Jobs in the United States

25+ jobs

Save this search

Added just now
Operations Analyst (SRE)
CGI Technologies and Solutions, Inc.
knoxville, TN
CGI's Advantage Cloud Operations is an SRE-driven operating model, anchored on an Operations Control Plane that unifies telemetry, event management, automation, and IT Service Management…
Added just now
Data Analyst-Technical-Staff
Intermountain Health
Nashville, TN
This role supports the development and deployment of data analytics at Intermountain Health. As a Data Analyst-Technical-Staff, you will be part of a team that contributes to strategic…
Added just now
Senior Insider Threat Engineer
Humana
Nashville, TN
Purview Technology Operations – Configure, tune, and maintain Microsoft Purview Insider Risk Management (IRM), Communication Compliance (CC) policies to support enterprise insider threat…
Added just now
Payments Risk Analyst II
Coinbase
Nashville, TN
As a Payments Risk Analyst II on the Risk & Fraud team within the Consumer & Business group, you'll own the identification and mitigation of fraud risk across Coinbase's fiat payment rails,…
Added just now
AI Operations Administrator - Gravitee - Remote US
SitusAMC
Nashville, TN
The AI Operations Administrator is a member of the IT Engineering & Operations function, responsible for the administration, configuration, and day-to-day operation of SitusAMC’s enterprise…
Added just now
MO
Unarmed Flex Security Officer
Metro One Loss Prevention Services Group
Clarksville, TN
- $25 to $26 USD / hour
…that includes two weeks of paid training to become a Security Operations Center (SOC) Analyst. We are looking for professionals who view security as a critical component of operational…
Added 17 mins ago
MTT UAS Advisor/Trainer
CACI International
GA
…include designing specific training materials for UAS and cUAS operations. These encompass conducting a needs assessment, curriculum design, and developing new and/or updating existing…
Added 17 mins ago
Senior Insider Threat Engineer
Humana
Atlanta, GA
Purview Technology Operations – Configure, tune, and maintain Microsoft Purview Insider Risk Management (IRM), Communication Compliance (CC) policies to support enterprise insider threat…
Added 18 mins ago
Digital Forensics and Incident Response Analyst - Atlanta, GA
Kelly Services
Atlanta, GA
A leading enterprise organization is seeking a Digital Forensics & Incident Response Analyst to support cybersecurity investigations, digital evidence collection, incident response…
Added 18 mins ago
Lead Business Architect
Pegasystems
Atlanta, GA
Gartner Analyst acclaimed technology leadership across our categories of products
Added 18 mins ago
Business Analyst III or Senior
Southern Company
Atlanta, GA
This position may be filled as Business Analyst III (GSE04) or Senior (GSE05). Individuals who demonstrate advanced skills in terms of work experience, education, and certifications may be…
Added 37 mins ago
SO
IT Advanced Business Analyst - ITS4
State of Minnesota
St. Paul, MN
- $37.72 to $62.21 USD / hour
As a Business Analyst you will perform business analysis functions using a set of tasks and techniques to successfully act as a liaison among stakeholders in order to understand the…
Added 37 mins ago
U.S. Bancorp Advisors Business Technology Analyst
U.S. Bank
Saint Paul, MN
The U.S. Bancorp Advisors Account Services group is hiring a Business Technology Analyst that serves as a computer technology expert for assigned functional applications to assist USBA…
Added 37 mins ago
G
Information Security Analyst - Hybrid
Genesis10
Minneapolis, MN
- $39 to $45 USD / hour
Genesis10 is currently seeking an Information Security Analyst - Hybrid position with a Public Sector Organization located in Minneapolis, MN. This is a 6+ month contract opportunity.
Added 49 mins ago
SC
Architect, Professional Services (Microsoft Security)
Softchoice Corporati
Denver, CO
- $128,800 to $161,000 USD / year
Updated Certifications and training to include; Microsoft Certified Security Operations Analyst Associate, and Security Administrator Associate
Added 49 mins ago
UO
Business Financial Planning Analyst
University of Colorado Denver
Aurora, CO
- $40,123 USD / year
Job Title: Business Financial Planning Analyst
Added 1 hour ago
MO
Security Operations Center (SOC) Analyst - M1 Global
Metro One Loss Prevention Services Group
Fort Wayne, IN
- $24 to $26 USD / hour
M1 Global is seeking an SOC Analyst who views security as a core component of operational excellence. This role serves as a centralized hub for physical security operations, responsible for…
Added 2 hours ago
Manhattan WMS Software Engineer
INSPYR Solutions
Lithia Springs, GA
…programming experience and a practical understanding of warehouse operations, material handling equipment, and distribution center…
Added 2 hours ago
IS
Sales Operations Analyst I
INSPYR Solutions
Austin, TX
- $33 to $53 USD / hour
We are looking for a Sales Operations Analyst I to support high-volume operational workflows across contracts, supplier onboarding, payouts, reporting, and data management. This role is…
Added 2 hours ago
IS
Business Analyst V
INSPYR Solutions
Texas, TX
- $35 to $55 USD / hour
We are looking for a Business Analyst V with strong experience in financial analytics, cost management, budgeting, and cross-functional collaboration. This role will support financial…
Added 2 hours ago
JL
Transaction Analyst
Jones Lang LaSalle
Denver, CO
- $60,000 USD / year
As a Transaction Analyst at JLL, you'll be at the heart of our transaction management operations, supporting the complete lifecycle of commercial lease transactions in a dynamic,…
Added 2 hours ago
Healthcare HL7 FHIR Cloverleaf Rhapsody Certification CDA X12 EHR Analyst
COOLSOFT
Jackson, MS
Interoperability Analyst to provide senior-level technical leadership for DOMs healthcare interface operations,
Added 2 hours ago
IS
Fianance Operations Analyst
INSPYR Solutions
Charlotte, NC
- $45 to $52 USD / hour
…requiring collaboration with Product, Finance, Accounting, Operations, Sales, and Technology teams. The ideal candidate can understand financial workflows, identify process gaps, document…
Added 2 hours ago
ESMA/Infrastructure Governance Analyst
Keylogic Systems Inc
Charleston, WV
Added 2 hours ago
Senior Analyst - Customer Strategy & Innovation (Chicago or Houston)
United Airlines
Chicago, IL
…across Service Delivery, Ops, QA, Training, Policy, Quality, and Technology partners. It integrates analytical insights and policy requirements into practical, scalable solutions that…

BCMC

Subject Matter Expert - Edge Device Technologies

Arlington, VA, United States

Apply About employer

Applications open in a new tab.

Job details

Apply by: Feb 1, 2027
Posting language: English
Posted: Nov 3, 2026

Original job description

The DHS Hunt and Incident Response Team (HIRT) secures the nation’s infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactive hunting for malicious cyber activity. BCMC provides support for on- and offsite incident response to government agencies and critical infrastructure owners who experience cyber-attacks. BCMC delivers HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation using host- and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the severity of breaches and develop mitigation/remediation plans.

We are seeking a Subject Matter Expert with deep expertise in one or more edge device technologies (Cisco, Ivanti, Palo Alto, Ciena, Juniper) to support this critical customer mission.

Responsibilities:

Serves as a hunt and incident response subject matter expert (SME), applying in-depth knowledge of threat actor tools, techniques, and procedures (TTPs), with a focus on network centric and edge device compromises.
Serves as an incident response expert in support of a technology insertion team, evaluating and integrating new network forensic and monitoring capabilities.
Assists the Government lead in coordinating teams for preliminary incident response investigations, including onsite and remote engagements.
Assists the Government lead by interfacing with the customer while onsite, clearly communicating status, findings, and recommendations.
Characterizes and analyzes network traffic (including PCAP, flow, and device logs) to identify anomalous activity and potential threats to network resources.
Identifies and analyzes anomalies in network traffic using metadata (e.g., flow records, DNS logs, proxy logs) to detect and scope malicious activity.
Reconstructs malicious attacks or activities based on network traffic, including timelines, attacker paths, and data exfiltration patterns.
Examines network topologies to understand data flows, trust boundaries, and potential choke points; uses this understanding to inform hunt and response activities.
Assesses network topology and device configurations, identifying critical security concerns and providing security best practice recommendations, especially for Cisco, Ivanti, Palo Alto, Ciena, and Juniper platforms.
Determines appropriate courses of action in response to identified and analyzed anomalous network activity, including containment, eradication, and hardening actions.
Applies knowledge of defense-in-depth principles and general attack stages to evaluate and improve network security architecture and edge-device configurations.
Applies knowledge of network device integrity concepts and methodologies to validate device state, detect unauthorized modification, and recommend remediation.
Leads analysis of device logs, configurations, and telemetry from routers, switches, firewalls, VPNs, and remote access appliances to identify, scope, and reconstruct intrusions.
Provides expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to hunt and incident response activities.
Serves as a technical expert on high-level incident response teams, providing technical direction, interpretation, and alternatives for network-centric incidents.
Exercises considerable latitude in determining technical objectives and independently develops technical solutions to complex problems requiring ingenuity and creativity.
Analyzes incident data and victim environments to recommend targeted mitigations, including network segmentation, policy updates, and device hardening.
Advises technical personnel on countermeasure implementation and customization (e.g., firewall rules, IPS signatures, access control lists).
Supports internal stakeholders on containment and eradication missions, on-site and remotely.
Ensures evidence integrity is preserved according to standard operating procedures or national standards when collecting network data, device artifacts, and logs.
Assists with the writing and publishing of Computer Network Defense (CND) guidance and detailed reports on incident findings to appropriate constituencies.
Distills analytic findings into executive summaries and in-depth technical reports suitable for both leadership and highly technical audiences.
Documents analysis, TTPs, and device specific incident handling procedures in a standardized knowledge base for sharing and publication.
Assists in maintaining branch process and procedure documentation and guides the completion of hunt and incident response activities.

Required Skills:

U.S. Citizenship.
Active TS/SCI clearance.
Ability to obtain DHS Suitability.
10+ years of directly relevant experience
3+ years of experience related to the evaluation and implementation of new cyber response or network forensic capabilities.
Hands-on experience with incident response or network operations involving enterprise edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto, Ciena, Juniper.
Strong understanding of network architecture and security, including routing, switching, VPNs, firewalls, segmentation, and defense in depth.
Knowledge of Computer Network Defense (CND) policies, procedures, and regulations relevant to U.S. government or similar environments.
Ability to: o Characterize and analyze network traffic to identify anomalous activity and potential threats. o Identify and analyze anomalies in network traffic using metadata (flow, DNS, proxy, etc.). o Reconstruct malicious activity based on network traffic and device logs.
Understanding of general attack stages (reconnaissance, initial access, lateral movement, exfiltration, etc.) and how they manifest across the network.
Understanding of system and application security threats and vulnerabilities and how they are observed in network traffic.
Understanding of proactive analysis of systems and networks, including establishing trust levels of critical resources and detecting anomalous behavior.
Proficiency with common operating systems (e.g., Linux/Unix, Windows).
Experience performing cyber incident response (scoping, containment, eradication, recovery) in operational environments.
Ability to think independently, make sound decisions under pressure, and work with limited guidance.
Superior written and oral communication skills, including the ability to clearly explain technical issues to both technical and non-technical stakeholders.
Ability to work collaboratively across physical locations and within distributed teams.
Skilled in identifying different classes of attacks and attack stages and translating findings into actionable recommendations.
Rapid Network & Tapping Setup: Ability to quickly configure network TAPs, packet brokers, SPAN ports, and unmanaged/managed switches without disrupting live production or air-gapped traffic.

Desired Skills:

Experience leading and mentoring technical teams in incident response, network operations, or security engineering.
Network and system administration experience in large or complex enterprise or service-provider environments.
Strong understanding of adversarial TTPs (including MITRE ATT&CK) and different operational threat environments (e.g., script kiddies, non-nation state adversaries, nation state actors).
Knowledge of defense-in-depth and zero trust principles and their application to network and edge-device architectures.
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, injections, race conditions, covert channels, replay, ROP, malicious code).
Knowledge of network device integrity verification and monitoring approaches.
Hands-on skill in host/network intrusion detection and event correlation across multiple telemetry sources (firewalls, IDS/IPS, endpoint, SIEM).
Experience with malicious activity analysis, including network beaconing, C2, and data exfiltration detection.
Experience with Identity and Access Management (IAM) tools and their integration into network/edge security architectures.
Ability to review and analyze Enterprise Architecture (EA) from a security perspective and recommend architecture-level improvements.
Ability to collaborate with stakeholders at multiple levels within an organization (technical staff, management, senior leadership).
Field Diagnostics & Cyber Forensics: Skills in running preloaded analysis stacks, protocol parsers (e.g., Modbus, DNP3, OPC UA), vulnerability scanning, and local packet capture at line rate.
Compact Pack & Weight Management: Packing, securing, and transporting ruggedized cases (such as Pelican or Nanuk) that fit standard weight and carry-on/air-transport limits.

Required Education:

BS in Computer Science, Cyber Security, Computer Engineering, or related degree; OR HS Diploma and 22+ years of technical experience in the area of expertise.

Desired Certifications (One or more):

IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Incident Responder,CEH,
SANS GIAC GCIA or GNFA (preferred for network forensics).
SANS GRID, GICSP, or GCIP (plus).
Vendor / network certifications (highly desired): o Cisco CCNA (or higher: CCNP Security, CCNP Enterprise). o Vendor certifications for Palo Alto, Juniper, Ciena, or Ivanti (e.g., PCNSE, JNCIS/JNCIP, etc.).

Our Company Overview Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services to all of our clients.

Benefits

Extremely competitive salary 95% employer paid for employee medical, dental, & vision coverages 100% employer paid for employee life, STD & LTD disability coverages 401k with company match Flexible Spending Account (FSA) for dependent & health care 11 standard holidays & 3 weeks of annual leave ESS-3690 Subject Matter Expert I - SME01 - SME

Apply About employer

Report this job