The GRC Process Architect will work in the Security Architecture & Engineering team in the CISO organization. This role is responsible for designing, optimizing, and documenting processes that integrate Security, IT Change Management, and GRC workflows. This role plays a critical part in maturing the organization’s compliance posture by enabling automated traceability between IT changes, affected environments, and required updates to compliance and security controls"

The role will require:
(1) Working with Information Security to identify fragmented data points across existing processes and design integrated, end-to-end data flows
(2) Ability to Analyze, design and document business processes with a GRC context, with focus on traceability from Change requests to impacted environments and CMMC controls
(3) Building workflow designs that enrich and map data across ServiceNow modules, enabling consistent downstream impact analysis for security and compliance
(4) Active Collaboration with a variety of different teams within IT and IS to ensure a robust and complete solution
(5) General Knowledge of Federal Regulatory Compliance Controls such as NIST 800-53, NIST 800-171, CMMC, etc.
(6) Understanding of IT Change Management Practices 

The work

• Understand current Security processes and how they align to CMMC Controls
• Design workflows that will enrich data points for downstream processes and impact analysis
• Collaborate with IT development teams to translate process designs into technical implementation within the ServiceNow platform.  
• Build and document end-to-end workflows to solve current gaps in Security and Compliance Processes
• Produce clear, comprehensive process documentation to support operational excellence, audit readiness, and automation.

What you need

• U.S. Citizen (required).  
• 5+ years of experience in business process design or process architecture.  
• Working knowledge of CMMC regulatory compliance controls (NIST 800-171).  
• Strong familiarity with GRC processes and successful GRC tool implementations.  
• Understanding of IT Change Management practices and data governance.  
• Experience working with or designing AI-enabled or automation workflows that enhance process efficiency.

Bonus if you have

• Prior hands‑on experience with ServiceNow GRC/IRM modules.  
• Relevant certifications such as CPDP, CPDE, or equivalent experience.  
• Experience working within an Agile delivery or development framework.  
• Background supporting Information Security and Compliance teams

The Work

The Cybersecurity Incident Response Junior Analyst and Triage Analyst role will work in the CIRT team in the CISO organization. This role works on a shift under the analysis and triage team lead to relate, scope, and triage alerts and notifications from the SIEM, security sensors, ticketing system, walk-ins, and phone calls. Requires technical understanding to collaborate with the incident response and operations teams to qualify events as relevant and determine true and false positives. Knowledge in incident response lifecycles, common 
cyber-attacks, and federal incident reporting requirements.

Primary responsibilities:

• Actively monitor and respond to cybersecurity incidents related to alerted policy violations
• Analyze and investigate incidents to determine their nature and scope.
• Coordinate with the lead and other Cybersecurity Incident Response Teams for effective incident resolution.
• Document incidents and response activities in detail.
• Stay updated with the latest cybersecurity threats and trends.
• Assist in developing and refining incident response strategies and procedures.
• Collaborate with operations teams, legal, human resources and management to investigate security issues and interview investigation subjects to determine true and false positives.

What you need

• US Citizenship required
• 1 - 2 years of experience in information security, or other equivalent combination of education or equivalent work experience.
• 1-year of experience performing event and log analysis including one or more of the following: Anti-Virus,
• Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools and other security tools found in large enterprise network environments; along with experience working with Security Information and Event Management (SIEM) solutions.
• Excellent written and oral communication skills, attention to detail, and interpersonal skills.
• Familiarity with various network and host-based security applications and tools, such as network and host assessment/scanning tools, network and host-based intrusion detection systems, and other security software 
  packages.
• Familiarity with various network and host-based security applications and tools, such as network and host assessment/scanning tools, network and host-based intrusion detection systems, and other security software 
  packages.
• Familiarity with TCP/IP, common application layer protocols, and packet analysis of the same.
• Familiarity with static and dynamic malware analysis concepts.
• Experience with indicators of attack and compromise.
• Familiarity with Windows / Linux architecture and endpoint analysis of the same.
• Familiarity with basic data parsing and analysis tools, i.e., Excel, grep, sed, awk, regex, etc
  
  

Bonus if you have

• SANs GIAC Certifications including but not limited to GCED, GCLD, GCIH, GCFA, GREM

The Technical Writer role will work in the Policy and Control Operations team of Information Security. 

The work

• Technical documentation writing, not transaction processing. Technical writing samples will be requested if granted an interview.
• Provide functional and/or technical writing support for resolution of internal program inquiries.
• Liaise with other teams members as required to resolve questions/issues in a timely manner. Emphasis on ensuring proper documentation, notification, escalation, tracking and follow up.
• Create and write original documents
• Develop, review and edit documentation of technical IT products, policies, security standards, processes, procedures and deployments
• Conduct relevant research, data analysis, and create reports
• Communicate with team members, engineers and Subject Matter Experts to identify the process, document, and publish Standard Operating Procedures
• Maintain responsibility for completion and accuracy of work products
• Convey technical details clearly to a range of audiences, both in writing and verbally. 

What you need

Bonus if you have

The Detection Engineer will work on the Cyber Incident Response Team (CIRT) within the Information Security organization.

Responsibilities include:

• Design, engineer, and implement security detection initiatives under the cybersecurity team lead.
• Develop new detection logic for SIEM (Microsoft Sentinel) and network security platforms (Cisco FirePower, IDS/IPS), incorporating AI-driven tooling where applicable.
• Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives.
• Tune detection sets to raise security-relevant events for triage and response teams.
• Maintain version control of detection logic using Git and GitHub workflows for collaborative development and auditability.
• Bridge the gap between network engineering and cybersecurity teams to advocate for secure network designs and maximize security device capabilities.
• Conduct technical briefings to enhance team awareness of network architecture and detection strategies.
• Collaborate with operations and management to recommend improvements to security posture and ensure compliance with industry and federal standards (e.g., NIST, CISA).

What You Need:

• U.S. Citizenship required
• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
• 6 + years experience in information security or equivalent combination of education and work experience
• 2+ years experience performing event and log analysis across enterprise security tools (AV, IDS/IPS, Firewalls, Active Directory, Web Proxies, DLP, SIEM)
• Hands-on experience with:
  • Microsoft Sentinel & KQL (minimum 1 year)
  • Cisco FirePower and IDS/IPS configuration (minimum 1 year)
  • SIEM platforms (Sentinel preferred)
  • Detection engineering: designing and tuning signatures for IoCs and IoAs
  • Packet and malware analysis using tools like Wireshark
  • Git and GitHub for detection code version control and collaborative workflows
  • Scripting and parsing (regex, PowerShell, Python, grep, sed, awk)
  • TCP/IP, application layer protocols, and Windows/Linux internals
  • MITRE ATT&CK framework for detection mapping

Bonus If You Have:

• Threat hunting and automation experience
• Familiarity with cloud security monitoring (Azure, AWS)
• Certifications such as GIAC GCIA, GCED, or Microsoft Security Operations Analyst Associate

The Compliance Specialist will work on the Enterprise Compliance Support team in the Information Security organization. The role will provide day-to-day operational support for the security compliance programs. This individual will be involved in multiple areas of security compliance methodologies including supporting and implementing improvements on current and future processes with direct oversight. The role will work closely with other IS and IT teams as well as  business stakeholders for collaboration as required.

The successful candidate will apply existing experience to look at business processes with a fresh eye. After learning the role, they should feel comfortable proposing strategies to improve process efficiencies.  This function is a main point of contact for internal customers. 

• Think analytically, solve problems, make decisions, and collaborate and work with a team in a fast-paced environment.
• Participate in meetings with technical and business stakeholders to elicit business and functional requirements and business process analysis.
• Create SSP system-specific narratives that are detailed about how each system is meeting each SSP control
• Gathers and organizes metrics and other information to properly present escalations to leadership.
• Coordinating with internal stakeholders with using well-developed communication skills.
• Develop and implement SOPs documenting processes and services.
• Works within teams to implement value-added recommendations to strengthen internal processes and improve operating processes.
• Performs other analytic and provisioning duties as assigned.

What You Need:

• Bachelor’s Degree in Computer Science and 3 years work experience or high school degree with 7+ years in equivalent work experience in IT, cybersecurity, risk, or other disciplines.
• Familiarity with various security related NIST publications (e.g., SP 800-53, SP 800-171, etc.)
• Familiarity with ServiceNow, Office Suite.
• Strong communication skills.
• Ability to work independently.

Bonus If You Have:

• Experience writing technical documentation
• CompTIA Security+, Azure Fundamentals, Network+, or A+ certifications or equivalent
• Active Directory/Azure Active Directory