Jobs at BCMC

The Incident Manager III is responsible for identifying and responding to cyber threats, enhancing vulnerability management efforts, and collaborating with stakeholders to improve cyber security intelligence capabilities.

The Cyber Network Defense Analyst monitors network activity, analyzes data for threats, and recommends measures to protect systems. Responsibilities include event correlation, trend analysis, reporting, and developing cyber defense tools and signatures.

Support incident response for cyber-attacks, investigate breaches, develop mitigation plans, track incidents, and collaborate with teams.

Lead end-to-end cloud infrastructure operations for rapid-deploy engagement kits supporting cyber incident response and threat hunting. Oversee provisioning, decommissioning, scaling, incident troubleshooting, security compliance, reporting, license management, and stakeholder liaison while driving continuous improvement.

Provide technical and logistical coordination for cloud-based engagement kits supporting cyber incident response. Act as liaison between operational teams and government stakeholders to manage requests, provisioning, tracking, reporting, logistics, inventory, SLAs, and real-time operations support throughout engagement lifecycles.

Design, build, and maintain CI/CD pipelines and infrastructure-as-code for rapid, secure cloud engagement kits. Automate provisioning, scaling, monitoring, and security hardening; manage source control; support troubleshooting during operations and implement compliance and change management processes to ensure repeatable, mission-ready deployments.

Design, optimize, and document secure, scalable cloud engagement kit architectures for rapid cyber incident response. Build IaC templates, automation frameworks, and CI/CD integrations; implement security controls; customize deployments for mission needs; perform architecture reviews and troubleshoot during active operations.

Manage deployment, maintenance, and monitoring of Bespin cloud engagement kits for cyber incident response. Apply patches and security configs, monitor performance, troubleshoot during missions, manage cloud resources and access, maintain documentation, support decommissioning and archival, and implement continuous monitoring to ensure secure, available environments.

Lead end-to-end technology identification and workflow mapping for CISA threat hunt operations. Produce visual process flows, swimlanes, dependency maps; facilitate stakeholder workshops; document current and future-state workflows; identify gaps and recommend mitigations to support incident response, compliance, and operational readiness.

Provide expert hardware reverse engineering and forensic analysis of OT/ICS and edge devices. Reverse engineer firmware, extract embedded malware, analyze proprietary hardware and protocols, develop mitigation procedures and SOPs, enhance emulation capabilities, train analysts, and support active incident investigations and research into emerging hardware threats.

Provide expert hunt and incident response support for DHS HIRT: lead investigations, analyze host/network data, produce technical and executive reports, recommend mitigations, guide containment/eradication, and document findings for knowledge sharing.

Design and implement automated data pipelines, ETL, and integration workflows to support malware analysis, AMA platform development, AI/ML data preparation, monitoring, and scaling automation from pilot to production while ensuring data quality and documenting solutions.

Lead security controls implementation and risk assessment for pilot and production technology integrations. Ensure federal compliance (NIST, FISMA, RMF, FedRAMP), coordinate authorizations, define security boundaries, assess readiness for scale, support continuous monitoring, provide guidance to development and operations, and document controls and evidence aligned with CISA Zero Trust priorities.

Support federal incident response by identifying use cases, gathering and documenting requirements, coordinating stakeholders, defining success metrics, developing business cases, and managing pilot technology integrations. Facilitate workshops, map workflows for automation, maintain requirements traceability, support governance and leadership briefings, and drive lessons learned and transition decisions to align technology insertions with mission priorities.

Manage cyber incidents by investigating breaches, correlating data, recommending security practices, and supporting restoration activities for government clients.

Lead Linux Systems Administrator managing RHEL environments and providing technical support for cybersecurity initiatives. Responsible for Ansible automation, Splunk monitoring, and overseeing lab operations.

The Senior ServiceNow Developer will design, build, and customize ServiceNow applications, ensuring code quality and support for customer environments, while collaborating with other technical resources.

The Senior ServiceNow Technical Program Manager oversees DoD programs, leading a team to manage ServiceNow FSM implementations, ensuring project delivery, quality assurance, and strategic planning.