21 jobs found

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI961c8e15715a-5088

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI11172d4500bc-5088

Job Description Job Description TRIGO Global Quality Solutions is seeking to fill an Inventory Specialist Position in Greer, SC. Pay rate is $18.15 Day shift Overall Purpose of a Inventory Specialist Ensure accurate inventory and maintain proper documentation, labeling, and organization of material. Support quality control processes by tracking material status and movement, and collaborate to facilitate timely resolution and disposition. Reports to SAP Specialist/Trainer Responsibilities Client relationship & Business development Resolve and communicate any inventory discrepancies to shift supervisor and necessary customer personnel, with verbal reports and with electronic systems Complete and distribute pack inventory report to TRIGO and BMW stakeholders Operations Support hot call process for reject material Process rejects in PAC locations and disposition follow-up in established time frames Organization & management Manage parts on Quality Alert according to FIFO Manage reject, DFIR, and STR processes Manage and complete cleanliness/housekeeping and material cycle count and organizations in the PAC areas Technical Maintain 610 updated report on inventory reconciliation Complete daily aging and cage inventory reports Accurately reconcile inventory Containment Managing parts on Quality Alert according to FIFO Managing rejected material processed into PAC locations and the disposition follow-up Supporting the hot call process for reject material Resolving and communicating any inventory discrepancies to the Senior Lead and Supervisor and the relevant Customer personnel, both physically and in the inventory system Maintaining 610 report updated on inventory reconciliation Completing daily aging and cage inventory reports Managing cleanliness, material cycle count and organization of PAC locations Managing the Reject, DFIR, and STR processes Accurate inventory reconciliation Other Any other duties as assigned Knowledge, skills, abilities Hard Skills Proficiency in English Computer skills Microsoft Office (basic Microsoft Excel proficiency) and Outlook Proficient in the use of various gauges and measuring devices Ability to lift / move 50 lbs. Values and Attitude Global team spirit Team player Caring for people Open-minded Excellence Reactive Resilient to pressure Rigorous Customer focus Client oriented Reliable & trustworthy Flexible Initiative Autonomous Innovative Daring Work experience Overall recommendations 1+ years of work experience in a supervisory role preferred 1+ year in Quality related position preferred Education background Overall recommendations High School Diploma or Equivalent About TRIGO Global Quality Solutions Founded in 1997, TRIGO is a multinational company providing operational Quality Management solutions for the manufacturing sector, especially in the automotive and aerospace industries. With a team of more than ten thousand professionals present in 20+ countries across 4 continents, TRIGO offers a comprehensive portfolio of Quality Assurance services ranging from inspection to expert auditing, consulting and training. The unrivaled expertise, industrial mindset and extensive global footprint that TRIGO has built up over the last 3 decades has made TRIGO the leading quality solutions provider using the latest innovative and reliable digital systems and standard processes, delivering results in the most demanding industries. TRIGO has recently started to expand its clientele by offering quality services to the medical, chemical and food industries. TRIGO Global Quality Solutions is committed to the core values of equal employment opportunity. We are committed to treating people fairly, and with respect and dignity. We offer employment opportunities based upon an individual's qualifications and performance, free from discrimination or harassment because of race, ancestry, place of origin, ethnic origin, color, citizenship, creed, sex, sexual orientation, age, marital status, family status, and disability. TRIGO Global Quality Solutions appreciates receiving all expression of interest; however, only those candidates invited for an interview will be contacted. Job Posted by ApplicantPro

TSG - The Sheridan Group seeks a Technology Solutions Specialist to support digital tools that power strategic communications and public affairs campaigns. You will help implement, configure, and maintain CRM, advocacy, and analytics platforms; support data integrations; and troubleshoot issues for internal teams. Working closely with senior strategists, you'll translate campaign needs into technical requirements, produce reports and dashboards, and ensure data quality. This role is ideal for a detail-oriented technologist eager to learn, experiment, and contribute to high-impact issue and reputation campaigns in a fast-paced, collaborative environment. Responsibilities Implement, configure, and maintain CRM, advocacy, and analytics platforms to support campaigns Translate campaign and client needs into technical requirements and platform configurations Develop and maintain reports and dashboards to track campaign performance and KPIs Monitor data quality, perform regular audits, and manage data hygiene processes Support integrations between CRM, email, and analytics tools using APIs or middleware Provide technical troubleshooting and user support to internal teams Document processes, configurations, and best practices for digital tools Collaborate with strategists to test and optimize digital engagement workflows Assist with importing, segmenting, and managing contact and advocacy lists Stay current on relevant digital tools and recommend enhancements to the tech stack Required Skills CRM administration Data analysis SQL or query tools Marketing automation platforms Advocacy or email campaign tools Data visualization/reporting API or integration tools Excel/Google Sheets Basic scripting (Python/Java Script) Troubleshooting and technical support

Job Description Job Description The Senior Communications Specialist will need to perform the following duties: A. Research, write, edit, and produce materials to inform ED's' employees of agency policies, news, events, and programs through a variety of communication tools. B. Assists in planning, preparing, communication, and executing events for the ED Director and employees. C. Conducts meetings with ED's executives and managers coordinating information to provide accurate communication messages. D. Research, write, edit, and produce communication plans for agency wide messaging. E. Recommends strategies to improve ED's units and agency communication. F. Develop inreach, outreach, and communications activities and products to raise awareness and visibility of the office's products and services. G. Establish and maintain mutual communications between the stakeholders and industry, universities, other government agencies, and the public. H. Create and update communications products in support of the office's mission, including press releases, brochures, web content, social media, and major reports. I. Drafting executive level talking points and speeches for ED Director 's internal or external engagements. J. Developing/updating content for internally-facing and externally-facing webpages as needed, including coordinating with site managers. K. Experience with decision making that involve major uncertainties with regard to the most effective approach and methodology to be utilized in accomplishing the work due to rapidly evolving Internet technologies. L. Experience with online marketing and brand development including skill in developing strategies for disseminating content across multiple channels, including blogs and social networks. M.Experience in using multimedia editors such as Adobe Audition, Premiere, and Photoshop, in addition to CMS platforms, SEO, web metrics software, as well as adobe premiere pro or final cut. N. Experience in developing and executing online programs, including live events; in producing visual and/or multi-media content such as photos, videos, infographics, and data visualizations. The below skills and experience is required: a. Must have a minimum of 8 years of communication specialist experience. b. Minimum B.A. or B.S. degree c. Ability to communicate orally and in writing. d. Attention to detail, critical thinking skills, and sound judgment. e. Ability to think creatively about how to pitch and position stories.

Job Description Job Description Purpose of Position: The Senior Auditor (VP) is responsible for independently leading and executing risk-based internal audit assignments across operational, financial, regulatory compliance, information technology (IT), information systems (IS), cybersecurity, and integrated audit areas. The role performs audit planning, risk assessment, control evaluation, testing, documentation, and reporting with minimal supervision while serving as a trusted advisor to management on risk management, governance, regulatory compliance, technology controls, and process improvement opportunities. This position also plays a key role in leveraging data analytics and technology-enabled auditing techniques, supporting Audit Committee reporting, coordinating regulatory requests, and providing expertise related to IT governance, information security, cybersecurity, system implementations, and automated controls. This is an individual contributor role and does not have direct people management responsibilities. Essential Job Functions: Applies knowledge of banking operations, technology environments, information systems, cybersecurity risks, and regulatory requirements to develop and maintain risk assessments and contribute to the annual audit planning process. Obtains and documents an understanding of business processes, technology platforms, system interfaces, data flows, and supporting controls to identify and evaluate risks and the effectiveness of related internal controls. Develops risk and control matrices (RCMs), audit programs, testing strategies, and audit procedures for operational, financial, compliance, IT, IS, cybersecurity, and integrated audits with minimal supervision. Performs operational, financial, compliance, information technology, cybersecurity, and substantive testing procedures for internal audits, regulatory examinations, external audit support, and Sarbanes-Oxley (SOX) compliance activities. Evaluates the design and operating effectiveness of key controls, including automated controls, application controls, IT general controls (ITGCs), information security controls, cybersecurity controls, and data governance controls. Assesses technology-related risks involving infrastructure, cloud services, cybersecurity, third-party providers, system implementations, logical access, user provisioning, change management, data protection, and business continuity. Partners with business and technology stakeholders obtain audit evidence, conduct interviews, and evaluate processes and control environments. Ensures audit assignments are appropriately documented, accurate, complete, and completed within budget and established timelines. Prepares clear, concise, and well-supported audit reports, issue summaries, and other written communications with minimal supervision. Resolves review notes, management inquiries, and audit-related requests promptly and professionally. Serves as a department resource on data analytics, continuous monitoring, technology-enabled auditing, artificial intelligence (AI) applications, and audit automation techniques. Utilizes data analytics tools and techniques to identify risk indicators, analyze large data populations, improve audit efficiency, and enhance audit coverage. Maintains effective working relationships with Internal Audit Management, business line management, technology teams, external auditors, regulators, and other stakeholders. Provides timely communication to Internal Audit Management regarding audit progress, emerging risks, control deficiencies, cybersecurity concerns, and significant issues identified during audits. Keeps current on banking regulations, auditing standards, information technology trends, cybersecurity risks, emerging technologies, and industry best practices. Maintains continuing professional education and relevant certifications. Maintains appropriate levels of confidentiality and professionalism in handling sensitive Bank information. Performs other duties and special projects as assigned Education and Experience: Bachelor's degree in accounting, Finance, Information Systems, Computer Science, Cybersecurity, Business Administration, or a related field. Minimum 3-5 years of experience in internal audit, external audit, public accounting, IT audit, information security audit, risk management, regulatory compliance, or financial services auditing, preferably within the banking industry. Experience conducting operational, compliance, financial, IT, information systems, cybersecurity, or integrated audits. Experience evaluating IT General Controls (ITGCs), application controls, automated controls, interfaces, system implementations, third-party/vendor risks, and information security controls. Knowledge & Skills . Strong knowledge of internal auditing principles, practices, standards, and methodologies. Working knowledge of banking operations, products, services, and regulatory requirements. Strong understanding of risk assessment methodologies and internal control frameworks. Knowledge of IIA Global Internal Audit Standards. Knowledge of the Sarbanes-Oxley Act (SOX) and related control requirements. Good understanding of COSO 2013 Internal Control Framework requirements. Understanding of IT governance, information security, cybersecurity, data governance, cloud computing, and technology risk management concepts. Knowledge of industry control frameworks and standards such as NIST Cybersecurity Framework, COBIT, FFIEC guidance, ISO 27001, and related regulatory expectations is preferred. Strong analytical, problem-solving, critical-thinking, and investigative skills. Strong written and verbal communication skills with the ability to communicate effectively with senior management and technical personnel. Strong project management, organization, and time management skills. Ability to manage multiple assignments, prioritize competing deadlines, and work independently. Ability to positively interface and work well with all levels of staff and management (auditees and own department) Working knowledge of relevant computer programs, i.e. Microsoft Access, Word, Excel, core banking system and query Ability to handle bank and client information and sensitive matters professionally and confidentially Preferred Certifications One or more of the following certifications, or progress toward obtaining them, is preferred: Certified Internal Auditor (CIA) Certified Public Accountant (CPA) Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified in Risk and Information Systems Control (CRISC) Certified Regulatory Compliance Manager (CRCM) Certified Financial Services Auditor (CFSA) Certified Bank Auditor (CBA) Certified Community Bank Internal Auditor (CCBIA) Certified Trust & Financial Advisor (CTFA) Certified Fiduciary & Investment Risk Specialist (CFIRS) Our job titles may span more than one career level. The starting base salary for this role is between $100,000.00 - $120,000.00. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as "remote".

Job Description Job Description ProSync is seeking passionate Information System Security Specialist III to help provide mid level cybersecurity support for Navy information systems, networks, and mission environments. This role assists in implementing, maintaining, and monitoring security controls in accordance with DoD and federal cybersecurity policies. ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community. If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible," please apply today! RESPONSIBILITIES The Information System Security Specialist is responsible for supporting all aspects of a Program Information Assurance (IA) processes tailored to include minimum qualification standards, fundamental awareness and familiarity to demonstrated competency with specific experience in Cyber Security, Engineering, Test & Evaluation, (T&E) and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process. The specialist should demonstrate a working knowledge of the Risk Management Framework (RMF) process and/or include prior experience with the Defense Information Assurance & Certification Accreditation Process (DIACAP). Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements. The specialist is expected to evaluate security solutions to ensure they meet security requirements for processing up to classified information, and supervise and/or maintain the operational security posture for an information system or program. Support the development, documentation, and maintenance of system security plans, procedures, and authorization artifacts. Assist in implementing security controls and ensuring compliance with applicable cybersecurity frameworks (e.g., RMF, NIST, DoD directives). Conduct routine security assessments, vulnerability scans, and configuration checks to identify and report security risks. Support incident response activities, including evidence collection, initial triage, and coordination with senior cybersecurity personnel. Maintain awareness of system configurations, user access requirements, and security posture changes. Assist in preparing documentation for system authorization, continuous monitoring, and audit readiness. Provide user support on security procedures, access requirements, and proper handling of sensitive information. Requirements A minimum of 5 years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field. Must have experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS) A minimum Top Secret security clearance or higher with the ability to obtain a Top Secret w/ SCI is required to be considered for this position. EDUCATIONAL REQUIREMENTS A college degree in a technical or managerial related discipline is preferred. Note: a high school diploma or high school equivalency certificate is acceptable with 2 additional years of practical experience. CERTIFICATION REQUIREMENTS May be required to hold an Interim Security Control Assessor qualification. Benefits Join PROSYNC and enjoy our great benefits! Compensation We offer sign on bonuses! We also offer bonuses that are awarded quarterly to our employees and our compensation rates are highly competitive. Health & Retirement We offer a comprehensive Health Benefits package and 401K retirement plan so you can take care of yourself and your family, now and in the future. Other health-related benefits include an employee assistance program for those difficult times or when you need to take care of your mental health. Education Individual growth is a priority at ProSync. Employees are encouraged to take advantage of our company-sponsored continuing education program so they can get their degree or that next certification they need to propel them to the next level. Work/Life Balance A healthy work/life balance is essential for building and executing your work effectively at ProSync, but it's also necessary to allow you the room to pursue everything else you want to develop in your personal life. We offer generous Paid Time Off and 11 paid holidays a year. ProSync also provides flexible work options that work with your schedule and lifestyle.

Job Description Job Description ProSync is seeking passionate Information System Security Specialist II to help provide mid level cybersecurity support for Navy information systems, networks, and mission environments. This role assists in implementing, maintaining, and monitoring security controls in accordance with DoD and federal cybersecurity policies. ProSync Technology Group, LLC (ProSync) is an award-winning, SDVOSB Defense Contracting company with a strong military heritage and a record of excellence in supporting the Department of Defense and the Intelligence Community. If you have prior military service or government contracting experience, are proud to serve and support our nation, and want to help support ProSync's mission to "Define and Redefine the State of Possible," please apply today! RESPONSIBILITIES The Information System Security Specialist is responsible for supporting all aspects of a Program Information Assurance (IA) processes tailored to include minimum qualification standards, fundamental awareness and familiarity to demonstrated competency with specific experience in Cyber Security, Engineering, Test & Evaluation, (T&E) and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process. The specialist should demonstrate a working knowledge of the Risk Management Framework (RMF) process and/or include prior experience with the Defense Information Assurance & Certification Accreditation Process (DIACAP). Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements. The specialist is expected to evaluate security solutions to ensure they meet security requirements for processing up to classified information, and supervise and/or maintain the operational security posture for an information system or program. Support the development, documentation, and maintenance of system security plans, procedures, and authorization artifacts. Assist in implementing security controls and ensuring compliance with applicable cybersecurity frameworks (e.g., RMF, NIST, DoD directives). Conduct routine security assessments, vulnerability scans, and configuration checks to identify and report security risks. Support incident response activities, including evidence collection, initial triage, and coordination with senior cybersecurity personnel. Maintain awareness of system configurations, user access requirements, and security posture changes. Assist in preparing documentation for system authorization, continuous monitoring, and audit readiness. Provide user support on security procedures, access requirements, and proper handling of sensitive information. Requirements A minimum of 2 years of practical experience in a Cybersecurity, Engineering, T&E or A&A (formerly C&A) related field. Must have experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS) A minimum Top Secret security clearance or higher with the ability to obtain a Top Secret w/ SCI is required to be considered for this position. EDUCATIONAL REQUIREMENTS A High school diploma or HS equivalency certificate is acceptable. CERTIFICATION REQUIREMENTS May be required to hold an Interim Security Control Assessor qualification. Benefits Join PROSYNC and enjoy our great benefits! Compensation We offer sign on bonuses! We also offer bonuses that are awarded quarterly to our employees and our compensation rates are highly competitive. Health & Retirement We offer a comprehensive Health Benefits package and 401K retirement plan so you can take care of yourself and your family, now and in the future. Other health-related benefits include an employee assistance program for those difficult times or when you need to take care of your mental health. Education Individual growth is a priority at ProSync. Employees are encouraged to take advantage of our company-sponsored continuing education program so they can get their degree or that next certification they need to propel them to the next level. Work/Life Balance A healthy work/life balance is essential for building and executing your work effectively at ProSync, but it's also necessary to allow you the room to pursue everything else you want to develop in your personal life. We offer generous Paid Time Off and 11 paid holidays a year. ProSync also provides flexible work options that work with your schedule and lifestyle.

Job Description Job Description Purpose Information technology is foundational to how Citadel Aviation operates at every site, from the systems that move work across the hangar floor and the shops to the platforms that support administrative staff. Secure, reliable network and identity infrastructure enable Citadel to operate without interruption, protect its work and its people, and meet its obligations to customers and partners. This role owns the design, operation, and security of Citadel's network and identity infrastructure across every Citadel site: reliable connectivity, a hardened identity platform, and a security posture that scales with the business. The role serves as Citadel's internal technical counterpart to the company's security SOC and managed detection and response (MDR) provider, partners with IT leadership and peers across IT and the business, owns assigned IT projects, and is accountable for the reliability of the network and the strength of the security posture across every site. Environment The technology stack includes Palo Alto next-generation firewalls, Cisco switching, Meraki wireless, Microsoft 365 with Entra ID for identity, Microsoft Defender for Endpoint and Intune for endpoint security and management, Tenable for vulnerability management, and KnowBe4 for security awareness. Security operations are delivered in partnership with an external SOC and MDR provider. Essential Job Functions Own the design, operation, and security of Citadel's network infrastructure across all sites. Maintain firewalls, switching, wireless, ISP connectivity, and backup connectivity. Design and implement upgrades to support growth, lead network design and turn-up for new Citadel facilities, and maintain secure connectivity between sites, between sites and the cloud, and for remote users. Own the design, operation, and security of Citadel's voice and unified communications infrastructure, including the company's calling system, VOIP infrastructure, and integration with Microsoft 365 communications. Maintain consistent network and security service quality across all Citadel sites. Travel between sites is heavier during the initial standardization phase across existing sites and during turn-up of new sites, and lighter once the environment reaches steady state. Perform in line with established KPIs and service-level targets, including network availability, security patch SLA, mean time to remediate vulnerabilities, mean time to respond to security incidents, and related measures. Track and report performance regularly to IT leadership. Serve as the internal technical counterpart to the company's security SOC and MDR provider, who operate detection, monitoring, and response. Partner closely on detection tuning, alert triage, investigation, and remediation. Own endpoint security policy across the Microsoft 365 platform, including Microsoft Defender for Endpoint configuration, conditional access, identity hardening, and Intune security baselines. Partner with the IT manager and the support team on day-to-day operation and enforcement. Own technical email security controls, including anti-phishing, anti-malware, secure transport, and tenant security configuration. Partner with the IT manager on user-facing reporting and response workflows. Run Citadel's vulnerability management process in partnership with the MDR provider. Operate scanning tooling, prioritize findings, and drive remediation across the IT organization. Own identity and access management hardening, including multi-factor authentication, conditional access policy, privileged access controls, and account lifecycle hygiene. Set program direction and content for Citadel's cybersecurity awareness program, including training plans, phishing simulation strategy, and ongoing user education topics. Partner with the IT manager, who runs the user-facing activities and reporting. Conduct third-party security review of new vendors, software platforms, and integrations before they enter the environment. Assess data handling, integration security, and ongoing risk; track approval and remediation. Coordinate Citadel's response to external security assessments, including penetration testing, cyber insurance reviews, customer security questionnaires, and regulatory inquiries. Scope engagements, work with vendors, maintain evidence, and track remediation. Deliver assigned IT projects within networking and security, and contribute to broader IT initiatives. Coordinate with IT leadership and peers, and engage external specialists and contractors as needed. Partner with IT leadership and peers in infrastructure, support, and software development on initiatives originating in those service lines. Contribute network and security expertise to keep delivery on track. Own vendor relationships within the network and security portfolio, including ISPs, network hardware, security tooling, and specialized contractors. Take on broader IT vendor relationships as assigned. Own the network and security operating budget, with broader budget scope as assigned. Track expenses, project upcoming needs, and provide input on annual IT budget planning. Own the on-call rotation for network and security incidents. Drive diagnosis, coordinate internal and external resources, and engage directly in resolution. Own incident communication for network and security events. Notify IT leadership and impacted business stakeholders, provide regular status updates throughout an incident, and deliver post-incident summaries with root cause and follow-up actions. Conduct periodic internal security audits across user access, identity hygiene, configuration baselines, vulnerability posture, and policy adherence. Remediate findings in partnership with the IT manager. Maintain and enforce IT network and security policies, procedures, runbooks, technical documentation, and asset inventory. Contribute to the creation and modification of policies as needed. Identify and propose improvements in network design, security posture, monitoring coverage, and tool consolidation. Deliver approved initiatives. Non-Essential Functions Running cables and installing hardware. Other duties as assigned. Minimum Qualifications or Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, or a related technical discipline. Equivalent professional experience considered in lieu of degree. 5+ years of progressive experience in enterprise network engineering and information security. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Experience operating in partnership with a managed detection and response (MDR) provider or security operations center (SOC). Experience with vulnerability management, including scanning tooling (Tenable Nessus or comparable), prioritization, and driving remediation across an organization. Experience operating in an environment with regular external security assessments (penetration testing, cyber insurance reviews, customer security audits) and remediating findings under deadline. Experience supporting multi-site operations or production environments where uptime, security, and consistency of service are operational requirements. Experience delivering IT projects from scope through completion, including scheduling, vendor coordination, and budget tracking. Demonstrated ability to communicate technical concepts clearly to non-technical business stakeholders and to senior leadership. Demonstrated experience adhering to and enforcing security best practices across network, endpoint, and identity domains. Preferred Qualifications or Experience Experience in aviation, aerospace, manufacturing, MRO, or other regulated operational environments. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Active IT industry certifications such as CompTIA Security+ or Network+, Cisco CCNA / CCNP, Palo Alto PCNSA / PCNSE, Microsoft Security or Identity certifications, CISSP, GIAC, or comparable. Experience designing and bringing up network infrastructure at new sites or facilities. Experience with SD-WAN, zero-trust architecture, network segmentation, or related modern network design patterns. Familiarity with security frameworks (NIST, CIS) and audit or compliance work. Experience with security awareness platforms (KnowBe4 or comparable). Experience administering identity and access controls in a hybrid or cloud-first environment. Experience with VOIP or unified communications infrastructure. Supervisory Responsibilities This position has no direct reports. Coordinates day-to-day with external network and security contractors, managed-service providers, and the company's SOC and MDR partner. Provides technical guidance and security expertise to IT team peers and to business stakeholders as needed. Knowledge, Skills, and Other Attributes Deep technical expertise across enterprise networking (firewalls, switching, wireless, routing) and information security (endpoint, identity, vulnerability management, security monitoring). . click apply for full job details

Job Description Job Description Job Summary The Information Security Specialist (Intermediate/Senior) is responsible for protecting enterprise information systems by implementing and maintaining cybersecurity programs, Risk Management Framework (RMF) activities, vulnerability management, and compliance initiatives. The role ensures the confidentiality, integrity, and availability of information systems while supporting security assessments, accreditation efforts, continuous monitoring, and regulatory compliance. Key Responsibilities Develop, maintain, and enforce information security policies, standards, and procedures. Ensure compliance with cybersecurity regulations, directives, and security requirements. Support Risk Management Framework (RMF), certification, accreditation, and information assurance activities. Develop and maintain cybersecurity and Information Assurance (IA) program plans. Conduct security assessments to identify risks, vulnerabilities, and security violations. Support system authorization and accreditation processes. Integrate cybersecurity requirements into continuity of operations (COOP) and contingency plans. Maintain cybersecurity documentation, policies, and operational procedures. Collect and report cybersecurity compliance metrics and required documentation. Track and remediate vulnerabilities, IAVMs, and ICVMs. Develop and manage Plans of Action and Milestones (POA&Ms). Support continuous monitoring, security audits, inspections, and compliance assessments. Collaborate with engineering, systems administration, and operations teams to strengthen security posture. Required Qualifications Intermediate Level U.S. Citizenship with an active DoD Secret Clearance. Minimum 4 years of experience in cybersecurity, information assurance, or information security. DoD 8570/8140 IAT Level II Certification (CompTIA Security+ or equivalent). Microsoft 365 Certified: Endpoint Administrator Associate (MD-102). Experience supporting RMF, vulnerability management, compliance initiatives, and cybersecurity operations. Ability to obtain required baseline certification within six months of hire. Preferred Qualifications Experience with DoD cybersecurity policies and NIST security standards. Experience supporting certification and accreditation activities. Knowledge of enterprise vulnerability management and compliance programs. Experience with continuous monitoring and security auditing. Strong analytical, documentation, communication, and problem-solving skills.

Job Description Job Description Description: Location: Tri-Cities, WA Travel: Up to 20% Reports To: Corporate VP of IS The IS Specialist III serves as the primary on-site technology leader supporting a multi-site operation of 50-200 users. This role ensures stable, secure, and efficient IT operations while coordinating closely with the Corporate IS team for advanced engineering, development, cybersecurity, and infrastructure initiatives. This is a senior-level technical generalist role combining Windows infrastructure support, business systems reporting, project coordination, industrial systems integration, and local technical leadership. The position is hands-on and part of the broader corporate IS team, which includes senior infrastructure engineers, developers, helpdesk, and junior development resources. Duties Infrastructure & Systems Operations (Primary Focus) Serve as the local lead for Windows-based infrastructure (Windows 10/11, Microsoft 365, Active Directory, core software platforms, hardware systems, and web services). Coordinate with the corporate infrastructure team on network support, backup and disaster recovery, endpoint management, and server lifecycle planning. Escalate complex issues appropriately while maintaining local ownership and accountability. Maintain documentation of systems, diagrams, configurations, and asset inventories. Assist with user provisioning, workstation deployments, and site-level hardware standards. Project Coordination & Implementation Lead site-level technology projects from requirements gathering through deployment. Coordinate with corporate developers and infrastructure engineers on larger initiatives. Manage timelines, vendor engagement, testing, and deployment activities. Evaluate new software and hardware solutions and provide structured recommendations. Assist with task estimation, prioritization, ROI evaluation, and project documentation. Hardware Integration & Operational Support Support integration of industrial or facility systems with enterprise IT infrastructure. Coordinate system integration between hardware platforms and internal software applications. Maintain appropriate segmentation between operational and corporate systems. Security & Compliance Support Ensure local systems adhere to corporate cybersecurity policies. Support NIST 800-171 and Sarbanes-Oxley-aligned controls in coordination with Corporate IS. Assist with audits through documentation, evidence gathering, and change control support. Promote secure configuration standards and end-user security best practices. Business Systems Lead & Reporting Participate in the SDLC for waste tracking, procurement, accounting, asset management, and ancillary information systems initiatives. Develop and maintain SQL queries and SQL Server reports (SQL, SSRS, RDL). Partner with operations to develop business requirements, validate system designs, update system documentation, and oversee implementation. Assist with data validation, testing, and minor integrations. Requirements: 10+ years of progressive IT experience in systems administration, infrastructure, or business systems roles; OR a four-year related degree with 5+ years of relevant experience. Strong Microsoft ecosystem experience (Windows Server/Client, Active Directory). Solid SQL experience (query writing, stored procedures, SSRS development). Experience supporting multi-site or distributed operations. Ability to manage technical priorities independently in an operational environment. Strong written and verbal communication skills across technical and non-technical stakeholders. Prefered Experience Experience in regulated or industrial environments. Experience with .NET, Go, JavaScript, C#, or other development environments. Familiarity with waste tracking, ERP, or accounting systems. Working knowledge of network fundamentals (firewalls, VLANs, VPN). Experience coordinating technical projects. Understanding of API integrations and data exchange models. This role serves as a senior embedded technical leader and operational bridge between site operations and Corporate IS. It provides hands-on technical support, business systems insight, and practical project leadership while leveraging centralized corporate expertise for deep engineering and development functions.

Job Description Job Description This position must meet Export Control compliance requirements, therefore a "US Person" as defined by 22 C.F.R. 120.15 is required. "US Person" includes US Citizen, lawful permanent resident, refugee, or asylee. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Canyon AeroConnect stands as one of the world's leading suppliers of avionic-standard aircraft communications, navigation and audio/intercom systems. Canyon's products have been widely adopted and proven in-service across a wide range of civilian, paramilitary and military fixed-wing and rotorcraft applications. Over the years, we've become known as the benchmark in aircraft tactical communication and audio equipment for Air Ambulance, Law Enforcement, SAR, EMS, Electronic News Gathering, Military and Marine applications. Products include digital and analog radio/audio management systems, Tac/Com, VHF/UHF radio systems, intercoms, data interface accessories, and aural warning. We are seeking dynamic thinkers who could be integral team members for our high-tech avionics' products. Role purpose (position scope): The Information Security Specialist (Information Systems Security Officer) helps build and operate the internal security program and technology operations. This hands-on role works across security operations, identity and access management, endpoint and network defense, vendor risk, compliance, and end-user enablement. The position works closely with IT, engineering, and business teams to keep the company secure without slowing it down and is intended for an individual who wants to grow into a senior internal security role over time. Key Responsibilities: Support day-to-day security operations, including SIEM and EDR alert triage, log review, and incident-response investigations. Help administer identity and access management systems, including SSO, MFA, directory services, onboarding, transfers, offboarding, periodic access reviews, and cleanup of stale accounts and entitlements. Maintain and improve endpoint security, including EDR health, patch management, configuration baselines, and disk encryption. Assist with firewall rule reviews, VPN administration, network segmentation, and monitoring for misconfigurations. Support vulnerability scanning, prioritization, remediation coordination, and metric tracking. Support compliance activities such as CMMC and NIST by collecting evidence, maintaining policies, completing customer security questionnaires, and preparing for applicable audits. Support vendor risk management by reviewing third-party security documentation and tracking risk acceptances. Develop and deliver security awareness content, including phishing simulations, onboarding training, and internal guidance. Serve as a point of contact for security questions, suspicious emails, lost devices, and access requests. Document security processes, runbooks, and System Security Plan (SSP) so the program can scale as the company grows. Participate in the on-call rotation. Required Qualifications: At least one year of experience in information security, IT operations, or a closely related field Solid fundamentals in networking, operating systems, and authentication protocols. Familiarity with compliance frameworks, especially CMMC and applicable European requirements such as Cyber Essentials. Ability to script in Python, PowerShell, or Bash for automation and ad hoc tasks. Strong written and verbal communication skills, including the ability to explain security concepts to non-technical audiences. Experience supporting and managing highly regulated and secured network systems. Self-directed and comfortable providing Tier 2 helpdesk support as well as working across teams in a fast-moving environment. Willingness to be part of the on-call rotation and respond to cyber incidents during evening or weekends. Ability to obtain industry certifications such as CCNA, CompTIA Security+, or Network+ within the next 12 months. Preferred Qualifications: Three or more years of experience in information security, AI, or a closely related field, with hands-on exposure to multiple security domains. Working knowledge of SIEM, EDR, vulnerability scanners, identity providers such as Okta or Entra ID, and cloud platforms such as AWS, Azure, or GCP. Experience supporting or leading audits. Exposure to cloud security posture management. Familiarity with offensive security concepts and tooling highly regulated and secured network systems. Industry certification such as CISSP, CISM, CCIE, CCNP Security, CISA, CRISC, or similar. Compliance Considerations: The role may support applicable information-security and regulatory requirements identified for the business, including ITAR, CMMC, NIS2, Cyber Essentials and Cyber Essentials Plus, CMS, DCPP, and ISO/IEC 27001. Work Environment: This is an on-site position at the designated company location. Direct Reports No direct reports. The position may provide technical direction, peer review, or mentoring consistent with the assigned level. Physical Demands Tasks involve light physical effort in sedentary to light work and may involve lifting, carrying, pushing, or pulling objects or materials weighing 5-10 lb. Tasks may involve extended periods at a keyboard or workstation. Work Environment Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the job duties described above, the employee mainly works in an office, lab, or factory setting that is relatively quiet and has temperature-control systems. This job description is not intended to be all inclusive of every job function, duty and responsibility. Duties may increase, decrease and/or change as deemed necessary to support the department operations.

Job Description Job Description Important Notice for Applicants: At Bixal, we want to ensure a transparent and secure application process for all candidates. Official communication will come from an email address ending or from Messages from other sources may be fraudulent, and you should exercise care to avoid any links or attachments included. Bixal will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Need Assistance or a Reasonable Accommodation? If you need assistance or a reasonable accommodation to complete your application, we're here to help. Please reach out to us at and let us know how we can support you. You do not need to share personal details or disclose the nature of your request. You can expect a response from a team member within 24 hours during the regular work week and on the next operating day during the weekend or holidays. Why Bixal? Bixal is a consulting company headquartered in Fairfax, VA, working alongside governments and organizations to help them deliver better services and experiences to the communities they serve. Using evidence-based knowledge and technology, Bixal empowers clients to deliver on their missions more effectively by fostering a culture of learning and continuous improvement. Our values: People-First : Emphasizing the importance of people in all aspects of work. Collaboration and Transparency : Valuing teamwork and open communication. Growth Mindset : Encouraging innovation and continuous improvement. Creating Lasting Impact : Focusing on meaningful outcomes and positive change. About the role: Bixal is seeking a Senior Records Information Management Specialist for a project that supports a large-scale outreach and engagement effort, delivering strategic communications, content and creative services, digital strategy, and audience engagement across public-facing websites, applications, and social media platforms. The work is paired with the IT, cybersecurity, and data operations needed to keep that digital presence secure, reliable, and available around the clock. The program's mission is to ensure the intended audience receives timely, accurate, and accessible information about the programs, services, and policies that affect them - with content and platforms built to scale, adapt to changing needs, and hold up to federal compliance and security standards. The Senior Records Information Management Specialist will lead the design, governance, and day-to-day administration of the program's records management function, ensuring that electronic records generated across public-facing websites, applications, and social media platforms are properly captured, controlled, archived, and preserved in accordance with federal recordkeeping law and DoD policy. This role serves as the primary bridge between the content operation and the Government Records Manager, translating recordkeeping requirements into practical, user-centric processes that content and digital teams can execute consistently. This is a full-time position contingent on contract award by our client, with a defined performance period of one year with two one-year option periods. This role offers you a unique opportunity to make a meaningful impact on a project that aligns with Bixal's mission of delivering innovative, human-centered solutions. While the role has a fixed duration, we are committed to transparency and collaboration, keeping you informed about contract updates and new opportunities. At Bixal, we support your professional journey, ensuring your experience reflects our inclusive, purpose-driven culture and prepares you for future success. Location This role can work remotely from anywhere in the USA. You must be legally authorized to work in the US. Bixal does not provide visa sponsorship. Compensation: The salary range for this role is $92,000 - $95,000. In the spirit of transparency, most offers tend to land near the midpoint of the range. We make compensation decisions thoughtfully, considering your experience, the skills you bring, and our commitment to internal equity. Fairness and transparency are core to how we operate. Responsibilities: Administer the organization's records management program, ensuring records of business and mission activity are properly identified, scheduled, captured, and preserved in compliance with federal recordkeeping law and DoD records management policy. Develop, implement, and annually update records management SOPs and guidance, keeping pace with evolving Federal, DoD, and program-specific policy. Develop and maintain a records management plan governing the transfer, accessioning, and eventual disposition of permanent electronic records to the appropriate federal archival authority, and lead execution of related transfer activities. Conduct periodic compliance reviews and risk assessments of the records program, documenting gaps and recommending corrective actions to leadership. Partner with the Government Records Manager and content stakeholders to design intuitive, user-centric records management systems and workflows; conduct user research to identify pain points and streamline compliance. Direct archiving and digital preservation activities, including secure storage, metadata tagging and indexing, and backup/disaster-recovery practices that ensure long-term accountability, availability, and integrity of records. Ensure archived and published content remains tamper-proof, verifiable, and retained per applicable records schedules, conducting regular audits of archiving, access-control, and publishing workflows. Establish and enforce access-control, permissions, and audit-trail practices across content systems to maintain a defensible chain of custody. Ensure records considerations are reflected in broader digital strategy planning, content governance, and reporting. Deliver required records-related compliance and status reporting on established schedules, and brief findings and recommendations to Government stakeholders. Provide subject-matter guidance and training to content and digital teams on records identification, tagging, and retention responsibilities. Other relevant duties as qualified/trained to perform Qualifications: This position requires an active Secret Clearance. BA/BS in Information Science, Library/Archival Studies, Records Management, or a related field. Minimum 10 years of experience in records information management, including electronic records management within a federal or DoD environment. Demonstrated working knowledge of federal records management law, DoD recordkeeping policy, and archival transfer/accessioning processes. Experience developing and maintaining records management SOPs, retention schedules, and compliance reporting. Experience working within a content management system (CMS) environment and coordinating with cross-functional content/digital teams. Strong written communication skills, with experience producing compliance and governance reporting for government stakeholders. Nice to Have Skills and Experience: Certified Records Manager (CRM) or Information Governance Professional (IGP) certification. Familiarity with cloud-hosted content environments and associated backup and disaster-recovery controls. How We Support Our Team: Flex hours 401K with matching incentive Parental Leave Medical/dental/vision benefits Flex Spending Account Company provided short-term disability and life insurance Commuter benefits Paid Time Off (PTO) 11 Paid holidays Our company is committed to providing equal employment opportunities for all individuals and complies with all applicable federal, state, and local anti-discrimination laws. Employment decisions are based on merit, qualifications, and business needs.

Job Description Job Description Information Security Specialist Officer, Technical Lead, AWS Security • RMF & ATO • NIST 800-53 • Cloud Application Security Clearance: Active CBP, DHS, or Top Secret Clearance required Work Arrangement: Hybrid - onsite 3 days/week during standard business hours in Ashburn, VA About the Role Dev Technology Group is seeking a Senior Information Security Specialist to lead and develop a mid-sized team of ISSOs supporting the security, compliance, and authorization of mission-critical federal applications and information systems hosted in AWS. This is a hands-on technical leadership role combining people leadership, federal cybersecurity expertise, and direct collaboration with government and technical stakeholders. You will mentor junior and mid-level ISSOs while partnering with system owners, developers, architects, cloud/infrastructure engineers, security professionals, and government stakeholders throughout the system development lifecycle. You will provide practical security guidance for AWS-hosted applications, lead Risk Management Framework (RMF) and Authority to Operate (ATO) activities, oversee vulnerability management and continuous monitoring, and translate federal cybersecurity requirements into actionable guidance for technical teams. What You'll Do Lead, mentor, and develop a team of ISSOs by establishing priorities, providing technical direction and coaching, and promoting accountability and consistent security practices. Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities across a portfolio of federal systems and applications. Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders to maintain authorizations, identify risks, and address security requirements. Lead vulnerability management efforts, prioritizing remediation, developing mitigation strategies, and tracking corrective actions through resolution. Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements . Prepare and maintain security and authorization documentation, including SSPs, ISAs, audit artifacts, and RMF documentation . Provide cybersecurity guidance for applications and systems deployed in AWS and integrate security throughout the software development lifecycle. Validate security implementation through technical reviews, discussions, interviews, assessments, and tabletop exercises. Support security audits, assessments, compliance reviews, and reviews of information systems and network connections. Interpret federal and client security policies and translate requirements into practical guidance for technical and development teams. Identify and escalate security risks, communicate priorities and remediation status, and provide clear visibility to Dev Technology leadership and government stakeholders. Develop and present security metrics, status reports, risk assessments, and executive briefings . Establish and improve security processes, procedures, templates, dashboards, and workflows to improve consistency, accountability, and efficiency across the ISSO team. Build trusted relationships with government clients through proactive communication, collaboration, and face-to-face engagement. Required Education, Experience & Skills Bachelor's degree and 7+ years of experience securing federal information systems. Demonstrated experience leading and mentoring information security professionals , including junior and mid-level ISSOs. Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders.' Strong working knowledge of NIST Risk Management Framework (RMF) and experience supporting federal systems through security authorization and ATO activities . Experience developing, implementing, assessing, or documenting security controls aligned with FISMA and NIST 800-53 . Experience with vulnerability management, continuous monitoring, security assessments, audits, or compliance reviews for federal systems. Experience providing cybersecurity guidance for AWS-hosted applications and systems . Strong understanding of modern information systems and their technical security considerations. Ability to work effectively with developers, architects, engineers, government stakeholders, and technical and non-technical audiences. Strong written and verbal communication skills, including the ability to communicate security risks and technical findings and develop/present security documentation and executive briefings. Ability to establish priorities, manage competing demands, independently manage security activities, and escalate issues appropriately. Proactive, solutions-oriented approach to identifying risks and improving security practices. Current CBP, DHS, or Top Secret Clearance. Ability to work onsite 3 days per week in Ashburn, VA during standard business hours. Cybersecurity certification such as CISSP, CISM, GIAC, Security+, or another recognized cybersecurity certification. Preferred Education, Experience & Skills Experience developing or supporting RMF and authorization artifacts, including SSPs, ISAs, PTAs, ATTs, POA&Ms , and related documentation. Experience partnering with application development, cloud engineering, and DevSecOps teams to integrate security throughout the SDLC. Experience working in an Agile software development environment using Jira or similar platforms. Experience with GRC tools such as CSAM or similar platforms supporting authorization, compliance, vulnerability management, and security activities. Understanding of AI concepts and practical applications of AI for cybersecurity operations, risk analysis, compliance, or security program management. Our estimated salary range for this position is $88,000 - $ 150,000. This presented salary range is not a guarantee of compensation or salary. Offered salary is based on experience, geographic location, and possibly contractual requirements as appropriate to the role. Salary could fall outside of this range. Who We Are Dev Technology is a growing IT company with an employee-centric culture that works on mission-critical projects for the federal government. We partner with our federal customers to deliver technology services and solutions, and to drive our client's missions forward through innovation. We use Agile and DevSecOps principles to provide services including application development, biometrics and identity management, cloud and infrastructure optimization, IT and legacy modernization, and data management. As a Washington Post Top Workplace award winner for the past THIRTEEN years in a row, the Top Workplaces USA for the past five years, and a recipient of the Companies As Responsive Employers (CARE) Award for the past six years, Dev Technology employees enjoy: Generous and flexible time-off policy Flexible work schedules and telework options, including remote work availability for eligible projects Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities Industry-leading benefits including a choice of two health plans that include dental and vision, flexible spending account, commuter benefits, life insurance, and more 401K matching with a 5% matching contribution Regular team and company social events including our annual party, happy hours, fitness challenges, and more A focus on community engagement including company wide support activities, employer match for donations, and time off for volunteer efforts To learn more about working at Dev Technology, visit Working At Dev Technology Group Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Dev Technology Group operates in the following states: AL, AR, AZ, CO, DC, FL, GA, ID, IL, IN, MD, MA, ME, MI, MN, MO, MS, NC, NJ, OH, OR, PA, SC, TN, TX, VA, WV.

Job Description Job Description Business Technology Integrators (BTI) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) with more than 25 years of experience delivering innovative and reliable IT and engineering solutions to the Federal Government. BTI supports mission-critical programs across defense and civilian agencies, with core expertise in cybersecurity, program management, enterprise IT, and technical oversight services. Position Overview The Intermediate AV/VTC Specialist will provide audiovisual, video teleconferencing, collaboration-platform, and multimedia production support for the Equal Employment Opportunity Commission. This position supports the configuration, operation, maintenance, and troubleshooting of AV/VTC systems within a distributed enterprise environment similar in size and complexity to the EEOC. The ideal candidate will have at least six years of relevant experience supporting audiovisual technologies, video production equipment, conferencing platforms, and integrated multimedia systems. The specialist will support live meetings, virtual conferences, presentations, broadcasts, and other mission-related events while ensuring high-quality audio, video, and collaboration services. Key Responsibilities Configure, operate, maintain, and troubleshoot audiovisual, video teleconferencing, and multimedia production equipment. Provide technical and operational support for Microsoft Teams, Zoom, Poly RealPresence, and Cisco video conferencing systems and endpoints. Set up and support virtual meetings, hybrid meetings, executive conferences, presentations, live events, and video teleconferences. Perform pre-event system checks and confirm that cameras, microphones, displays, speakers, conferencing platforms, and network connections are operating correctly. Monitor live meetings and events, quickly identifying and resolving audio, video, connectivity, or equipment issues. Provide video editing and post-production services for recorded meetings, training materials, presentations, and organizational communications. Operate video switchers, professional cameras, recording equipment, and related production technologies. Support camera placement, framing, lighting, recording, and live video production activities. Develop and edit graphics, animations, motion graphics, presentation materials, and other visual media. Perform audio mixing and configure microphones, speakers, amplifiers, and other sound-reinforcement equipment. Configure and support digital signal processing systems used for audio routing, optimization, and control. Operate and maintain AV control systems, projection systems, video walls, digital displays, and LED display technologies. Diagnose and resolve hardware, software, signal-routing, audio-quality, video-quality, and platform-integration issues. Perform preventive maintenance, firmware updates, equipment testing, and routine system inspections. Coordinate with IT, networking, facilities, communications, and event-support personnel to ensure reliable service delivery. Assist end users, presenters, executives, and meeting organizers with the proper use of AV/VTC systems. Maintain equipment inventories, system configurations, maintenance records, technical documentation, and standard operating procedures. Escalate complex technical issues to senior AV/VTC personnel, vendors, or appropriate support teams. Follow EEOC security, accessibility, operational, and information-technology policies and procedures. Minimum Qualifications A minimum of six years of experience providing AV/VTC support in an enterprise or federal environment similar in size, scope, and complexity to the EEOC. Demonstrated experience configuring, operating, maintaining, and troubleshooting AV and multimedia production equipment. Hands-on experience supporting Microsoft Teams, Zoom, Poly RealPresence, and Cisco video conferencing technologies. Experience with video editing, post-production, video switching, and camera operations. Experience with graphic design, animation, and motion-graphics development. Knowledge of professional audio mixing, microphone systems, signal routing, and sound-reinforcement technologies. Experience with digital signal processing, AV control systems, projection systems, video displays, and LED display technologies. Ability to support live, virtual, and hybrid meetings in a time-sensitive environment. Strong troubleshooting, customer-service, organization, and communication skills. Ability to communicate technical information clearly to both technical and nontechnical users. Ability to work independently and collaboratively with IT teams, government personnel, vendors, and other stakeholders. Ability to lift, move, install, and position AV equipment as required. Preferred Qualifications Associate's or bachelor's degree in Audiovisual Technology, Broadcast Production, Communications, Information Technology, Multimedia Production, or a related discipline. Experience supporting a federal government agency or a geographically distributed organization. Experience with enterprise conference rooms, executive briefing rooms, training rooms, auditoriums, and live-event environments. AVIXA Certified Technology Specialist certification, such as CTS, CTS-I, or CTS-D. Manufacturer certifications involving Poly, Cisco, Crestron, Extron, QSC, Biamp, or similar AV technologies. Familiarity with Section 508 accessibility requirements and federal information-security standards. Core Competencies AV/VTC system operation and troubleshooting Microsoft Teams, Zoom, Poly, and Cisco support Live and hybrid meeting support Video editing and post-production Video switching and camera operation Graphic design and motion graphics Professional audio mixing Digital signal processing AV control and projection systems LED and digital display technologies Preventive maintenance and documentation Customer and executive-level support Choose a Description from the Library LocationCountry - Multiple Countries -AfghanistanAland IslandsAlbaniaAlbertaAlgeriaAndorraAngolaAnguillaAntarcticaAntigua and BarbudaArgentinaArmeniaArubaAustraliaAustriaAzerbaijanBahamasBahrainBangladeshBarbadosBelarusBelgiumBelizeBeninBermudaBhutanBoliviaBosnia and HerzegovinaBotswanaBouvet IslandBrazilBritish ColumbiaBritish Indian Ocean TerritoryBrunei DarussalamBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCayman IslandsCentral African RepublicChadChileChinaChristmas IslandCocos (Keeling) IslandsColombiaComorosCongoCongo, The Democratic Republic of theCook IslandsCosta RicaCôte d' IvoireCroatiaCubaCyprusCzech RepublicDenmarkDjiboutiDominicaDominican RepublicEcuadorEgyptEl SalvadorEquatorial GuineaEritreaEstoniaEthiopiaFalkland Islands (Malvinas)Faroe IslandsFederated States Of MicronesiaFijiFinlandFranceFrench GuianaFrench PolynesiaFrench Southern TerritoriesGabonGambiaGeorgiaGermanyGhanaGibraltarGreat BritainGreeceGreenlandGrenadaGuadeloupeGuamGuatemalaGuernseyGuineaGuinea - BissauGuyanaHaitiHeard Island and McDonald IslandsHoly See (Vatican City State)HondurasHong KongHungaryIcelandIndiaIndonesiaIran, Islamic Republic ofIraqIrelandIsle of ManIsraelItalyJamaicaJapanJerseyJordanKazakhstanKenyaKiribatiKorea, Democratic People's Republic ofKosovoKuwaitKyrgyzstanLao People's Democratic RepublicLatviaLebanonLesothoLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacaoMacedonia, Republic ofMadagascarMalawiMalaysiaMaldivesMaliMaltaManitobaMarshall IslandsMartiniqueMauritaniaMauritiusMayotteMexicoMoldovaMonacoMongoliaMontenegroMontserratMoroccoMozambiqueMyanmarNamibiaNauruNepalNetherlandsNetherlands AntillesNew BrunswickNew CaledoniaNew ZealandNewfoundland and LabradorNicaraguaNigerNigeriaNiueNorfolk IslandNorthern Mariana IslandsNorthwest TerritoriesNorwayNova ScotiaNunavutOmanOntarioPakistanPalauPalestinian Territory, OccupiedPanamaPapua New GuineaParaguayPeruPhilippinesPitcairnPolandPortugalPrince Edward IslandPuerto RicoQatarQuebecReunionRomaniaRussian FederationRwandaSaint BarthélemySaint HelenaSaint Kitts and NevisSaint LuciaSaint Martin (French part)Saint Pierre and MiquelonSaint Vincent and the GrenadinesSamoaSan MarinoSao Tome and PrincipeSaskatchewanSaudi ArabiaSenegalSerbiaSeychellesSierra LeoneSingaporeSlovakiaSloveniaSolomon IslandsSomaliaSouth AfricaSouth Georgia and the South Sandwich IslandsSouth KoreaSouth SudanSpainSri LankaSudanSurinameSvalbard and Jan MayenSwazilandSwedenSwitzerlandSyrian Arab RepublicTaiwanTajikistanTanzania, United Republic ofThailandTimor- LesteTogoTokelauTongaTrinidad and TobagoTunisiaTurkeyTurkmenistanTurks and Caicos IslandsTuvaluUgandaUkraineUnited Arab EmiratesUnited KingdomUnited StatesUnited States Minor Outlying IslandsUruguayUzbekistanVanuatuVenezuelaViet NamVirgin IslandsWallis and FutunaWestern SaharaYemenYukonZambiaZimbabwe Street Address Powered by JazzHR ktfBlmglPp

Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training

Job Description Job Description Pay: $50.64 - $83.55 hourly, depending on experience Benefits: Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits Security Clearance: Ability to obtain and maintain a government security clearance if required Are you an experienced cybersecurity professional who thrives on protecting mission-critical systems, managing risk, and ensuring compliance in complex environments? PEMCCO is seeking an Senior Information Security Specialist to lead security, compliance, risk management, and authorization activities supporting government information systems and networks. This role is ideal for a cybersecurity leader who enjoys guiding security initiatives, managing Risk Management Framework (RMF) efforts, assessing risk, and helping organizations maintain strong and compliant security postures. This opportunity is a strong fit for candidates with experience in information assurance, cybersecurity, information security, RMF, Assessment & Authorization (A&A), compliance management, vulnerability management, continuous monitoring, or system security engineering. About PEMCCO PEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve mission success. We offer opportunities to work on impactful projects, collaborate with experienced teams, and contribute to innovative solutions that support critical government operations. Job Overview As a Senior Information Security Specialist, you will serve as a senior cybersecurity professional responsible for supporting the security and compliance of mission-critical information systems. You will work closely with program leadership, engineers, system administrators, developers, and government stakeholders to ensure cybersecurity requirements are implemented and maintained throughout the system lifecycle. This position offers the opportunity to lead cybersecurity initiatives, influence risk management decisions, support authorization activities, and play a critical role in protecting systems that support important government missions. What You'll Do Lead information system security activities throughout the system lifecycle Manage and support Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes Develop, review, and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and related cybersecurity documentation Conduct security assessments, compliance reviews, vulnerability analyses, and risk assessments Evaluate implemented security controls and recommend corrective actions and improvements Identify, document, track, and support remediation of security vulnerabilities and compliance deficiencies Support continuous monitoring activities and maintain awareness of system security posture Coordinate with system owners, engineers, developers, administrators, and stakeholders to ensure security requirements are integrated throughout the system lifecycle Advise leadership on cybersecurity risks, compliance requirements, and security strategies Support incident response activities, security investigations, and remediation efforts Ensure compliance with cybersecurity policies, regulations, standards, and contractual requirements Support cybersecurity audits, inspections, and authorization reviews Prepare security reports, briefings, risk assessments, and recommendations for leadership and customers Provide technical guidance and mentorship to cybersecurity personnel What You Bring Required Qualifications Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field Ten (10) years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field Advanced knowledge of information assurance and cybersecurity principles Advanced knowledge of Risk Management Framework (RMF) processes and security authorization requirements Knowledge of NIST, DoD, and federal cybersecurity policies, standards, and regulations Knowledge of security controls, vulnerability management, risk assessment, and compliance methodologies Ability to identify, assess, and mitigate cybersecurity risks and vulnerabilities Ability to interpret and apply security policies, standards, and procedures Strong analytical, organizational, and problem-solving skills Ability to evaluate security control effectiveness and recommend improvements Strong written and verbal communication skills Ability to communicate effectively with both technical and non-technical audiences Ability to prepare and review security documentation, assessments, and reports Ability to lead cybersecurity efforts and coordinate activities among multiple stakeholders Ability to obtain and maintain a government security clearance if required Must meet applicable DoD 8140 workforce qualification requirements if required by contract Preferred Experience Master's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related discipline Experience supporting Department of Defense or Federal Government programs Experience leading RMF and Assessment & Authorization activities Experience developing and maintaining cybersecurity documentation and authorization packages Experience supporting continuous monitoring and vulnerability management programs Experience conducting cybersecurity assessments, inspections, audits, and compliance reviews Experience mentoring cybersecurity and information assurance professionals Why Join PEMCCO? Support critical government and customer missions through strong cybersecurity leadership Play a key role in protecting information systems, networks, and sensitive data Lead compliance, authorization, and risk management initiatives that impact mission success Collaborate with experienced cybersecurity, engineering, and technology professionals Expand your expertise across multiple cybersecurity disciplines Mentor and support the development of cybersecurity talent Build a rewarding career in a collaborative and mission-focused environment Work Environment Professional office and technical work environments Work may be performed at company facilities, customer locations, or designated project sites as needed Regular use of computers, cybersecurity tools, and communication systems Frequent collaboration with engineers, administrators, program leaders, customers, and stakeholders Benefits Medical Insurance Dental Insurance Vision Insurance Paid Time Off Paid Holidays Employee Assistance Program Additional company-sponsored benefits Apply Today If you're an experienced cybersecurity professional looking to lead security initiatives, support mission-critical systems, and help organizations manage risk and maintain compliance, we encourage you to apply. Join PEMCCO and help protect the systems, networks, and information that support mission success. Equal Opportunity Employer PEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.

Job Description Job Description About Samyang America Samyang America stands as the Gen Z brand, boldly shaping the future of food culture with innovative flavors, viral trends, and unforgettable brand experiences. We don't just create food - we craft moments that spark excitement, inspire connection, and celebrate bold individuality. Our mission is to bring daring, delicious products to the market that resonate deeply with the next generation of food lovers. From iconic spicy noodles to creative new launches, we are driven by passion, creativity, and a commitment to pushing the boundaries of taste and culture. At Samyang America, you'll join a dynamic team that thrives on innovation, collaboration, and a shared love for bold flavor experiences. We value fresh ideas, energetic spirit, and the courage to lead trends rather than follow them. If you're ready to be part of a brand that's more than just food - a brand that moves culture and creates unforgettable moments - join our team today! Position Summary: As a Senior SCM Operations Specialist, you will be responsible for collecting and analyzing supply chain operations data to identify areas for improvement. The position provides coordination and support to the Supply Chain Management (SCM) task force, assists with day-to-day operations, and ensures the effective execution of SCM plans. Key Responsibilities: Strategic data analysis and process engineering Direct the collection and advanced analysis of end-to-end supply chain data Engineer and implement strategic improvements to operational procedures to maximize efficiency and cost-saving Task force leadership and operational oversight Lead SCM task forces for critical projects, providing expert guidance and high-level operational support to ensure organizational goals are met Advanced systems and inventory governance Oversee WMS and SAP data integrity, managing complex EDI workflows and inventory reconciliations Audit daily inputs/outputs to ensure 100% data accuracy across global system Cross-functional execution and integration : Synthesize complex business reports for senior leadership, identifying systemic issues and pitching data-driven solutions for long-term growth Establish and monitor KPIs to track supply chain health E-Commerce and global trade strategy: Strategize manage E-Commerce fulfillment operations and complex intermediary trade flows, ensuring compliance and speed-to-market. Project management: Lead specialized SCM projects and initiatives as a subject matter expert, mentoring junior staff and aligning with department-wide objectives. Requirements: Bachelor's Degree in SCM, Business, Economics, Data Science, or related field preferred (Master's degree or APICS certification preferred) 8 - 10+ years of relevant work experience in SCM English/Korean bilingual speaking required Strong analytical and computer skills (Excel, PowerPoint) Prior experience in supply chain management, logistics operations and/or warehousing, high-level 3PL management. Preferred experience SAP, WMS Demonstrated ability to manage high-stakes deadlines and deliver results with minimal supervision Exceptional interpersonal, organizational, and time-management skills; ability to lead cross-functional teams in a fast-paced environment Willingness to travel in USA under 20% The base salary for this position is between $80,000 - 95,000 per year. Actual compensation will depend on a variety of factors, including qualifications, experience, and location. This position may also be eligible for additional compensation and benefits, including an annual incentive bonus, medical/dental/vision insurance, life insurance, PTO/FTO, and a 401(k) plan with company match. Equal Employment Opportunity Employer: Samyang America is committed to providing equal employment opportunities to all individuals. We do not discriminate in employment decisions on the basis of race, color, religion, sex, national origin, age, disability, genetic information, or any other status protected by applicable federal, state, or local laws.