Jobs at BCMC

The Incident Manager III is responsible for identifying and responding to cyber threats, enhancing vulnerability management efforts, and collaborating with stakeholders to improve cyber security intelligence capabilities.

Conduct capability-based research and hands-on evaluations of commercial and open-source cyber technologies; manage cases from submission through capability delivery; coordinate pilots and production transitions; document technical requirements, mitigation plans, and change control; advise customers and maintain technology inventories relevant to mission needs.

Lead requirements and use-case identification for cybersecurity technology integration pilots. Facilitate stakeholder workshops, document workflows, define success criteria, develop business cases, manage traceability, and coordinate technical and operational teams to support incident response pilots and transitions to production.

The Cyber Network Defense Analyst monitors network activity, analyzes data for threats, and recommends measures to protect systems. Responsibilities include event correlation, trend analysis, reporting, and developing cyber defense tools and signatures.

Support incident response for cyber-attacks, investigate breaches, develop mitigation plans, track incidents, and collaborate with teams.

Develop and deploy automation and ML integration solutions for government incident response: build data pipelines, malware automation/detonation workflows, AI/LLM integrations, API integrations, feature engineering automation, monitoring, and scale pilot systems to production while ensuring data quality and documentation.

Design, build, and maintain CI/CD pipelines and infrastructure-as-code for rapid, secure cloud engagement kits. Automate provisioning, scaling, monitoring, and security hardening; manage source control; support troubleshooting during operations and implement compliance and change management processes to ensure repeatable, mission-ready deployments.

Provide expert hardware reverse engineering and forensic analysis of OT/ICS and edge devices. Reverse engineer firmware, extract embedded malware, analyze proprietary hardware and protocols, develop mitigation procedures and SOPs, enhance emulation capabilities, train analysts, and support active incident investigations and research into emerging hardware threats.

Design and implement automated data pipelines, ETL, and integration workflows to support malware analysis, AMA platform development, AI/ML data preparation, monitoring, and scaling automation from pilot to production while ensuring data quality and documenting solutions.

Manage deployment, maintenance, and monitoring of Bespin cloud engagement kits for cyber incident response. Apply patches and security configs, monitor performance, troubleshoot during missions, manage cloud resources and access, maintain documentation, support decommissioning and archival, and implement continuous monitoring to ensure secure, available environments.

Manage cyber incidents by investigating breaches, correlating data, recommending security practices, and supporting restoration activities for government clients.

Lead Linux Systems Administrator managing RHEL environments and providing technical support for cybersecurity initiatives. Responsible for Ansible automation, Splunk monitoring, and overseeing lab operations.

Design, build, customize, and support ServiceNow applications and integrations (HRSD, ECP, Integration Hub, Virtual Agent, Performance Analytics). Implement customizations, integrations (SSO/LDAP/mid-server/Web Services), participate in SDLC, document procedures, and assist admins with incident resolution in a cleared federal environment.

Manage and triage cyber incidents for civilian government agencies: investigate breaches, determine scope and impact, recommend mitigations, track incidents to resolution, analyze logs, and maintain threat awareness using CND practices and relevant standards.