Jobs at EOA Technologies, LLC

Conduct continuous research on ICS/SCADA threats and threat actors, analyze and enrich diverse data sources, prioritize vulnerabilities, create SIEM queries/dashboards, analyze PCAPs in Wireshark, write Zeek/Snort signatures, collaborate with development teams on tooling requirements, and document and present findings to technical and non-technical stakeholders.

Create and maintain technical documentation (user guides, SOPs, training materials, requirements, briefings), build templates, manage document workflows, and coordinate accuracy with SMEs, engineers, and analysts to support cybersecurity threat defense.

Develop and execute automated test and evaluation plans for custom software in a classified cybersecurity program. Coordinate T&E tasks, build and maintain scalable test scripts, manage regression testing, document procedures, integrate automation into development, and mitigate program risk through alternative actions and continual risk reassessment.

Perform continuous research and analysis of emerging cyber threats and threat actors, correlate diverse data sources, and prioritize vulnerabilities to protect critical U.S. systems. Operate and manage SIPRNet and cross-domain solutions, use XKS and SIEM tools (Elastic/Splunk) to identify atypical events, document findings, produce technical reports, and present results to technical and non-technical stakeholders while ensuring compliance with RMF, NIST, and ICD 503 standards.

Perform deep-dive network protocol and packet analysis to identify cyber criminal or foreign intelligence activity; develop detection strategies, create SIEM visualizations, write signatures (Zeek/Snort), document findings, and brief technical and non-technical stakeholders.

Design and prototype statistical, graph-based, and machine learning algorithms to analyze disparate datasets, validate analytics, produce visualizations, and collaborate with engineers and threat analysts to operationalize scalable solutions in a cybersecurity mission environment.

Perform advanced cyber threat analysis and intelligence to identify APTs and adversary activity, analyze network/PCAP data, author threat reports, create detections/signatures, build SIEM dashboards, and brief technical and executive stakeholders to support defensive cyber operations and counterintelligence.

Conduct penetration testing and red team activities to identify vulnerabilities and adversary TTPs. Analyze logs and PCAPs, build SIEM visualizations, write signatures, produce detailed threat intelligence reports, collaborate with developers and IC analysts, and present remediation recommendations to technical and non-technical stakeholders.

Conduct research and analysis on emerging cyber threats, create detection strategies, develop SIEM queries and dashboards, analyze PCAP/TCP-IP traffic, write Zeek/Snort signatures, document findings, and present results to technical and non-technical stakeholders to protect critical systems.

Support a U.S. Government customer by managing and maintaining on-premises and AWS server infrastructure. Administer Linux (Amazon Linux 2023, RHEL 8/9) and Windows Server (2016/2022), Active Directory, DNS, and Group Policy. Automate and configure systems using Salt, Bash, Python, and Ansible. Position requires an active TS/SCI with Polygraph, IAT Level 2 certification, and extensive systems engineering experience.

Lead design, deployment, and sustainment of enterprise Azure and Microsoft 365 environments, including hybrid/multi-region architecture, large-scale migrations, IaC (ARM/Bicep/Terraform/PowerShell DSC), governance, cost optimization, identity/security integrations, tier-3 support, and mentoring junior engineers.

Support a U.S. government customer handling Tier 1 help desk and Tier 2 escalations. Configure and manage UNIX/Linux and Windows systems, implement enhancements to improve reliability and performance, and use scripting to automate tasks. Maintain security posture per clearance and certification requirements.

Develop, maintain, and enhance scalable software and data pipelines; design, train, test, and deploy ML models (PyTorch, scikit-learn); integrate model outputs into Computer Network Defense systems; use Docker/Kubernetes, GitOps, and AWS (EC2, S3, RDS); document processes and support transition to production.

Lead Agile cross-functional teams to design, deploy, and maintain cloud and on-premises systems. Administer Windows Server 2022, Windows 10/11, and Linux distributions. Architect and manage AWS environments and complex cloud networking. Provide Tier 3 systems and security engineering support for Splunk-based SIEM.

Design, develop, implement, and maintain database structures and tooling. Lead database parsing and loading software, create workflows, troubleshoot optimization and scaling, and support Python-based REST endpoints and microservices to expose data models to UIs.

Develop, test, deploy, and sustain web-based single-page applications and dashboards using Angular (v14+). Integrate with REST endpoints, parse JSON, design UI mockups, and enhance interfaces with CSS. Provide UI technical leadership and support automation and continuous monitoring efforts for a U.S. Government customer.

Support a U.S. Government customer by designing, coding, and modifying software, implementing data interfaces and high-performance algorithms, analyzing system performance, producing technical documentation and tests, and collaborating with team members and customers to deliver solutions.

Develop, test, deploy, and sustain Python-based REST endpoints, microservices, and data model management using Django/Flask. Integrate with MariaDB, MongoDB, and PostgreSQL, produce JSON payloads for UIs, debug and modify software, create queries, document systems, and improve development processes to support a government Secure the Enterprise initiative.

Develop, maintain, and run Pig and PySpark analytics; review data ingest tickets and merge requests; ensure reliable, accurate data delivery and investigate data ingestion issues; support automation and continuous monitoring for system security evaluation lifecycle.

Provide administration and support for Windows Server 2019/2022 and Windows 10/11 clients, manage AD/DNS/Certificate Authorities, administer RHEL/Amazon Linux in AWS, deploy and maintain AWS and on-prem environments, and automate provisioning and configuration using SaltStack, Ansible, Bash and Python.