Jobs at Solutions³ LLC

Develop, validate, deploy, and tune behavioral detections for advanced threats across endpoint, network, identity, cloud, and application telemetry. Conduct threat hunting, analyze adversary behavior, improve detection fidelity, automate investigative workflows, assess sensor and data gaps, and map coverage to MITRE ATT&CK. Lead detection testing, documentation, governance, technical requirements, exercises, mentoring, and collaboration with incident responders, intelligence analysts, data scientists, and platform engineers.

Provides network forensics, threat hunting, and onsite incident response for government and critical infrastructure cyberattacks. Investigates anomalous and malicious network activity, collects and analyzes PCAP and intrusion artifacts, assesses network configurations and device integrity, reconstructs attacks, supports remediation, and develops incident reports and defense guidance. Requires strong networking, SIEM, CND, and forensic analysis expertise, plus an active TS/SCI clearance and U.S. citizenship.

Develops, validates, deploys, and tunes behavioral detections for threat hunting across endpoint, network, identity, cloud, and application telemetry. Translates threat intelligence and incident findings into production analytics, queries, automation, and sensing requirements. Tests detection effectiveness, manages false positives, assesses data quality, maintains detection-as-code practices, and coordinates with hunters, responders, intelligence analysts, engineers, and data scientists. Provides technical leadership, mentors analysts, supports cyber exercises, and improves scalable defensive cyber operations.

Performs cyber network defense, intrusion detection, threat hunting, digital forensics, incident response, packet-level analysis, event correlation, and network traffic monitoring. The role investigates suspicious activity, validates IDS alerts, reconstructs attacks, identifies exploited weaknesses, develops detection signatures, documents incidents, and prepares cyber defense trend and daily activity reports.

Leads strategic adoption of AI for cybersecurity, including identifying use cases, evaluating AI technologies, developing roadmaps, managing cross-functional projects, and ensuring security, privacy, and compliance. The role bridges AI, security operations, threat intelligence, incident response, and executive stakeholders while overseeing pilots, implementation plans, metrics, training, and change management.

Supports cyber threat intelligence and vulnerability management by gathering, analyzing, and disseminating intelligence from classified, unclassified, open-source, and dark web sources. Identifies emerging threats and vulnerabilities, recommends countermeasures, produces analytical reports, conducts briefings, coordinates with stakeholders, and defines intelligence collection requirements. The role requires active TS/SCI clearance, U.S. citizenship, DHS suitability, and relevant cybersecurity or incident management experience.

Analyzes network traffic, alerts, and security events to detect intrusions, anomalies, and malicious activity. Performs packet-level analysis, event correlation, incident documentation, trend reporting, attack reconstruction, OS and application identification, and IDS alert validation. Supports signature development and deployment, network monitoring, incident handling, and cyber defense reporting. The role requires an active TS/SCI clearance and focuses on onsite cyber network defense operations.

Provides first-level IT help desk support for a government lab, including user onboarding, account management, ticketing, asset and inventory management, equipment provisioning, troubleshooting, VPN and virtual desktop support, MacOS/iOS support, network maintenance, and NetApp storage operations. The role also contributes to technical procedures, SOPs, infrastructure updates, and process improvements.

Performs cyber network defense, digital forensics, incident response, threat hunting, and network traffic analysis for a U.S. Government customer. Investigates anomalous and malicious activity, collects and analyzes intrusion artifacts and PCAP data, assesses network configurations and device integrity, reconstructs attacks, supports remediation, and maintains cyber threat intelligence capabilities. The role requires onsite work, collaboration across locations, U.S. citizenship, an active TS/SCI clearance, and substantial network investigations experience.

Develop and maintain full-stack web applications, including front-end and back-end components, testing, authentication, integrations, performance optimization, and troubleshooting. Build CI/CD pipelines, deploy and monitor cloud applications, manage version control, document technical processes, and collaborate across development and infrastructure teams. Apply secure coding practices, encryption, credential management, and robust logging. Lead software development teams and contribute to scalable, secure mission-critical systems.

Perform advanced hardware and firmware reverse engineering on OT/ICS and network-edge devices, extract embedded malware, analyze proprietary hardware and protocols, develop forensic SOPs, train analysts, support live incident response, and collaborate on microelectronics exploitation and emulation research.

Performs frontline cyber threat triage and incident assessment, analyzing IOCs, malware artifacts, network data, and threat intelligence. Evaluates severity and impact, enriches indicators, prepares actionable reports, routes incidents to appropriate government and interagency teams, maintains ticket documentation, monitors adversary activity, and supports operational briefings, playbooks, and partner coordination.

Performs frontline cyber incident triage, analyzes indicators of compromise and malware artifacts, assesses threat severity and impact, enriches intelligence, prepares escalation reports, routes incidents to appropriate government teams, coordinates with partners, documents activities, monitors emerging threats, and supports operational playbooks and briefings.

Performs frontline cyber incident triage, analyzes indicators of compromise and technical artifacts, assesses threat severity and impact, enriches intelligence, prepares escalation recommendations, routes incidents to appropriate government teams, documents findings, monitors emerging threats, and supports playbooks and operational briefings.

Performs frontline cyber threat triage, analyzing incident reports, indicators of compromise, network data, and malware artifacts. Enriches findings through threat intelligence platforms, OSINT, and government resources; assesses severity and impact; prepares recommendations; routes incidents to appropriate teams; and coordinates with government and industry partners. The role also maintains ticket documentation, supports shift handoffs and briefings, monitors emerging threats, and contributes to triage playbooks and procedures.

Performs frontline cyber incident triage, analyzes indicators of compromise and technical artifacts, assesses threat severity and impact, enriches intelligence, and prepares escalation recommendations. Coordinates with government teams, interagency partners, and sector analysts; documents findings in ticketing and knowledge systems; monitors emerging threats; participates in operational briefings and shift handoffs; and supports triage playbook development.

Performs frontline cyber threat triage and intelligence analysis, evaluating incident reports, IOCs, network data, and malware artifacts. Assesses threat severity and impact, enriches indicators using intelligence platforms and OSINT, prepares actionable reports, routes incidents to appropriate teams, and coordinates with government and interagency partners. Maintains documentation, supports operational briefings and playbook development, and monitors emerging threat campaigns.

Performs frontline cyber incident triage by analyzing threat reports, IOCs, network data, malware artifacts, and emerging adversary activity. Assesses severity and impact, enriches indicators using intelligence resources, prepares actionable reports, routes incidents to appropriate government and interagency teams, and maintains operational documentation. The role also supports shift handoffs, briefings, playbook development, partner coordination, and feedback to submitters. It requires collaboration across locations and direct support of federal cyber defense operations.

Provides onsite cyber incident response for government agencies and critical asset owners. Duties include incident triage, investigation, severity assessment, threat and log analysis, mitigation planning, resolution tracking, reporting, and service restoration. The role monitors alerts and external threat data, identifies infection vectors, recommends defense-in-depth practices, coordinates across teams, and supports a weekday afternoon shift.

Maintain and support lab network infrastructure for government cyber incident response operations. Design and configure routers, switches, firewalls, VPNs, storage, and virtual desktop environments; troubleshoot enterprise network and storage issues; assess vulnerabilities; enforce access controls; monitor performance; maintain backups; integrate technologies; and develop SOPs, documentation, and network diagrams.