Jobs at BCMC

Conducts advanced network-centric incident response and threat hunting for government and critical infrastructure environments. Analyzes PCAP, flow records, DNS, proxy, device logs, configurations, and telemetry to identify, reconstruct, and scope intrusions. Recommends containment, eradication, segmentation, hardening, and architectural improvements across enterprise edge devices. Supports onsite and remote investigations, evaluates forensic capabilities, preserves evidence integrity, produces technical and executive reports, and provides expert guidance to incident response teams and stakeholders.

Leads advanced cyber hunt and incident response activities focused on enterprise edge devices and network infrastructure. Analyzes traffic, logs, configurations, topology, and telemetry to identify, reconstruct, contain, and remediate intrusions. Evaluates network forensic capabilities, advises on device hardening and countermeasures, preserves evidence, and produces technical and executive reports. The role supports onsite and remote government engagements, provides technical leadership, and develops CND guidance and standardized incident-handling procedures.

Develops, validates, deploys, and tunes behavioral detections across endpoint, network, identity, cloud, and application telemetry. Conducts threat hunting, adversary analysis, detection testing, false-positive reduction, sensor and data-quality assessments, automation, and detection-as-code practices. Translates incident findings into reusable analytics, technical requirements, and acceptance criteria. Leads cross-functional integration with hunters, responders, intelligence analysts, engineers, and data scientists while mentoring analysts and maintaining detection engineering standards.

Leads ServiceNow agile requirements development and management for an O&M and sustainment program. Facilitates customer and product-owner engagements, defines use cases, epics, user stories, requirements, acceptance criteria, and technical specifications. Supports scope definition, effort estimation, backlog management, and regression-test identification. Advises stakeholders on ServiceNow platform configuration, including ITSM+, HAM, and WSD modules, while ensuring solutions align with mission needs.

Develops and executes ServiceNow test cases, procedures, scripts, and regression suites within an Agile DoD program. Collaborates with architects, developers, and product owners to validate requirements, resolve defects, support Government Acceptance Testing, and address production issues. Maintains testing documentation and uses ServiceNow test management. Requires ServiceNow certifications, REST API integration experience, Agile testing expertise, and familiarity with HAM or WSD modules.

Monitors and analyzes network activity to detect intrusions, anomalous behavior, and malicious cyber activity. Responsibilities include validating alerts, performing packet-level and event-correlation analysis, reconstructing attacks, conducting trend analysis, documenting incidents, and developing detection signatures. The role supports cyber defense operations, incident response, digital forensics, and network threat investigations in a federal environment.

Perform hardware and firmware reverse engineering of compromised OT and ICS devices, network-edge systems, and embedded platforms. Investigate malware, implants, backdoors, vulnerabilities, proprietary protocols, and exploitation risks; support active cyber forensics and incident response. Develop hardware-forensics procedures, document findings and countermeasures, train analysts, collaborate with engineering and research teams, and provide expert consultation on embedded-device security and critical infrastructure threats.

Develop and maintain full-stack web applications, including front-end and back-end components, automated testing, authentication, integrations, and secure coding. Manage CI/CD pipelines, cloud deployments, monitoring, version control, and technical documentation. Collaborate with cross-functional teams, troubleshoot defects, mentor developers, and define performance, scalability, availability, manageability, and security requirements for large-scale government cybersecurity programs.