Jobs at BCMC

Perform hardware and firmware reverse engineering of compromised OT and ICS devices, network-edge systems, and embedded platforms. Investigate malware, implants, backdoors, vulnerabilities, proprietary protocols, and exploitation risks; support active cyber forensics and incident response. Develop hardware-forensics procedures, document findings and countermeasures, train analysts, collaborate with engineering and research teams, and provide expert consultation on embedded-device security and critical infrastructure threats.

Monitors and analyzes network traffic, alerts, and cyber defense data to detect intrusions, anomalies, and malicious activity. Performs event correlation, packet-level analysis, trend analysis, attack reconstruction, OS and application fingerprinting, and signature development. Documents and escalates incidents, recommends containment and eradication measures, prepares reports and procedures, and evaluates cybersecurity tools and services. Supports DHS incident response and proactive threat hunting activities.

Develop and maintain full-stack web applications, including front-end and back-end components, automated testing, authentication, integrations, and secure coding. Manage CI/CD pipelines, cloud deployments, monitoring, version control, and technical documentation. Collaborate with cross-functional teams, troubleshoot defects, mentor developers, and define performance, scalability, availability, manageability, and security requirements for large-scale government cybersecurity programs.

Maintain and secure Linux systems supporting a classified Cyber Threat Intelligence platform. Responsibilities include architecture, hardening, patching, lifecycle maintenance, backup and recovery, PostgreSQL troubleshooting, cloud integration across AWS, Azure, and Google Cloud, automation, performance tuning, metrics, vendor coordination, and enterprise patching standards. The role requires active TS/SCI clearance, U.S. citizenship, DHS suitability eligibility, and extensive Linux administration experience.

Leads use-case identification, requirements gathering, stakeholder workshops, technology integration planning, business-case development, success-criteria definition, governance support, requirements traceability, communications, leadership briefings, and lessons learned for federal cybersecurity initiatives.

Supports a DoD ServiceNow Agile program by gathering and documenting requirements, creating user stories and acceptance criteria, developing and executing test plans, managing defects, validating configurations and integrations, supporting Agile ceremonies, and resolving production issues. The role requires ServiceNow testing and REST API integration experience, client collaboration, backlog management, and maintenance of test documentation.

Conducts cyber incident triage, investigation, documentation, and resolution for government agencies and critical asset owners. Responsibilities include analyzing alerts and log data, identifying incident causes and attack vectors, correlating trends, prioritizing impacts, recommending layered defenses, researching mitigations, monitoring threat intelligence, and coordinating incidents through final resolution. The role requires active TS/SCI clearance, U.S. citizenship, cybersecurity incident management experience, knowledge of federal incident-reporting standards, and strong understanding of vulnerabilities, attack stages, system administration, and security hardening.

Design, implement, maintain, and secure lab network infrastructure supporting government cyber incident response. Configure routers, switches, firewalls, VPNs, virtual desktop environments, and storage systems; troubleshoot enterprise network and storage issues; assess vulnerabilities; enforce access controls; monitor performance; maintain backups, documentation, SOPs, and network diagrams; and support infrastructure integration and optimization.