Top Tech Jobs & Startup Jobs

Perform enterprise vulnerability management and CDM operations, including reviewing scan results, analyzing and prioritizing risks, coordinating remediation, tracking findings, validating fixes, investigating data discrepancies, and developing dashboards, metrics, and recurring reports for federal customers.

Leads security operations and incident response for a federal customer, overseeing SOC activities, incident detection, analysis, containment, recovery, threat hunting, escalation, and reporting. Develops response playbooks, coordinates technical teams and government stakeholders, reviews case quality, integrates threat intelligence, analyzes operational metrics, and improves cyber defense capabilities.

Supports NIH system owners with cybersecurity compliance and federal RMF requirements throughout the system lifecycle. Maintains security plans, authorization artifacts, POA&Ms, risk assessments, evidence, and continuous monitoring documentation. Tracks vulnerabilities, findings, and remediation activities; coordinates with administrators, engineers, assessors, and cybersecurity teams; reviews system changes for security impacts; and supports audits, assessments, and authorization activities.

Analyze Known Exploited Vulnerabilities and federal cybersecurity directives, assess organizational risk, prioritize remediation, and track compliance deadlines. Govern enterprise penetration testing by reviewing scopes, rules of engagement, methodologies, deliverables, findings, exceptions, and compensating controls. Develop executive reports, dashboards, and briefings, and advise leadership on vulnerability risk and remediation priorities for NIH/OD-OIT.

Lead a federal cybersecurity support program for NIH by managing scope, schedules, staffing, resources, risks, deliverables, performance, customer relationships, and multidisciplinary technical workstreams. Coordinate GRC, security operations and engineering, and security awareness functions. Conduct program reviews and executive briefings, maintain management plans and metrics, monitor contract performance, and ensure services align with mission requirements.

Develops, edits, and maintains cybersecurity policies, SOPs, standards, plans, and RMF, security operations, engineering, training, and governance artifacts. Translates technical concepts from subject-matter experts into clear documentation, ensures consistency and compliance with templates, manages version histories, creates documentation standards, and coordinates review, adjudication, and approval workflows. The role is primarily remote but requires some TDY travel and federal background investigation or Public Trust eligibility.

Conduct authorized network, application, system, cloud, and infrastructure penetration tests for federal government customers. Develop testing plans, scopes, methodologies, and rules of engagement; identify and validate vulnerabilities; assess attack paths and business impact; document findings; recommend remediation; retest fixes; and coordinate with system owners and security stakeholders while maintaining strict testing boundaries.

Provides expert digital forensics and cyber threat intelligence support for federal government cybersecurity operations. Responsibilities include examining systems and endpoints, preserving and analyzing evidence, conducting malware and artifact analysis, developing threat intelligence products, analyzing adversary behavior and indicators, supporting incident response and threat hunting, maintaining chain of custody, and producing technical findings and executive summaries.

Supports federal Risk Management Framework and Assessment and Authorization activities for NIH/OD-OIT. Responsibilities include maintaining security documentation, reviewing security plans and control implementations, assessing system changes, coordinating evidence collection, supporting security assessments, developing POA&Ms, tracking remediation, conducting risk assessments, and supporting continuous monitoring. The role is primarily remote with some TDY and requires extensive federal RMF experience, Security+ and CISA certifications, and eligibility for a federal background investigation or Public Trust determination.

Provides front-line cybersecurity monitoring and operational support for NIH/OD-OIT. Monitors alerts, dashboards, events, and queues; triages and documents security incidents; creates and routes tickets; identifies false positives; follows escalation procedures; gathers information for higher-tier analysts; supports reporting, shift handoffs, and timely escalation of suspicious activity.