Jobs at Solutions³ LLC

Support government incident response by producing and reviewing cybersecurity documentation (SOPs, CONOPS, action reports, briefings). Coordinate with incident teams, maintain records, edit to agency style, and produce clear technical narratives under time pressure.

Lead use-case identification and requirements gathering for technology integration pilots supporting cyber incident response. Facilitate stakeholder workshops, translate mission needs into capability requirements, develop business cases and metrics, manage requirements traceability, support governance and leadership briefings, document workflows, and ensure pilot scope, evaluation, and transition decisions.

Lead and coordinate cyber incident investigations: triage, scope determination, mitigation planning, and service restoration. Monitor threats, analyze logs/alerts, document incidents through resolution, and recommend layered defense improvements while supporting assigned shifts.

Perform on-site cyber incident response and investigations: characterize breaches, prioritize incidents using NCCIC scoring, analyze alerts and log data, develop mitigation plans, coordinate cross-team information, track incidents to resolution, and provide shift-based support to restore services.

Support government incident response by researching, evaluating, and managing cyber technology solutions from submission through capability delivery. Conduct hands-on testing, document technical requirements, coordinate pilots and transitions, maintain technology inventories, and engage customers to align recommendations with mission needs.

Lead use case identification and requirements gathering for technology integration pilots supporting government incident response. Facilitate stakeholder workshops, translate mission needs into capability requirements, develop business cases and metrics, manage requirements traceability, coordinate technical and operational teams, support governance and leadership alignment, and ensure disciplined pilot scope and transition decisions.

Design and implement automation for ML integration and cyber incident response: data ingestion pipelines, malware analysis automation, LLM/Databricks/Bedrock integrations, API and data integration automation, feature engineering, monitoring, scaling to production, and documentation.

Perform on-site incident response for civilian government and critical assets: investigate breaches, characterize severity, develop mitigation plans, analyze logs, track incidents from detection to resolution, coordinate across teams, and provide shift-based support using CND methodologies and threat actor TTP knowledge.

Lead and coordinate on-site incident response investigations, characterize breach severity, develop mitigation plans, manage case/ticketing records, brief leadership, and support threat/vulnerability and network security monitoring to restore services and prioritize responses.

Lead use-case identification, gather and document requirements for technology integration pilots, facilitate stakeholder workshops, translate mission needs into capability requirements, define pilot success metrics, manage requirements traceability, support governance and leadership alignment, and drive lessons-learned and continuous improvement for cybersecurity incident response initiatives.

Lead investigation and triage of cyber incidents, characterize severity, develop mitigation and restoration plans, monitor threat sources, analyze alerts and logs, and document incidents from detection through resolution while providing shift coverage.

Provide cyber technology research and case management for government incident response: track/manage cases, research and evaluate commercial and open-source solutions, perform hands-on testing, document technical requirements, develop mitigation plans, coordinate capability implementation, maintain technology inventories, and engage requesters to align solutions with mission needs.

Support government incident response by researching, evaluating, and managing cybersecurity technologies. Track cases from submission to capability delivery, perform hands-on evaluations, coordinate pilots and integrations, document requirements, advise stakeholders, and assist restoration and mitigation for mission-critical systems.

Lead and coordinate on-site cyber incident investigations, triage and characterize breaches, recommend mitigations, analyze alerts and logs, document incidents from detection through resolution, and provide shift-based operational support to restore services.

Develop and implement automation for ML/LLM integrations and data pipelines to support incident response and automated malware analysis. Build ingestion, transformation, monitoring, API integrations, and scale automation from pilot to production while ensuring data quality and documenting solutions.

Perform advanced hardware and firmware reverse engineering on OT/ICS and network-edge devices, extract embedded malware, analyze proprietary hardware and protocols, develop forensic SOPs, train analysts, support live incident response, and collaborate on microelectronics exploitation and emulation research.

Perform frontline DFIR and proactive network hunting: collect and analyze network intrusion artifacts (PCAP, metadata), assess topologies and device configurations, coordinate incident response teams, produce CND guidance and reports, brief stakeholders, and advise on remediation during onsite engagements.

Perform network-focused DFIR and proactive hunting: collect and analyze network artifacts (PCAP, logs), assess topologies and device integrity, support onsite incident response, recommend mitigations, and coordinate with government leads during investigations.

Support government cyber incident response by investigating breaches, developing mitigations, restoring services, managing lab infrastructure, administering systems (Linux/Unix, MacOS/iOS), supporting VPN/VDI, troubleshooting storage and networking, creating SOPs, and providing user helpdesk and account management.

Provide frontline DFIR and proactive network hunting: analyze network traffic, validate and escalate alerts, perform packet-level and trend analysis, develop signatures, reconstruct attacks, and produce reports to support mission-critical cyber defense.