Jobs at Solutions³ LLC

Develop and implement automation for ML/LLM integrations and data pipelines to support incident response and automated malware analysis. Build ingestion, transformation, monitoring, API integrations, and scale automation from pilot to production while ensuring data quality and documenting solutions.

Design and implement automation for ML integration and cyber incident response: data ingestion pipelines, malware analysis automation, LLM/Databricks/Bedrock integrations, API and data integration automation, feature engineering, monitoring, scaling to production, and documentation.

Lead and coordinate on-site cyber incident investigations, triage and characterize breaches, recommend mitigations, analyze alerts and logs, document incidents from detection through resolution, and provide shift-based operational support to restore services.

Perform on-site cyber incident response and investigations: characterize breaches, prioritize incidents using NCCIC scoring, analyze alerts and log data, develop mitigation plans, coordinate cross-team information, track incidents to resolution, and provide shift-based support to restore services.

Lead investigation and triage of cyber incidents, characterize severity, develop mitigation and restoration plans, monitor threat sources, analyze alerts and logs, and document incidents from detection through resolution while providing shift coverage.

Lead and coordinate cyber incident investigations: triage, scope determination, mitigation planning, and service restoration. Monitor threats, analyze logs/alerts, document incidents through resolution, and recommend layered defense improvements while supporting assigned shifts.

Lead and coordinate on-site incident response investigations, characterize breach severity, develop mitigation plans, manage case/ticketing records, brief leadership, and support threat/vulnerability and network security monitoring to restore services and prioritize responses.

Lead use-case identification, gather and document requirements for technology integration pilots, facilitate stakeholder workshops, translate mission needs into capability requirements, define pilot success metrics, manage requirements traceability, support governance and leadership alignment, and drive lessons-learned and continuous improvement for cybersecurity incident response initiatives.

Perform on-site incident response for civilian government and critical assets: investigate breaches, characterize severity, develop mitigation plans, analyze logs, track incidents from detection to resolution, coordinate across teams, and provide shift-based support using CND methodologies and threat actor TTP knowledge.

Support government incident response by researching, evaluating, and managing cybersecurity technologies. Track cases from submission to capability delivery, perform hands-on evaluations, coordinate pilots and integrations, document requirements, advise stakeholders, and assist restoration and mitigation for mission-critical systems.

Support government incident response by producing and reviewing cybersecurity documentation (SOPs, CONOPS, action reports, briefings). Coordinate with incident teams, maintain records, edit to agency style, and produce clear technical narratives under time pressure.

Support government incident response by researching, evaluating, and managing cyber technology solutions from submission through capability delivery. Conduct hands-on testing, document technical requirements, coordinate pilots and transitions, maintain technology inventories, and engage customers to align recommendations with mission needs.

Lead use case identification and requirements gathering for technology integration pilots supporting government incident response. Facilitate stakeholder workshops, translate mission needs into capability requirements, develop business cases and metrics, manage requirements traceability, coordinate technical and operational teams, support governance and leadership alignment, and ensure disciplined pilot scope and transition decisions.

Provide cyber technology research and case management for government incident response: track/manage cases, research and evaluate commercial and open-source solutions, perform hands-on testing, document technical requirements, develop mitigation plans, coordinate capability implementation, maintain technology inventories, and engage requesters to align solutions with mission needs.

Lead use-case identification and requirements gathering for technology integration pilots supporting cyber incident response. Facilitate stakeholder workshops, translate mission needs into capability requirements, develop business cases and metrics, manage requirements traceability, support governance and leadership briefings, document workflows, and ensure pilot scope, evaluation, and transition decisions.

Perform advanced hardware and firmware reverse engineering on OT/ICS and network-edge devices, extract embedded malware, analyze proprietary hardware and protocols, develop forensic SOPs, train analysts, support live incident response, and collaborate on microelectronics exploitation and emulation research.