Jobs at Solutions³ LLC

Provides onsite cyber incident response for government agencies and critical asset owners. Responsibilities include monitoring alerts and threat sources, analyzing logs, identifying infection causes and vulnerabilities, applying threat actor TTPs, prioritizing incidents, researching mitigations, and tracking cases through resolution. The role requires shift support and collaboration across locations, with an active TS/SCI clearance and DHS Suitability.

Maintain and support lab network infrastructure for government cyber incident response operations. Design and configure routers, switches, firewalls, VPNs, storage, and virtual desktop environments; troubleshoot enterprise network and storage issues; assess vulnerabilities; enforce access controls; monitor performance; maintain backups; integrate technologies; and develop SOPs, documentation, and network diagrams.

Designs and optimizes secure, scalable AWS cloud architectures for rapidly deployable cyber incident response and threat hunting engagement kits. Responsibilities include infrastructure-as-code development, automation, security control implementation, CI/CD collaboration, architecture reviews, documentation, cloud service evaluation, and operational troubleshooting. The role requires strong AWS expertise, cloud security knowledge, scripting skills, and the ability to support dynamic mission requirements for a U.S. Government customer.

Conduct network-based cyber defense analysis, including traffic and packet analysis, IDS alert validation, event correlation, incident documentation, threat detection, trend reporting, attack reconstruction, OS fingerprinting, and signature development. The role supports continuous monitoring and incident response using host-, network-, and cloud-based cybersecurity tools.

Performs network forensics and cybersecurity incident response investigations for government and critical infrastructure customers. Analyzes network traffic, intrusion artifacts, device integrity, topology, and anomalous activity to identify threats, characterize attacks, recommend remediation, and develop Computer Network Defense guidance and reports. Supports onsite investigations, customer coordination, threat analysis, intrusion tracking, forensic collection, and incident handling.

Designs, builds, secures, and maintains enterprise network and lab infrastructure for government cyber incident response. Responsibilities include investigating vulnerabilities, configuring routers, switches, firewalls, VPNs, and virtual environments; troubleshooting network and storage issues; implementing access controls and backups; monitoring performance; integrating technologies; and developing security procedures and SOPs.

Lead Linux systems administration across development, laboratory, and production environments supporting cybersecurity operations. Manage RHEL, Splunk, Ansible, virtualization, storage, patching, troubleshooting, security controls, STIG compliance, access management, monitoring, dashboards, alerts, backups, and automation. Support deployment of new technologies, develop procedures and policies, manage project components, and improve infrastructure security, performance, and reliability.

Develop and maintain CI/CD pipelines, infrastructure-as-code, cloud automation, source control, monitoring, and compliance automation for mission-critical AWS deployments. Build scripts and tools, manage containerized environments, troubleshoot active operations, optimize performance, and collaborate with architects and administrators to ensure secure, scalable, repeatable engagement kit deployments.

Develop, review, edit, and maintain cybersecurity technical communications, operational procedures, plans, action reports, SOPs, CONOPS, work instructions, meeting minutes, charts, and executive briefings. Collaborate with incident management teams, cyber analysts, engagement leads, and subject matter experts to produce concise, accurate deliverables under tight deadlines. The role is fully onsite, Monday through Friday, and supports U.S. Government cyber incident response operations.

Monitor and analyze network activity to detect suspicious behavior, intrusions, and malicious cyber activity. Perform packet-level analysis, event correlation, incident documentation, trend analysis, attack reconstruction, and IDS alert validation. Develop and deploy detection signatures, identify exploited weaknesses, and provide cyber defense reporting and escalation for government and critical infrastructure environments.

Analyze and disseminate cyber threat intelligence to support vulnerability management and operational decisions. Identify emerging threats, vulnerabilities, trends, and intelligence gaps; recommend countermeasures and collection requirements. Integrate classified and unclassified sources, produce analytical reports, brief stakeholders, and collaborate across agencies and locations. Improve threat intelligence capabilities through training, research, and knowledge-base development.

Investigates and triages cyber incidents for U.S. Government agencies and critical asset owners. Responsibilities include correlating incident data, assessing scope and impact, identifying attack methods and vulnerabilities, analyzing alerts and log data, developing mitigation plans, researching resolution steps, tracking incidents through closure, coordinating with stakeholders, and supporting assigned shifts.

Develop and sustain software applications and integrations for a mission-critical government network operations environment. Responsibilities include coding, troubleshooting, cloud and on-premise development, production support, ETL workflows, containerized environments, RESTful services, automated testing and deployments, infrastructure as code, COTS/GOTS integration, documentation, and customer demonstrations. The role requires Python and Linux experience, collaboration across locations, a bachelor’s degree or equivalent relevant experience, U.S. citizenship, and an active Secret clearance with eligibility for TS/SCI.

Analyze network traffic, alerts, and packet data to detect, investigate, and reconstruct cyberattacks. The role validates IDS alerts, performs event correlation and trend analysis, documents incidents, develops mitigation plans, monitors cyber defense activity, identifies exploited weaknesses, and assists with creating detection signatures. It requires active TS/SCI clearance, U.S. citizenship, DHS suitability, relevant cyber defense experience, and either a related bachelor’s degree or extensive network investigation experience.

Develop and sustain cloud engagement kits by designing software, building CI/CD pipelines, managing source control, and implementing infrastructure as code. Responsibilities include application development, integration, testing, troubleshooting production issues, evaluating COTS products, transforming data, and improving development standards. The role requires operational Python experience, containerization knowledge, customer interaction skills, U.S. citizenship, an active Secret clearance, and onsite availability near Arlington, Virginia.

Manages a cybersecurity lab supporting government incident response and mission infrastructure. Responsibilities include Linux and cross-platform systems administration, configuration management, patching, troubleshooting, security monitoring, access control, storage replication, virtualization, and containerized application deployment. Develops automation using OpenShift, Ansible, Docker, Kubernetes, Podman, and Satellite; supports technology implementation, documentation, SOPs, and infrastructure improvements. Requires an active Secret clearance, U.S. citizenship, DHS suitability, and relevant systems administration experience.

Conducts network-based cyber defense, digital forensics, and incident response for government and critical-infrastructure customers. Investigates anomalous and malicious network activity, analyzes traffic and PCAP data, collects intrusion artifacts, assesses network topology and device integrity, reconstructs attacks, tracks intrusions, and advises on remediation. Supports onsite engagements, customer interfacing, incident-response coordination, threat hunting, and security best-practice recommendations.

Manage and support a Technical Engagement Network cybersecurity lab, including Linux and multi-platform systems administration, configuration management, patching, monitoring, troubleshooting, storage replication, access controls, and containerized application deployment. Develop automation using OpenShift, Ansible, Docker, Kubernetes, Podman, and Satellite; integrate applications; maintain security and performance; support incident response capabilities; and contribute to lab procedures, policies, and project delivery.

Supports cyber threat intelligence and vulnerability management by gathering, analyzing, and disseminating classified and unclassified intelligence. Identifies emerging threats, vulnerabilities, and intelligence gaps; recommends countermeasures; produces analytical reports; briefs stakeholders; and improves organizational capabilities through training and research. The role requires collaboration across agencies, use of Intelligence Community tools and OSINT sources, and analysis of cyber intelligence to establish operational priorities.

Provides cyber network defense, digital forensics, and incident response for government and critical infrastructure environments. Investigates anomalous and malicious network activity, collects and analyzes PCAP and other intrusion artifacts, assesses network topologies and device integrity, reconstructs attacks, correlates threats, and advises on remediation. The role supports onsite engagements, customer interaction, incident response coordination, proactive threat hunting, and security recommendations.