of concept to production. Roles and Responsibilities Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing. Use AI-assisted development ("vibe coding") and modern engineering practices to rapidly prototype security tools, then harden them for production use. Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms. Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and guardrails for multi-cloud environments. Embed security into DevSecOps pipelines through automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions. Engineer AI solutions for risk management, such as evidence collection, control testing, risk register enrichment, and automated assessment support. Build security dashboards and metrics pipelines that give leadership and practitioners accurate, timely views of posture, backlog, remediation performance, and risk trends. Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions, so that automation is safe, governed, and explainable. Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations. Apply secure coding and engineering practices to security tooling itself, including secrets management, least-privilege access, dependency hygiene, and testing. Produce clear technical documentation, runbooks, and knowledge articles so that solutions can be operated and handed off reliably. Partner with the security operations, governance, and IT teams to identify manual processes that are good candidates for automation and deliver them iteratively. Skills and Attributes for Success Strong programming skills in Python and PowerShell, with working knowledge of JavaScript or TypeScript and familiarity with infrastructure-as-code tools such as Terraform or Bicep. Practical experience using AI-assisted coding tools and LLM APIs, with an understanding of prompt design, evaluation, and the limits of model output. Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues. Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP. Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab. Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks. Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms. Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions. Clear communication skills, with the ability to explain technical designs to both engineers and non-technical stakeholders. Requirements Bachelor's degree in computer science, Information Systems, Engineering, or a similar discipline, or equivalent experience. Minimum of 3 years of experience in security engineering, security automation, DevSecOps, or software engineering with a security focus. Demonstrated experience building automation or tooling that is in production use, ideally in a security context. Hands-on experience with at least one of: vulnerability management platforms, cloud security posture management tools, SAST/DAST/SCA tooling, or SIEM/SOAR platforms. Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, or equivalent platforms. Familiarity with Azure DevOps and Git-based version control workflows. Experience with AI or LLM application development, including retrieval-augmented generation, agent frameworks, or evaluation of model outputs, is strongly preferred.
Job Description 6 month contract for a Incident Response Analyst LEAD with a leading client in Chicago, IL- MUST BE CURRENTLY LOCAL TO BE CONSIDERED! Title: Incident Response Analyst LEAD 101652 Location: 100% onsite- Arlington Heights, IL Type: Contract hours: Shifts: 8-4:30, 4:30-12, 12-8:30 Will they rotate shifts around? Yes How often will they rotate? Likely will monthly Will send out schedule a month in advance Openings: 4 Pay: $61.74/hour on w2- w2 only, exact rate no flex Length: 6 months with large possibility of extension (ending 1/8/27 as of now) Screenings: no tech, full 5 panel drug and background (employment+ education+ felony)once hired IV process: 1 - 2 rounds +optional benefits, long term contract with ability to extend or convert to full time Must Haves: Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience). Min. 3-4 years of experience as a SOC or Incident Response Analyst. In-depth knowledge of cybersecurity such as EDR and SIEM , including CrowdStrike and Splunk. Strong understanding of cybersecurity concepts, including threat detection, incident response, and malware analysis. Knowledge of security frameworks and standards (e.g., NIST, ISO 27001). Excellent analytical and problem-solving skills. Effective communication skills, both written and verbal. Must be able to communicate in English to allow collaboration with global teams. Ability to work effectively under pressure and in a fast-paced environment. Relevant certifications (e.g., CompTIA Security+, GCIA, GCIH) are a plus. Demonstrated ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines. A resourceful person that is a fast learner and asks when in doubt. Ability to manage multiple projects simultaneously. Naturally organized with determination to deliver excellence. Role and Responsibilities : Seeking a highly skilled and experienced Incident Response Analyst, the candidate will play a critical role in detecting, responding to, and mitigating security incidents. The candidate will work alongside a team of skilled professionals to monitor and protect our clients' infrastructure, providing rapid and effective incident response. The candidate's expertise in cybersecurity, along with experience in SOC and incident response, will be invaluable in maintaining the security posture of our clients. This role is in support of a 24x7 operation, and candidates will be expected to work assigned shifts outside what would be considered normal working hours. Key Responsibilities: Monitor security alerts and logs to identify and analyze potential security incidents. Investigate and triage security alerts, assess their severity, and initiate the incident response process as necessary. Conduct in-depth analysis of security incidents, including malware analysis, network traffic analysis, and endpoint forensics. Lead or assist in responding to security incidents, coordinating with clients and internal teams to contain, eradicate, and recover from security breaches. Maintain detailed incident records, including incident timelines, actions taken, and lessons learned. Utilize cybersecurity tools such as CrowdStrike and Splunk to enhance threat detection and incident response capabilities. Prepare and deliver incident reports to clients and management, including recommendations for improving security posture. Collaborate with cross-functional teams to share threat intelligence and develop proactive security measures. Stay updated on the latest cybersecurity threats, trends, and best practices to improve incident response capabilities. Provide assistance to IR teams on general triage and threat hunting exercises. Gather metrics and report ongoing status (not sure how to word this here, or if you need that ) Provide guidance and training to junior team members. Contribute to the continuous improvement of SOC procedures and documentation Experience working in a fast-paced environment with changing priorities
11/14/2026
Full time
Job Description 6 month contract for a Incident Response Analyst LEAD with a leading client in Chicago, IL- MUST BE CURRENTLY LOCAL TO BE CONSIDERED! Title: Incident Response Analyst LEAD 101652 Location: 100% onsite- Arlington Heights, IL Type: Contract hours: Shifts: 8-4:30, 4:30-12, 12-8:30 Will they rotate shifts around? Yes How often will they rotate? Likely will monthly Will send out schedule a month in advance Openings: 4 Pay: $61.74/hour on w2- w2 only, exact rate no flex Length: 6 months with large possibility of extension (ending 1/8/27 as of now) Screenings: no tech, full 5 panel drug and background (employment+ education+ felony)once hired IV process: 1 - 2 rounds +optional benefits, long term contract with ability to extend or convert to full time Must Haves: Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience). Min. 3-4 years of experience as a SOC or Incident Response Analyst. In-depth knowledge of cybersecurity such as EDR and SIEM , including CrowdStrike and Splunk. Strong understanding of cybersecurity concepts, including threat detection, incident response, and malware analysis. Knowledge of security frameworks and standards (e.g., NIST, ISO 27001). Excellent analytical and problem-solving skills. Effective communication skills, both written and verbal. Must be able to communicate in English to allow collaboration with global teams. Ability to work effectively under pressure and in a fast-paced environment. Relevant certifications (e.g., CompTIA Security+, GCIA, GCIH) are a plus. Demonstrated ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines. A resourceful person that is a fast learner and asks when in doubt. Ability to manage multiple projects simultaneously. Naturally organized with determination to deliver excellence. Role and Responsibilities : Seeking a highly skilled and experienced Incident Response Analyst, the candidate will play a critical role in detecting, responding to, and mitigating security incidents. The candidate will work alongside a team of skilled professionals to monitor and protect our clients' infrastructure, providing rapid and effective incident response. The candidate's expertise in cybersecurity, along with experience in SOC and incident response, will be invaluable in maintaining the security posture of our clients. This role is in support of a 24x7 operation, and candidates will be expected to work assigned shifts outside what would be considered normal working hours. Key Responsibilities: Monitor security alerts and logs to identify and analyze potential security incidents. Investigate and triage security alerts, assess their severity, and initiate the incident response process as necessary. Conduct in-depth analysis of security incidents, including malware analysis, network traffic analysis, and endpoint forensics. Lead or assist in responding to security incidents, coordinating with clients and internal teams to contain, eradicate, and recover from security breaches. Maintain detailed incident records, including incident timelines, actions taken, and lessons learned. Utilize cybersecurity tools such as CrowdStrike and Splunk to enhance threat detection and incident response capabilities. Prepare and deliver incident reports to clients and management, including recommendations for improving security posture. Collaborate with cross-functional teams to share threat intelligence and develop proactive security measures. Stay updated on the latest cybersecurity threats, trends, and best practices to improve incident response capabilities. Provide assistance to IR teams on general triage and threat hunting exercises. Gather metrics and report ongoing status (not sure how to word this here, or if you need that ) Provide guidance and training to junior team members. Contribute to the continuous improvement of SOC procedures and documentation Experience working in a fast-paced environment with changing priorities
Job Description Minneapolis, Minnesota, 55401, United States of America Denver, Colorado, 80205 Xcel Energy (NASDAQ: XEL) is a leading energy provider and Fortune 500 company, dedicated to serving millions of electricity and natural gas customers across eight states: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient, and sustainable energy. Xcel Energy is a place where you'll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you'll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best. Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday-Thursday); however, work location expectations vary based on role, team, and business needs. Position Summary Support the administration of the company's Open Access Transmission Tariffs (OATTs), Electric Quarterly Report (EQR) obligations, and related transmission regulatory filings. Support Transmission Business Relations (TBR) representatives through accurate creation, maintenance, and quality control of contract records in ProjectWise and related systems. Coordinate post-execution agreement administration, monitor filing and contract requirements, support recurring compliance activities, and help improve TBR procedures, tracking tools, and records-management practices. Essential Responsibilities OATT, eTariff, and FERC Filing Support Support administration of the company's OATTs in eTariff and implementation of applicable FERC filing requirements, including Order No. 714 and 18 CFR Part 35 requirements relevant to the role. Participate in the preparation, coordination, and submission of OATT and transmission-agreement filings, including transmittal letters and notices of cancellation. Help determine filing requirements and timing; coordinate with TBR representatives and Legal; and monitor filing status through completion. Monitor FERC orders, rulings, and regulatory developments affecting TBR and communicate relevant updates to the team. Maintain filing records and status information in ProjectWise, TariffShark, and other approved systems; reconcile discrepancies and support system testing or audits. EQR Administration Coordinate quarterly EQR data collection, validation, reporting, and filing support for Transmission. Maintain relevant EQR data and records, provide required reports to internal partners, investigate errors, and coordinate corrected filings when necessary. Maintain working knowledge of applicable EQR requirements and process changes, including Order No. 917. ProjectWise and Post-Execution Agreement Administration Create and maintain ProjectWise customer and project folders, document metadata, templates, workflows, and related contract records. After agreement execution and completion of the contract-document approval process, update applicable execution, commencement, review, extension, cost, facility, and project attributes; finalize folder and workflow status; and propagate project-level metadata to associated documents as appropriate. Perform data-quality reviews and audits, identify missing or inconsistent information, and work with TBR representatives to ensure official contract records are complete and stored in approved locations. Support records retention, billing-related records, asset and network-upgrade data, and other contract-administration information maintained by TBR. Contract Compliance and Recurring Administration Track requirements and key dates under existing transmission contracts and route proposed procedural changes to the appropriate task, requirement, or compliance owners. Support periodic contract reviews, including potential terminations, retention disposition, billable work, annual stakeholder contacts, interconnection-guideline reviews, and other recurring compliance items. Coordinate deposit refunds, study or cluster true-ups, invoicing support, and FERC interest calculations or confirmations, as assigned. Prepare and administer routine TBR documents such as delegations of authority, non-disclosure agreements, and master confidentiality agreements, consistent with approved templates and review requirements. Respond to inquiries from TBR representatives and internal partners regarding agreement records, filing status, EQR information, and historical or current contract information. Project Tracking and Process Improvement Maintain project trackers, reports, and dashboards in coordination with project managers and TBR representatives, including support for higher-volume agreement-routing activities. Maintain TBR procedures and support internal audits, records-management reviews, and compliance reviews. Identify practical improvements to SharePoint, Microsoft 365, contract administration system, records management system, digital-signature workflows, and other approved tools; participate in technology projects and user testing. Evaluate opportunities to streamline data entry, document retrieval, reporting, and recurring work, including responsible use of approved automation or AI capabilities. Minimum Requirements Bachelor's degree in business, accounting, computer or data management, or a related field preferred, or an equivalent combination of education and relevant experience. Two years of business, accounting, paralegal, database, records-management, regulatory, contract-administration, or similar experience required. Working proficiency with Microsoft Office and the ability to learn and effectively use contract, filing, and records-management systems. FERC, transmission, regulatory, contract, or records-management experience preferred. Strong attention to detail, organization, written communication, judgment, and ability to handle confidential information. Our culture is grounded in shared values and employee commitments that guide how we work, support one another, and grow together. Our Values Connected, Committed, Trustworthy, Safe Our Employee Commitments Work that makes a difference A team you can count of Opportunities to grow Rewards that help you thrive Xcel Energy provides job applicants reasonable accommodations for disabilities throughout the application process. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form . Non-Bargaining The anticipated starting base pay for this position is: $64,100.00 to $90,967.00 per year This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Flexible Spending Account, Health Care Flexible Spending Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part. In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information. Deadline to Apply: 11/29/26 EEO is the Law (PDF) Equal Opportunity Statement (PDF) Employee Rights (PDF) All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility. Accessibility Statement Xcel Energy endeavors to make and accessible to any and all users. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form . For any other application related questions, including application follow-ups or technical issues, please use our Recruiting Assistance, Electra, for assistance. Electra can be found in the lower right-hand corner of our Xcel Energy Careers site.
11/14/2026
Full time
Job Description Minneapolis, Minnesota, 55401, United States of America Denver, Colorado, 80205 Xcel Energy (NASDAQ: XEL) is a leading energy provider and Fortune 500 company, dedicated to serving millions of electricity and natural gas customers across eight states: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient, and sustainable energy. Xcel Energy is a place where you'll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you'll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best. Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday-Thursday); however, work location expectations vary based on role, team, and business needs. Position Summary Support the administration of the company's Open Access Transmission Tariffs (OATTs), Electric Quarterly Report (EQR) obligations, and related transmission regulatory filings. Support Transmission Business Relations (TBR) representatives through accurate creation, maintenance, and quality control of contract records in ProjectWise and related systems. Coordinate post-execution agreement administration, monitor filing and contract requirements, support recurring compliance activities, and help improve TBR procedures, tracking tools, and records-management practices. Essential Responsibilities OATT, eTariff, and FERC Filing Support Support administration of the company's OATTs in eTariff and implementation of applicable FERC filing requirements, including Order No. 714 and 18 CFR Part 35 requirements relevant to the role. Participate in the preparation, coordination, and submission of OATT and transmission-agreement filings, including transmittal letters and notices of cancellation. Help determine filing requirements and timing; coordinate with TBR representatives and Legal; and monitor filing status through completion. Monitor FERC orders, rulings, and regulatory developments affecting TBR and communicate relevant updates to the team. Maintain filing records and status information in ProjectWise, TariffShark, and other approved systems; reconcile discrepancies and support system testing or audits. EQR Administration Coordinate quarterly EQR data collection, validation, reporting, and filing support for Transmission. Maintain relevant EQR data and records, provide required reports to internal partners, investigate errors, and coordinate corrected filings when necessary. Maintain working knowledge of applicable EQR requirements and process changes, including Order No. 917. ProjectWise and Post-Execution Agreement Administration Create and maintain ProjectWise customer and project folders, document metadata, templates, workflows, and related contract records. After agreement execution and completion of the contract-document approval process, update applicable execution, commencement, review, extension, cost, facility, and project attributes; finalize folder and workflow status; and propagate project-level metadata to associated documents as appropriate. Perform data-quality reviews and audits, identify missing or inconsistent information, and work with TBR representatives to ensure official contract records are complete and stored in approved locations. Support records retention, billing-related records, asset and network-upgrade data, and other contract-administration information maintained by TBR. Contract Compliance and Recurring Administration Track requirements and key dates under existing transmission contracts and route proposed procedural changes to the appropriate task, requirement, or compliance owners. Support periodic contract reviews, including potential terminations, retention disposition, billable work, annual stakeholder contacts, interconnection-guideline reviews, and other recurring compliance items. Coordinate deposit refunds, study or cluster true-ups, invoicing support, and FERC interest calculations or confirmations, as assigned. Prepare and administer routine TBR documents such as delegations of authority, non-disclosure agreements, and master confidentiality agreements, consistent with approved templates and review requirements. Respond to inquiries from TBR representatives and internal partners regarding agreement records, filing status, EQR information, and historical or current contract information. Project Tracking and Process Improvement Maintain project trackers, reports, and dashboards in coordination with project managers and TBR representatives, including support for higher-volume agreement-routing activities. Maintain TBR procedures and support internal audits, records-management reviews, and compliance reviews. Identify practical improvements to SharePoint, Microsoft 365, contract administration system, records management system, digital-signature workflows, and other approved tools; participate in technology projects and user testing. Evaluate opportunities to streamline data entry, document retrieval, reporting, and recurring work, including responsible use of approved automation or AI capabilities. Minimum Requirements Bachelor's degree in business, accounting, computer or data management, or a related field preferred, or an equivalent combination of education and relevant experience. Two years of business, accounting, paralegal, database, records-management, regulatory, contract-administration, or similar experience required. Working proficiency with Microsoft Office and the ability to learn and effectively use contract, filing, and records-management systems. FERC, transmission, regulatory, contract, or records-management experience preferred. Strong attention to detail, organization, written communication, judgment, and ability to handle confidential information. Our culture is grounded in shared values and employee commitments that guide how we work, support one another, and grow together. Our Values Connected, Committed, Trustworthy, Safe Our Employee Commitments Work that makes a difference A team you can count of Opportunities to grow Rewards that help you thrive Xcel Energy provides job applicants reasonable accommodations for disabilities throughout the application process. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form . Non-Bargaining The anticipated starting base pay for this position is: $64,100.00 to $90,967.00 per year This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Flexible Spending Account, Health Care Flexible Spending Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part. In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information. Deadline to Apply: 11/29/26 EEO is the Law (PDF) Equal Opportunity Statement (PDF) Employee Rights (PDF) All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility. Accessibility Statement Xcel Energy endeavors to make and accessible to any and all users. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form . For any other application related questions, including application follow-ups or technical issues, please use our Recruiting Assistance, Electra, for assistance. Electra can be found in the lower right-hand corner of our Xcel Energy Careers site.
This job is with Capco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Business Analyst - Cyber Security (Privileged Access Management) Location: Dallas, Texas (Hybrid) Practice Area: Business Consulting Type: Permanent Help organizations strengthen cyber resilience by translating business needs into secure identity and access management solutions. The Role As a Business Analyst within Capco's Cyber Security practice, you will work with leading financial services and energy clients to deliver Privileged Access Management (PAM) transformation initiatives. You will partner with business and technology stakeholders to gather, analyze, and document requirements while supporting the enhancement and adoption of enterprise PAM capabilities. This role is ideal for someone who enjoys bridging business objectives with cybersecurity solutions that improve governance, operational efficiency, and risk management. What You'll Do Facilitate stakeholder workshops to capture, analyze, and document current and future state Privileged Access Management processes and business requirements Develop high-quality business requirements documents (BRDs), functional specifications, user stories, and process documentation to support solution delivery Collaborate with security, infrastructure, application, and business teams to support application onboarding, solution design, and implementation activities Coordinate testing activities, including User Acceptance Testing (UAT), and support successful deployment and business adoption of PAM capabilities Produce clear project deliverables, status reports, presentations, and stakeholder communications while ensuring alignment between business objectives and technical solutions What We're Looking For 2+ years of experience as a Business Analyst, ideally supporting cybersecurity, identity management, or enterprise technology initiatives Experience gathering, analyzing, and documenting business, functional, and data requirements while managing stakeholder expectations Strong facilitation, communication, and presentation skills with the ability to engage business and technical audiences Experience supporting Agile project delivery and working with tools such as JIRA, Confluence, Microsoft Excel, and PowerPoint Experience supporting Privileged Access Management initiatives, including business process analysis, application onboarding, testing coordination, and organizational adoption Bonus Points For Experience supporting CyberArk or other Privileged Access Management platforms Familiarity with privileged account discovery, credential vaulting, Privileged Session Management (PSM), least privilege, just-in-time access, service accounts, and privileged access governance Experience supporting cybersecurity transformation or enterprise identity initiatives within financial services or energy organizations Knowledge of Identity and Access Management (IAM), cybersecurity governance, or regulatory compliance frameworks Experience working within consulting or client-facing delivery environments Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions Work in a collaborative, flat, and entrepreneurial consulting culture Access continuous learning, training, and industry certifications Be part of a team shaping the future of digital financial services Help shape the future of digital transformation across FS & Energy. We offer a competitive, people-first benefits package designed to support every aspect of your life: Medical, Dental, Vision coverage 401(k) with employer match Paid parental leave and dependent care support Tuition and wellness reimbursement programs Access to employee discount platforms and commuter benefits Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails, creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI scheduling applications to improve the efficiency of interview coordination. AI is used as a support tool only. All hiring decisions are made by Talent Acquisition and Hiring teams. Inclusion at Capco We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know-we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our culture encourages individuality and collaboration-a mindset that shapes how we work with clients and each other every day. We have been informed of several recruitment scams targeting the public. We strongly advise you to verify identities before engaging in recruitment related communication. All official Capco communication will be conducted via a Capco recruiter.
11/13/2026
Full time
This job is with Capco, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Business Analyst - Cyber Security (Privileged Access Management) Location: Dallas, Texas (Hybrid) Practice Area: Business Consulting Type: Permanent Help organizations strengthen cyber resilience by translating business needs into secure identity and access management solutions. The Role As a Business Analyst within Capco's Cyber Security practice, you will work with leading financial services and energy clients to deliver Privileged Access Management (PAM) transformation initiatives. You will partner with business and technology stakeholders to gather, analyze, and document requirements while supporting the enhancement and adoption of enterprise PAM capabilities. This role is ideal for someone who enjoys bridging business objectives with cybersecurity solutions that improve governance, operational efficiency, and risk management. What You'll Do Facilitate stakeholder workshops to capture, analyze, and document current and future state Privileged Access Management processes and business requirements Develop high-quality business requirements documents (BRDs), functional specifications, user stories, and process documentation to support solution delivery Collaborate with security, infrastructure, application, and business teams to support application onboarding, solution design, and implementation activities Coordinate testing activities, including User Acceptance Testing (UAT), and support successful deployment and business adoption of PAM capabilities Produce clear project deliverables, status reports, presentations, and stakeholder communications while ensuring alignment between business objectives and technical solutions What We're Looking For 2+ years of experience as a Business Analyst, ideally supporting cybersecurity, identity management, or enterprise technology initiatives Experience gathering, analyzing, and documenting business, functional, and data requirements while managing stakeholder expectations Strong facilitation, communication, and presentation skills with the ability to engage business and technical audiences Experience supporting Agile project delivery and working with tools such as JIRA, Confluence, Microsoft Excel, and PowerPoint Experience supporting Privileged Access Management initiatives, including business process analysis, application onboarding, testing coordination, and organizational adoption Bonus Points For Experience supporting CyberArk or other Privileged Access Management platforms Familiarity with privileged account discovery, credential vaulting, Privileged Session Management (PSM), least privilege, just-in-time access, service accounts, and privileged access governance Experience supporting cybersecurity transformation or enterprise identity initiatives within financial services or energy organizations Knowledge of Identity and Access Management (IAM), cybersecurity governance, or regulatory compliance frameworks Experience working within consulting or client-facing delivery environments Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions Work in a collaborative, flat, and entrepreneurial consulting culture Access continuous learning, training, and industry certifications Be part of a team shaping the future of digital financial services Help shape the future of digital transformation across FS & Energy. We offer a competitive, people-first benefits package designed to support every aspect of your life: Medical, Dental, Vision coverage 401(k) with employer match Paid parental leave and dependent care support Tuition and wellness reimbursement programs Access to employee discount platforms and commuter benefits Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails, creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI scheduling applications to improve the efficiency of interview coordination. AI is used as a support tool only. All hiring decisions are made by Talent Acquisition and Hiring teams. Inclusion at Capco We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know-we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our culture encourages individuality and collaboration-a mindset that shapes how we work with clients and each other every day. We have been informed of several recruitment scams targeting the public. We strongly advise you to verify identities before engaging in recruitment related communication. All official Capco communication will be conducted via a Capco recruiter.
Constellation Navigation and Trading, LLC
Norfolk, Virginia
Job Description Job Description U.S. Marine Management Position Description Disclaimer: The purpose of this document is to provide a summary of the generic functions/tasks associated with this position. It is not an exhaustive or comprehensive list of all possible position responsibilities, tasks, and duties. The responsibilities, tasks, and duties of the incumbent might differ from those outlined here and additional duties may be assigned at the manager's discretion. The position description details as outlined below are also subject to change or reassigned at any time. Business Title: Information Technology Manger Supervisory Responsibilities: No Status: Exempt Supervisor: Vice President, HSSE & Shared Services Purpose/Summary Responsible to the Vice President, HSSE & Shared Services for the effective, efficient, and compliant operation, maintenance, and sustainment of USMMI's shore-side and shipboard information technology (IT) systems to include all hardware and software systems, services, applications and licenses in accordance with approved project and department budgets. Acts as the primary liaison and manager of company outsourced IT resources and initiatives. Assists the Manger, Cyber & Physical Security with ensuring USMI compliance with cybersecurity regulations and standards. Supports company IT objectives including financial, operational and safety goals/objectives/KPIs. Liaise with internal and external stakeholders ensuring responsibility for satisfactory resolution to help tickets, complaints or project implementation. This position is in USMMI's Corporate office in Norfolk, Virginia. Key Responsibilities Manage the design, maintenance, development, and evaluation of all vessel and shoreside IT infrastructure systems, hardware and software including LANs, WANs, Cloud-based services, Internet ISPs, intranet, security, workstation, mobile telephony, SATCOM and wireless implementations. Act as the primary IT representative to USMMI owned and/or operated vessels. In this capacity, provide satisfactory resolution to help tickets outside of third party contracted services. Serve as account administrator for key software services and applications. Oversee third party on premises and after hours Help Desk service and ensure compliance with contracted response rates. Serve as the NSE Software Administrator: Submit, monitor, and ensure help tickets are processed by ABS Wavesight. Implement functional changes to the NSE interface in support of efficiency and data analytics. Assist the Manager, Cyber & Physical Security in ensuring company compliance with cybersecurity standards to include NIST 800-171, CMMC, ISO 27001:2022, and U.S. Coast Guard Cybersecurity in the Marine Transportation System regulations. Assist the Contracting & Proposal Analyst in ensuring compliance with applicable Defense Federal Acquisition Regulations (DFAR). Position Specifications Education & Experience IT relevant bachelor's level degree preferred (Degree must be from an accredited institution). Ten years' experience in actively managing day-to-day IT functions to include network administration, help ticket resolution, and interactions with third party hardware, software, and application providers. The following certifications are preferred: CISA, CISM, CRISC, CGEIT, CISSP Experience preferred in the development, deployment and support of SATCOM and other shipboard related IT systems. Technical Skills & Competencies Required Proficiency maintaining Microsoft Azure GCC-high architecture and applications. Technical proficiency installing and maintaining Microsoft Office 365 suite of programs in the GCC-high environment. SharePoint administration and design is required. Proficiency in the technical details and maintenance of Starlink as an internet service provider. Proficiency in video teleconferencing services and systems to include troubleshooting and system design. Preferred experience in the management and operation of ABS Nautical Systems (NS). Must be a U.S. citizen eligible to obtain a Secret security clearance. Travel Requirements Travel is estimated to be 10-20% of the calendar year to provide support to USMMI owned/operated/managed vessels. International and domestic travel is required for this position. Required to maintain a U.S. Passport. Physical Demands & Work Environment The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. General office setting, typically the employee may sit comfortably to perform the work, usually at a computer terminal with short breaks or lunch period. However, there may be some bending/stooping, reaching above shoulder level, walking; standing; carrying of light items such as papers, books, or packages of up to 25 pounds. Should be able to hear & speak clearly using phone / headset to communicate with customers; be able to navigate, view & enter information on the computer. Operations Setting: typically, the employee must be able to be in Confined Spaces, Sit, Stand, Walk, Bend, Push/Pull, Kneel, Squat, Reaching and Twisting. Can not have any Fear of Heights. Also need the ability to consistently be able to lift 10lb - 100lb utilizing Folding Hand Truck & Dolly, Rolling Utility Carts or Single Hand Trucks (70 - 100%) of time. PIa4ce67a545fb-9462
11/13/2026
Full time
Job Description Job Description U.S. Marine Management Position Description Disclaimer: The purpose of this document is to provide a summary of the generic functions/tasks associated with this position. It is not an exhaustive or comprehensive list of all possible position responsibilities, tasks, and duties. The responsibilities, tasks, and duties of the incumbent might differ from those outlined here and additional duties may be assigned at the manager's discretion. The position description details as outlined below are also subject to change or reassigned at any time. Business Title: Information Technology Manger Supervisory Responsibilities: No Status: Exempt Supervisor: Vice President, HSSE & Shared Services Purpose/Summary Responsible to the Vice President, HSSE & Shared Services for the effective, efficient, and compliant operation, maintenance, and sustainment of USMMI's shore-side and shipboard information technology (IT) systems to include all hardware and software systems, services, applications and licenses in accordance with approved project and department budgets. Acts as the primary liaison and manager of company outsourced IT resources and initiatives. Assists the Manger, Cyber & Physical Security with ensuring USMI compliance with cybersecurity regulations and standards. Supports company IT objectives including financial, operational and safety goals/objectives/KPIs. Liaise with internal and external stakeholders ensuring responsibility for satisfactory resolution to help tickets, complaints or project implementation. This position is in USMMI's Corporate office in Norfolk, Virginia. Key Responsibilities Manage the design, maintenance, development, and evaluation of all vessel and shoreside IT infrastructure systems, hardware and software including LANs, WANs, Cloud-based services, Internet ISPs, intranet, security, workstation, mobile telephony, SATCOM and wireless implementations. Act as the primary IT representative to USMMI owned and/or operated vessels. In this capacity, provide satisfactory resolution to help tickets outside of third party contracted services. Serve as account administrator for key software services and applications. Oversee third party on premises and after hours Help Desk service and ensure compliance with contracted response rates. Serve as the NSE Software Administrator: Submit, monitor, and ensure help tickets are processed by ABS Wavesight. Implement functional changes to the NSE interface in support of efficiency and data analytics. Assist the Manager, Cyber & Physical Security in ensuring company compliance with cybersecurity standards to include NIST 800-171, CMMC, ISO 27001:2022, and U.S. Coast Guard Cybersecurity in the Marine Transportation System regulations. Assist the Contracting & Proposal Analyst in ensuring compliance with applicable Defense Federal Acquisition Regulations (DFAR). Position Specifications Education & Experience IT relevant bachelor's level degree preferred (Degree must be from an accredited institution). Ten years' experience in actively managing day-to-day IT functions to include network administration, help ticket resolution, and interactions with third party hardware, software, and application providers. The following certifications are preferred: CISA, CISM, CRISC, CGEIT, CISSP Experience preferred in the development, deployment and support of SATCOM and other shipboard related IT systems. Technical Skills & Competencies Required Proficiency maintaining Microsoft Azure GCC-high architecture and applications. Technical proficiency installing and maintaining Microsoft Office 365 suite of programs in the GCC-high environment. SharePoint administration and design is required. Proficiency in the technical details and maintenance of Starlink as an internet service provider. Proficiency in video teleconferencing services and systems to include troubleshooting and system design. Preferred experience in the management and operation of ABS Nautical Systems (NS). Must be a U.S. citizen eligible to obtain a Secret security clearance. Travel Requirements Travel is estimated to be 10-20% of the calendar year to provide support to USMMI owned/operated/managed vessels. International and domestic travel is required for this position. Required to maintain a U.S. Passport. Physical Demands & Work Environment The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. General office setting, typically the employee may sit comfortably to perform the work, usually at a computer terminal with short breaks or lunch period. However, there may be some bending/stooping, reaching above shoulder level, walking; standing; carrying of light items such as papers, books, or packages of up to 25 pounds. Should be able to hear & speak clearly using phone / headset to communicate with customers; be able to navigate, view & enter information on the computer. Operations Setting: typically, the employee must be able to be in Confined Spaces, Sit, Stand, Walk, Bend, Push/Pull, Kneel, Squat, Reaching and Twisting. Can not have any Fear of Heights. Also need the ability to consistently be able to lift 10lb - 100lb utilizing Folding Hand Truck & Dolly, Rolling Utility Carts or Single Hand Trucks (70 - 100%) of time. PIa4ce67a545fb-9462
Job Description Job Description COMPANY OVERVIEW Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field. We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following: Be Driven - We are fueled by the hunger to learn more and do more. Be Curious - We engage in continuous improvement - never accepting the status quo. Be Humble - We seek honest feedback to strengthen our relationships. Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity. Strive for excellence and consider joining our growing team today! JOB OVERVIEW The Junior Software Engineer provides hands-on development and engineering support to the Splunk Engineering and Maintenance team supporting government agencies. Working under the direction of senior Data, Platform, and Detection Engineers, this role contributes across the full breadth of the SIEM environment: onboarding and normalizing data sources, maintaining platform infrastructure and configurations, developing searches, dashboards, and content, and automating recurring engineering tasks through scripting and code. This is an entry-level, growth-oriented position for an engineer with a software development or cybersecurity foundation who is expected to build depth in Splunk and security operations over time. The Junior Software Engineer collaborates with senior engineers, security analysts, and agency stakeholders, and follows established code review, testing, and change management practices. Essential Functions: Software Development and Automation. Write, test, and maintain scripts and small applications (Python, Bash, PowerShell) that automate recurring Splunk engineering, maintenance, and reporting tasks. Use version control, peer code review, and established branching and deployment practices for all code and configuration changes. Data Engineering Support. Assist with onboarding new log sources, including configuration of inputs, forwarders, parsing rules (props and transforms), source types, and index assignment. Support data quality efforts by validating field extractions, timestamps, event breaking, and Common Information Model (CIM) normalization under senior engineer guidance. Platform Engineering and Maintenance. Support routine maintenance of the Splunk environment, including indexers, search heads, forwarders, deployment servers, and app and patch deployments. Monitor platform health, license usage, ingest volume, and search performance; identify anomalies and assist senior engineers with troubleshooting and remediation. Content Development. Develop and maintain SPL searches, reports, dashboards, and alerts that support security, operational, and mission use cases. Assist Detection Engineers with building, testing, documenting, and deploying detection content through established review and release workflows. Testing, Documentation, and Quality. Test changes in development and test environments prior to production deployment and validate results against expected outcomes. Maintain technical documentation, configuration standards, runbooks, and knowledge articles for the work performed. Operational and Customer Support. Respond to assigned tickets and user requests for Splunk access, search assistance, data questions, and minor configuration changes. Provide data and platform context in support of incident response, audits, and after-action activities as directed. Collaboration and Professional Development. Participate in stand-ups, sprint planning, code reviews, and change management processes with the Splunk Engineering and Maintenance team. Work with senior engineers to translate requirements into technical tasks, and progress toward Splunk certification and technical specialization. QUALIFICATIONS: US Citizen with an active Top Secret Security Clearance. Bachelor's degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical field; equivalent technical training, certifications, or demonstrable experience will be considered. 0-2 years of professional software development, IT engineering, or cybersecurity experience; internship, co-op, apprenticeship, or substantial project work is applicable. Working proficiency in at least one programming or scripting language such as Python, Bash, PowerShell, Java, Go, or JavaScript. Comfort operating in a Linux command-line environment and a foundational understanding of system administration concepts. Familiarity with version control (Git) and standard development workflows including branching, pull requests, and code review. Ability to work with structured and semi-structured data formats such as JSON, XML, CSV, YAML, and syslog, including basic use of regular expressions. Foundational understanding of networking and logging concepts (TCP/IP, DNS, HTTP, authentication events) and how security-relevant events are generated across endpoint, network, and cloud. Foundational cybersecurity knowledge, including core security principles, common attack patterns, and the role of a SIEM in security operations. Willingness and demonstrated ability to learn Splunk and the Splunk Search Processing Language (SPL) quickly. Clear written and verbal communication skills, including the ability to document technical work for other engineers and non-technical stakeholders. Strong problem-solving skills, attention to detail, and the ability to take direction and follow established engineering processes. Ability to obtain and maintain the clearance and suitability requirements for the contract. PREFERRED: Hands-on exposure to Splunk (SPL, dashboards, universal forwarders, apps) or another SIEM such as Elastic, Microsoft Sentinel, QRadar, or Google SecOps. Splunk Core Certified User or Splunk Core Certified Power User, or willingness to obtain within the first year. CompTIA Security+, Network+, or a comparable industry certification. Experience with REST APIs, data parsing and normalization, and data pipeline concepts. Familiarity with cloud platforms (AWS, Azure, or GCP) and their native logging services. Exposure to configuration management or infrastructure-as-code tooling such as Ansible, Terraform, or Puppet. Exposure to CI/CD pipelines, automated testing, and containerization (Docker, Kubernetes). Familiarity with MITRE ATT&CK, detection engineering concepts, and SOC workflows. Experience supporting a federal customer or working in an accredited environment. Interest in growing into a Data, Platform, or Detection Engineering specialization. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS Inside office environment. Working on a computer for long periods of time. May involve long period of sitting at a desk. The work environment is fast-paced and sometimes involves extreme deadline pressures. OTHER DUTIES This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations. If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling . Thank you for your interest in MartinFed. Please Note: All positions at MartinFed are contingent upon passing a background check prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer. Job Posted by ApplicantPro
11/12/2026
Full time
Job Description Job Description COMPANY OVERVIEW Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field. We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following: Be Driven - We are fueled by the hunger to learn more and do more. Be Curious - We engage in continuous improvement - never accepting the status quo. Be Humble - We seek honest feedback to strengthen our relationships. Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity. Strive for excellence and consider joining our growing team today! JOB OVERVIEW The Junior Software Engineer provides hands-on development and engineering support to the Splunk Engineering and Maintenance team supporting government agencies. Working under the direction of senior Data, Platform, and Detection Engineers, this role contributes across the full breadth of the SIEM environment: onboarding and normalizing data sources, maintaining platform infrastructure and configurations, developing searches, dashboards, and content, and automating recurring engineering tasks through scripting and code. This is an entry-level, growth-oriented position for an engineer with a software development or cybersecurity foundation who is expected to build depth in Splunk and security operations over time. The Junior Software Engineer collaborates with senior engineers, security analysts, and agency stakeholders, and follows established code review, testing, and change management practices. Essential Functions: Software Development and Automation. Write, test, and maintain scripts and small applications (Python, Bash, PowerShell) that automate recurring Splunk engineering, maintenance, and reporting tasks. Use version control, peer code review, and established branching and deployment practices for all code and configuration changes. Data Engineering Support. Assist with onboarding new log sources, including configuration of inputs, forwarders, parsing rules (props and transforms), source types, and index assignment. Support data quality efforts by validating field extractions, timestamps, event breaking, and Common Information Model (CIM) normalization under senior engineer guidance. Platform Engineering and Maintenance. Support routine maintenance of the Splunk environment, including indexers, search heads, forwarders, deployment servers, and app and patch deployments. Monitor platform health, license usage, ingest volume, and search performance; identify anomalies and assist senior engineers with troubleshooting and remediation. Content Development. Develop and maintain SPL searches, reports, dashboards, and alerts that support security, operational, and mission use cases. Assist Detection Engineers with building, testing, documenting, and deploying detection content through established review and release workflows. Testing, Documentation, and Quality. Test changes in development and test environments prior to production deployment and validate results against expected outcomes. Maintain technical documentation, configuration standards, runbooks, and knowledge articles for the work performed. Operational and Customer Support. Respond to assigned tickets and user requests for Splunk access, search assistance, data questions, and minor configuration changes. Provide data and platform context in support of incident response, audits, and after-action activities as directed. Collaboration and Professional Development. Participate in stand-ups, sprint planning, code reviews, and change management processes with the Splunk Engineering and Maintenance team. Work with senior engineers to translate requirements into technical tasks, and progress toward Splunk certification and technical specialization. QUALIFICATIONS: US Citizen with an active Top Secret Security Clearance. Bachelor's degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical field; equivalent technical training, certifications, or demonstrable experience will be considered. 0-2 years of professional software development, IT engineering, or cybersecurity experience; internship, co-op, apprenticeship, or substantial project work is applicable. Working proficiency in at least one programming or scripting language such as Python, Bash, PowerShell, Java, Go, or JavaScript. Comfort operating in a Linux command-line environment and a foundational understanding of system administration concepts. Familiarity with version control (Git) and standard development workflows including branching, pull requests, and code review. Ability to work with structured and semi-structured data formats such as JSON, XML, CSV, YAML, and syslog, including basic use of regular expressions. Foundational understanding of networking and logging concepts (TCP/IP, DNS, HTTP, authentication events) and how security-relevant events are generated across endpoint, network, and cloud. Foundational cybersecurity knowledge, including core security principles, common attack patterns, and the role of a SIEM in security operations. Willingness and demonstrated ability to learn Splunk and the Splunk Search Processing Language (SPL) quickly. Clear written and verbal communication skills, including the ability to document technical work for other engineers and non-technical stakeholders. Strong problem-solving skills, attention to detail, and the ability to take direction and follow established engineering processes. Ability to obtain and maintain the clearance and suitability requirements for the contract. PREFERRED: Hands-on exposure to Splunk (SPL, dashboards, universal forwarders, apps) or another SIEM such as Elastic, Microsoft Sentinel, QRadar, or Google SecOps. Splunk Core Certified User or Splunk Core Certified Power User, or willingness to obtain within the first year. CompTIA Security+, Network+, or a comparable industry certification. Experience with REST APIs, data parsing and normalization, and data pipeline concepts. Familiarity with cloud platforms (AWS, Azure, or GCP) and their native logging services. Exposure to configuration management or infrastructure-as-code tooling such as Ansible, Terraform, or Puppet. Exposure to CI/CD pipelines, automated testing, and containerization (Docker, Kubernetes). Familiarity with MITRE ATT&CK, detection engineering concepts, and SOC workflows. Experience supporting a federal customer or working in an accredited environment. Interest in growing into a Data, Platform, or Detection Engineering specialization. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS Inside office environment. Working on a computer for long periods of time. May involve long period of sitting at a desk. The work environment is fast-paced and sometimes involves extreme deadline pressures. OTHER DUTIES This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations. If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling . Thank you for your interest in MartinFed. Please Note: All positions at MartinFed are contingent upon passing a background check prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer. Job Posted by ApplicantPro
Job Description Job Description Description: DarkStar Intelligence is seeking an Arabic Cryptologic Language Analyst (CLA) Training Developer to design, develop, and deliver cryptologic training programs aligned with NSA/CSS and DoD standards. This role focuses on preparing future SIGINT language analysts through hands-on, scenario-based, and blended learning techniques. In this role, you will ensure training materials accurately reflect operational duties and enable mission success. U.S. citizenship is required. Responsibilities Clarify and document operational requirements, training objectives, and material scope. Prioritize requirements for training development in collaboration with stakeholders. Conduct research using classified and unclassified resources to source authentic language content. Develop training materials covering transcription, translation, and analysis of operational exercises. Collaborate with instructors, government personnel, and contractor teams to produce domain-specific training content. Utilize tools such as Audacity, Adobe Creative Suite, and Adobe Premier to create blended learning experiences. Design and implement practical evaluations to measure student mastery of objectives. Recommend tools and applications to enhance training effectiveness. Requirements: Active TS/SCI security clearance with Full-Scope Polygraph eligibility (CI Poly or CCA accepted while awaiting FS adjudication). Bachelor's degree in Language, Area Studies, Education, Instructional Systems Design (ISD), Intelligence, or related field; OR four (4) additional years of relevant practical experience in lieu of degree (for a total of nine years of experience). One year of ISD experience within the last four years, including synchronous/asynchronous methods and adult instruction using web-based tools (e.g., Centra, Blackboard, Questionmark, SumTotal). Native-level proficiency and minimum ILR level 4 in Arabic reading, listening, and speaking, with ILR level 2 in English; OR native English proficiency with ILR level 2+ in Arabic reading and listening (proficiency documented within the last five years). Five years of experience as a language analyst, including three years in SIGINT/IC roles, and at least one year of experience developing or updating training materials in line with ISD principles. Desired Qualifications Advanced proficiency with training technologies and eLearning platforms. Experience with blended learning and immersive training design for linguists. Prior NSA, DoD, or Intelligence Community training development experience. Demonstrated expertise in SIGINT operations and mission readiness training. Salary Range $75,000 - $78,000 annually the listed pay range is intended as a general guideline and does not represent a guaranteed salary. Final compensation will be determined based on the role's responsibilities, the candidate's education, experience, and skill set, internal equity, market data, and applicable laws or agreements. DarkStar Intelligence provides a competitive and comprehensive benefits package designed to support the well-being and long-term success of our full-time employees. Who We Are DarkStar Intelligence delivers mission-critical support to national security operations across intelligence, cybersecurity, technology, and operational support domains. We partner with government customers to strengthen decision advantage, enhance operational readiness, and advance mission success in complex and evolving threat environments. Why Work at DarkStar? At DarkStar Intelligence, you'll contribute directly to high-impact national security missions while growing your professional capabilities in a collaborative, performance-driven environment. We offer competitive compensation, comprehensive benefits, and opportunities for continuous development within a mission-focused team culture. ADA Accommodations Statement DarkStar Intelligence is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. Equal Employment Opportunity Statement DarkStar Intelligence is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status under applicable federal, state, or local law. E-Verify Participation DarkStar Intelligence participates in the federal E-Verify program to confirm employment eligibility of all newly hired employees in accordance with applicable law. Benefits Overview DarkStar Intelligence offers a comprehensive benefits package, which may include: Medical, dental, and vision coverage Paid time off (PTO) and holidays 401(k) retirement plan options Professional development and training opportunities
11/12/2026
Full time
Job Description Job Description Description: DarkStar Intelligence is seeking an Arabic Cryptologic Language Analyst (CLA) Training Developer to design, develop, and deliver cryptologic training programs aligned with NSA/CSS and DoD standards. This role focuses on preparing future SIGINT language analysts through hands-on, scenario-based, and blended learning techniques. In this role, you will ensure training materials accurately reflect operational duties and enable mission success. U.S. citizenship is required. Responsibilities Clarify and document operational requirements, training objectives, and material scope. Prioritize requirements for training development in collaboration with stakeholders. Conduct research using classified and unclassified resources to source authentic language content. Develop training materials covering transcription, translation, and analysis of operational exercises. Collaborate with instructors, government personnel, and contractor teams to produce domain-specific training content. Utilize tools such as Audacity, Adobe Creative Suite, and Adobe Premier to create blended learning experiences. Design and implement practical evaluations to measure student mastery of objectives. Recommend tools and applications to enhance training effectiveness. Requirements: Active TS/SCI security clearance with Full-Scope Polygraph eligibility (CI Poly or CCA accepted while awaiting FS adjudication). Bachelor's degree in Language, Area Studies, Education, Instructional Systems Design (ISD), Intelligence, or related field; OR four (4) additional years of relevant practical experience in lieu of degree (for a total of nine years of experience). One year of ISD experience within the last four years, including synchronous/asynchronous methods and adult instruction using web-based tools (e.g., Centra, Blackboard, Questionmark, SumTotal). Native-level proficiency and minimum ILR level 4 in Arabic reading, listening, and speaking, with ILR level 2 in English; OR native English proficiency with ILR level 2+ in Arabic reading and listening (proficiency documented within the last five years). Five years of experience as a language analyst, including three years in SIGINT/IC roles, and at least one year of experience developing or updating training materials in line with ISD principles. Desired Qualifications Advanced proficiency with training technologies and eLearning platforms. Experience with blended learning and immersive training design for linguists. Prior NSA, DoD, or Intelligence Community training development experience. Demonstrated expertise in SIGINT operations and mission readiness training. Salary Range $75,000 - $78,000 annually the listed pay range is intended as a general guideline and does not represent a guaranteed salary. Final compensation will be determined based on the role's responsibilities, the candidate's education, experience, and skill set, internal equity, market data, and applicable laws or agreements. DarkStar Intelligence provides a competitive and comprehensive benefits package designed to support the well-being and long-term success of our full-time employees. Who We Are DarkStar Intelligence delivers mission-critical support to national security operations across intelligence, cybersecurity, technology, and operational support domains. We partner with government customers to strengthen decision advantage, enhance operational readiness, and advance mission success in complex and evolving threat environments. Why Work at DarkStar? At DarkStar Intelligence, you'll contribute directly to high-impact national security missions while growing your professional capabilities in a collaborative, performance-driven environment. We offer competitive compensation, comprehensive benefits, and opportunities for continuous development within a mission-focused team culture. ADA Accommodations Statement DarkStar Intelligence is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. Equal Employment Opportunity Statement DarkStar Intelligence is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status under applicable federal, state, or local law. E-Verify Participation DarkStar Intelligence participates in the federal E-Verify program to confirm employment eligibility of all newly hired employees in accordance with applicable law. Benefits Overview DarkStar Intelligence offers a comprehensive benefits package, which may include: Medical, dental, and vision coverage Paid time off (PTO) and holidays 401(k) retirement plan options Professional development and training opportunities
Job Description Job Description Job Type: Full Time Location: Fort Huachuca, Az. Clearance: Top Secret VMR Strategic Defense Solutions is seeking a UC Cyber Tester to join our team. The UC Cyber Tester will create daily activity reports during test events and assist in the development of Cybersecurity test reports. The tester will provide daily information and data analysis to senior Unified Capabilities Test Analysts. The tester will also provide technical support to vendors during test and coordinate with designated Government Test Officers on activities, schedules, resource requirements, or issues affecting UC product testing. Duties Coordinate and participate in Cybersecurity meetings for Unified Capabilities Testing Identify applicable Cybersecurity Security Technical Implementation Guide (STIG) testing requirements for Unified Capabilities testing for specific Systems Under Test Conduct Internet Protocol Vulnerability (IPV) Scans with NESSUS, NMAP etc. vulnerability scanner tools. Assist in development of Cybersecurity test plans and procedures Analyze and organize raw test data from Unified Capabilities Cybersecurity testing Qualifications Required Education and Experience: Requires a Bachelor's degree; OR an Associate's degree at least 6 years of experience; OR a minimum of 60 semester hours of formal education working towards an Associate's or Bachelor's degree and at least 8 years of experience; OR At least 12 years of experience is required without degree component Must be DoD 8570 compliant, at minimum Security + Have practical and working knowledge of all Microsoft Office applications, advanced level knowledge MS Excel and MS Project applications. Quality interpersonal skills Must be able to multitask and be organized Quality oral and written communication skills Knowledge and experience with Defense Information Systems Agency (DISA) Security Implementation Guides (STIGs), IPV scanning using NESSUS and NMAP scanning tools, security controls and Risk Management Framework (RMF) processes Understanding of the Unified Capabilities Requirements Clearance Top Secret Working Environment & Conditions Onsite
11/12/2026
Full time
Job Description Job Description Job Type: Full Time Location: Fort Huachuca, Az. Clearance: Top Secret VMR Strategic Defense Solutions is seeking a UC Cyber Tester to join our team. The UC Cyber Tester will create daily activity reports during test events and assist in the development of Cybersecurity test reports. The tester will provide daily information and data analysis to senior Unified Capabilities Test Analysts. The tester will also provide technical support to vendors during test and coordinate with designated Government Test Officers on activities, schedules, resource requirements, or issues affecting UC product testing. Duties Coordinate and participate in Cybersecurity meetings for Unified Capabilities Testing Identify applicable Cybersecurity Security Technical Implementation Guide (STIG) testing requirements for Unified Capabilities testing for specific Systems Under Test Conduct Internet Protocol Vulnerability (IPV) Scans with NESSUS, NMAP etc. vulnerability scanner tools. Assist in development of Cybersecurity test plans and procedures Analyze and organize raw test data from Unified Capabilities Cybersecurity testing Qualifications Required Education and Experience: Requires a Bachelor's degree; OR an Associate's degree at least 6 years of experience; OR a minimum of 60 semester hours of formal education working towards an Associate's or Bachelor's degree and at least 8 years of experience; OR At least 12 years of experience is required without degree component Must be DoD 8570 compliant, at minimum Security + Have practical and working knowledge of all Microsoft Office applications, advanced level knowledge MS Excel and MS Project applications. Quality interpersonal skills Must be able to multitask and be organized Quality oral and written communication skills Knowledge and experience with Defense Information Systems Agency (DISA) Security Implementation Guides (STIGs), IPV scanning using NESSUS and NMAP scanning tools, security controls and Risk Management Framework (RMF) processes Understanding of the Unified Capabilities Requirements Clearance Top Secret Working Environment & Conditions Onsite
Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh
11/12/2026
Full time
Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh
