Jobs at BCMC

Lead requirements and use-case identification for cybersecurity technology integration pilots. Facilitate stakeholder workshops, document workflows, define success criteria, develop business cases, manage traceability, and coordinate technical and operational teams to support incident response pilots and transitions to production.

Conduct capability-based research and hands-on evaluations of commercial and open-source cyber technologies; manage cases from submission through capability delivery; coordinate pilots and production transitions; document technical requirements, mitigation plans, and change control; advise customers and maintain technology inventories relevant to mission needs.

The Cyber Network Defense Analyst monitors network activity, analyzes data for threats, and recommends measures to protect systems. Responsibilities include event correlation, trend analysis, reporting, and developing cyber defense tools and signatures.

Lead ServiceNow requirements gathering and user story creation, produce process flows, manage backlogs, develop and execute test plans/cases (including ATF), validate REST API integrations, execute tests, resolve defects, support sprints and production/O&M, and maintain test documentation using ServiceNow test management.

Develop and deploy automation and ML integration solutions for government incident response: build data pipelines, malware automation/detonation workflows, AI/LLM integrations, API integrations, feature engineering automation, monitoring, and scale pilot systems to production while ensuring data quality and documentation.

Design, build, and maintain CI/CD pipelines and infrastructure-as-code for rapid, secure cloud engagement kits. Automate provisioning, scaling, monitoring, and security hardening; manage source control; support troubleshooting during operations and implement compliance and change management processes to ensure repeatable, mission-ready deployments.

Provide expert hardware reverse engineering and forensic analysis of OT/ICS and edge devices. Reverse engineer firmware, extract embedded malware, analyze proprietary hardware and protocols, develop mitigation procedures and SOPs, enhance emulation capabilities, train analysts, and support active incident investigations and research into emerging hardware threats.

Design and implement automated data pipelines, ETL, and integration workflows to support malware analysis, AMA platform development, AI/ML data preparation, monitoring, and scaling automation from pilot to production while ensuring data quality and documenting solutions.

Lead and manage complex IT/PKI programs, coordinating schedules, teams, and stakeholders. Provide deep PKI technical guidance, ensure compliance with security and regulatory requirements, navigate military security boundaries, oversee AD/LDAP replication and certificate issuance dependencies, and drive IT modernization including post-quantum transition.

Manage cyber incidents by investigating breaches, correlating data, recommending security practices, and supporting restoration activities for government clients.

Lead Linux Systems Administrator managing RHEL environments and providing technical support for cybersecurity initiatives. Responsible for Ansible automation, Splunk monitoring, and overseeing lab operations.

Design and optimize secure, scalable AWS cloud architectures to support incident-response operations. Lead migrations from on-prem to cloud, develop IaC and automation frameworks, implement security controls, collaborate on CI/CD pipelines, perform architecture reviews, and support troubleshooting during active operations.

Design, build, customize, and support ServiceNow applications and integrations (HRSD, ECP, Integration Hub, Virtual Agent, Performance Analytics). Implement customizations, integrations (SSO/LDAP/mid-server/Web Services), participate in SDLC, document procedures, and assist admins with incident resolution in a cleared federal environment.

Manage and triage cyber incidents for civilian government agencies: investigate breaches, determine scope and impact, recommend mitigations, track incidents to resolution, analyze logs, and maintain threat awareness using CND practices and relevant standards.