Mid-Cyber Security Specialist/Analyst (Dragos Experience)

Who are we? IOG, is a technology company focused on Blockchain research and development. We are renowned for our scientific approach to blockchain development, emphasizing peer-reviewed research and formal methods to ensure security, scalability, and sustainability. Our projects include decentralized finance (DeFi), governance, and identity management, aiming to advance the capabilities and adoption of blockchain technology globally. We invest in the unknown, applying our curiosity and desire for positive change to everything we do. By fueling creativity, innovation, and progress within our teams, our products and services are designed for people to be fearless, to be changemakers. What the role involves: The successful candidate will be responsible for the safety and security of personnel, assets, facilities and information. The SOC Operator is a critical contributor to our physical security operations team in the event of a crisis situation that would threaten safe and secure business operations. This could include, but is not limited to natural disasters, workplace violence, facility emergencies, fire, issues of serious injury or illness and other threats that pose a risk to safety and security of personnel, facilities and business operations.  SOC Operators perform many tasks throughout their shifts which includes:  answering phone calls, monitoring electronic access control systems, intrusion detection systems, video surveillance (CCTV) systems, fire alarm systems, emergency phone line and other systems critical to the facility operation. This is a full-time position primarily, with the ability to backfill open shifts based on the needs of the clientele.  The Security Operations Center is a core security function and operates 24/7, 365 days a year. The optimal candidate must understand that scheduling flexibility is key and must be able to work as requested.   Candidates must be Colorado Residents, with a valid concealed carry permit.   Candidates must reside within a 45 minute drive from our Colorado Headquarters based in Longmont, Colorado.  Monitors, tests and responds to intrusion and other alarm systems at multiple locations. Uses closed circuit TV (CCTV) video surveillance systems to confirm status of security systems and confirm authorization of individuals requesting access to any secure area. Assists shift supervisors in the deployment of security personnel and security personnel activities. Communicates effectively with staff, guests, and employees via radio, telephone, email and in-person. Monitors and operates computer systems effectively. Documents and investigates security events and incidents. Dispatches security staff as appropriate and issues equipment. Build, improve and maintain effective communication and relationships with co-workers, staff, subcontractors, vendors and guests. Remain flexible to an ever changing environment, and adapt well to different situations. Report safety concerns, security breaches and unusual activity both verbally and in writing. Handle security issues or emergency situations appropriately, and contact local emergency responders; police, fire dept., EMT’s. Fully participate in training and certification programs to enhance your ability and advance your career. Be thoroughly familiar with our security operations manuals, post orders, policies, procedures and instructions. Have experience and effectively use Microsoft products such as Word, Excel and PowerPoint. Supports corporate operations, and the security movement teams The SOC Operator is responsible for effective and efficient processing of all information relevant to the security operation which includes, but is not limited to:  effective distribution of phone calls, executing and receiving notifications, effective distribution and action of all information received electronically via email, intranet, service requests, shift activity logs and incident reports. Have the ability to multi-task and work effectively under pressure or stressful situations in a calm and professional manner. Requirements Who you are: A minimum of 2 years of experience in a security operations and a proven track record in a security operations center environment; or 5 years of prior security,  military or law enforcement background Armed security license, concealed carry permit, HR218 qualification CPR/AED/First Aid certifications Ability to safely operate company vehicles, up to 10,000 lbs. gross vehicle weight. Possess appropriate user level computer skills and demonstrate the ability to effectively operate and manage security tools and processes.  Systems include but are not limited to access control, intrusion alarm systems, CCTV, and communications equipment.  Previous experience with Access Control and Intrusion Detection Systems is preferred. All current or former members of the military must provide a copy of their DD 214, and or NGB 22-R/discharge paperwork.  Applicants will only be considered if they have an honorable discharge annotated on their discharge documents.  Persons who are hired for the SOC must meet a minimum physical fitness standard, which will include; the ability to run short distances, ability to drag an unconscious adult person from a vehicle or building, perform CPR, and the ability to lift a minimum of 50 lbs.  Field specific or related education Minimum of a high school diploma.  Associates or Bachelor’s Degree preferred. Possess strong communication skills in both the written and verbal format, in all delivery formats (i.e. in person, via radio, via telephone etc.) Ability to work in a team oriented environment and the ability to work independently. Neat and professional appearance. Friendly and professional demeanor. Ability to provide quality customer service in both a corporate, and family type of environment Must have reliable transportation, valid driver’s license, and insurance. Applicants selected for this position will be subject to a background investigation and must meet eligibility requirements . Are you an IOGer? Do you find yourself questioning the status quo? Do you tinker with ideas and long to turn those ideas into solutions? Are you able to spark thoughtful debates, bringing out the inquisitiveness in others? Does the promise of continuously growing excite you? Then get ready to reimagine everything you thought wasn’t possible because that’s what it means to be an IOGer - we don’t set limits, we break them.  Benefits IOG is a fully distributed organization but due to the nature of this role providing physical security, you will need to reside within a 45 minute drive from our Headquarters based in Longmont, Colorado.  The base salary for this position has a range of $65 up to $80k per year at the commencement of employment. Any offer is determined by overall experience and performance during the interview process. This is only part of the total compensation package. All Employees Laptop reimbursement New starter package to buy hardware essentials (headphones, monitor, etc) Learning & Development opportunities US Employees Medical, Dental, and Vision benefits coverage through Anthem for the employee and dependents 401k Health Savings Account Life Insurance At IOG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

ARETUM, a leader in providing high-quality professional services and technology solutions, is seeking a qualified and motivated Information System Security Officer (ISSO) - Contingent. In this position, you will oversee the security of information systems, ensuring they are protected against unauthorized access, breaches, and vulnerabilities, while adhering to relevant security standards and best practices. ARETUM is committed to delivering innovative solutions across various sectors including Next Generation Analytics, Cyber Security, and Engineering Services. We pride ourselves on providing exceptional service to federal clients, enabling mission success through comprehensive security solutions. This is a contingent position, meaning employment is dependent upon the successful award of the associated contract to Aretum and completion of any required background investigation or security clearance verification.  Responsibilities Serve as the primary security point of contact for information systems and ensure compliance with security policies and procedures. Develop, implement, and enforce security policies to manage risks associated with information systems. Conduct risk assessments and security audits on information systems to identify vulnerabilities and recommend mitigations. Support the Risk Management Framework (RMF) processes, including documentation preparation, assessments, and continuous monitoring. Coordinate with other IT teams to integrate security throughout the lifecycle of information systems. Develop and provide security training and awareness programs for all personnel working on or supporting the information systems. Identify and report on existing security vulnerabilities, incidents, and mitigation efforts. Maintain and review security documentation, including System Security Plans (SSPs), and ensure they are updated as needed. Prepare and conduct regular security meetings, briefings, and reports to senior management regarding security statuses and compliance. Requirements A minimum of 3 years of experience in cybersecurity or information assurance roles supporting federal enterprises. Active DOD Secret Clearance or higher Proficiency in the Risk Management Framework (RMF), FISMA, and knowledge of security compliance standards (e.g., NIST, DoD policies). Strong understanding of security controls, assessment methodologies, and tools used for information system security. Experience with security documentation processes including System Security Plans (SSPs) and incident reporting. Strong analytical, problem-solving, and decision-making skills. Excellent verbal and written communication abilities. Industry-recognized certification in Information Assurance (e.g., CISSP, Security+, CAP) is preferred but not required. Work Environment & Physical Requirements This is a remote/work-from-home position. The employee is expected to maintain a professional and distraction-free home office environment with reliable internet access and the ability to participate in video and audio calls during standard working hours. Standard office equipment such as a computer, phone, and webcam will be used regularly.  Travel Requirement This is a remote position; however, occasional travel may be required based on project needs, client meetings, team collaboration events, or training sessions. Travel is expected to be less than 10% and will be communicated in advance whenever possible.  EEO & Pay Transparency Statement Aretum is committed to fostering a workplace rooted in excellence, integrity, and equal opportunity for all. We adhere to merit-based hiring practices, ensuring that all employment decisions are made based on qualifications, skills, and ability to perform the job, without preference or consideration of factors unrelated to job performance. As an Equal Opportunity Employer, Aretum complies with all applicable federal, state, and local employment laws. We are proud to support our nation’s veterans and military families, providing career opportunities that honor their service and experience. If you require a reasonable accommodation during the hiring process due to a disability, please contact our Talent Acquisition team for assistance. In compliance with Executive Order 13665, Aretum will not discharge or otherwise discriminate against employees or applicants for inquiring about, discussing, or disclosing their own pay or that of another employee or applicant. U.S. Work Authorization Applicants must be U.S. citizens and currently authorized to work in the United States on a full-time basis. This position supports a federal government contract and requires active Secret Clearance or better. Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development

Northstrat is seeking an Information Systems Security Engineer to join our team. The ideal candidate will have experience in the following areas: secure software engineering practices in support of Department of Defense (DoD) or Intelligence Community (IC) customers, application of NIST Special Publications 800 security controls and the Risk Management Framework (RMF) process, and system vulnerability scanning. Key Responsibilities Planning and managing the system application of NIST Special Publications 800 series security controls. Perform system vulnerability scanning, documenting results, and working with the development team to address security findings. Generation of comprehensive system security documentation and artifacts, to include a Plan of Action and Milestones (POA&M), for obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO). Work collaboratively with team members, Information Assurance, Information Security Engineering, and other Subject Matter Experts to resolve security issues Maintain thorough documentation of all activities and communications through ticketing systems, operational briefs, and status reports. Requirements Must have bachelor’s degree in a STEM related field. Must have 6 plus years of relevant experience. CompTIA Security+ certification is required. Must have US citizenship An active Top-Secret clearance is required with SCI or SCI eligible. Knowledge of, and practical experience with the NIST Special Publications 800 Series and the Risk Management Framework (RMF) process. Familiar with secure software engineering practices in support of Department of Defense (DoD) or Intelligence Community (IC) customers. Experience with Authorization and Accreditation (A&A) process using RMF for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO). Experience with vulnerability scanning, and testing/validation of false positives/negatives. Experience writing POA&M’s and working with team members on how to remediate findings. Experience with security tools such as: Assured Compliance Assessment Solution (ACAS), and Security Technical Implementation Guide (STIG)'s. Familiar with information security principles and best practices. Excellent communication and collaboration skills. Ability to work independently and as part of a team Preferred Qualifications Familiar with tiered security environments (U, S, TS). Familiar with AWS security services. Familiar with AWS infrastructure services. Familiar with Agile development methodologies. Benefits Work/Life Balance Northstrat values true work life balance. We offer power of choice benefits designed to best meet the needs of you and your lifestyle. Our benefits programs are designed to support and encourage wellness, healthy living, retirement investment, and lifetime learning. Pay Range There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. We also offer competitive compensation, benefits, and professional development opportunities. Please refer to our Benefits section for additional details.   Flex Time Northstrat does not mandate specific working hours. Although project requirements may dictate schedules, a Northstrat employee is only required to work an average of 8 hours per weekday over the course of a month. For example: John worked 12 hours on June 1st to meet a project deadline. On June 15th, John only worked 4 hours because he left early for a long weekend. John’s IBA was not debited for time off because flex time allowed him to carry over those 4 hours from June 1st. Individual Benefits Account (IBA) To attract and retain the highest quality staff, Northstrat provides a unique and versatile benefits package, the Individual Benefit Account (IBA), which places the power of choice in the hands of our greatest asset – the employee. The purpose of the IBA is to provide attractive benefits to all full-time employees of Northstrat on a flexible basis that enables each covered employee to select a package that best suits his or her needs. Whether those needs are paid time off, medical expenses, prescription drug expenses, cash disbursement, or a combination of any of these, the IBA provides flexibility to help you meet your specific goals. The IBA can be used for such things as: IBA Benefits accrue each month in the amount equivalent to 50% of the employee’s monthly compensation rate. That is, the effective dollar amount of this accrual is in addition to an employee’s salary. Profit Sharing Plan (PSP) The PSP is a qualified retirement plan that Northstrat funds quarterly on the employee’s behalf through the IBA in the amount equivalent to 25% (up to the IRS contribution limit) of the employee’s compensation. That is, of the 50% accrual in the IBA, half of the amount accrued is applied to the PSP. Stock Options Because Northstrat is an employee-owned company, all new employees are offered stock options. Employees have the opportunity to receive additional stock options based on accomplishment of individual performance goals. Stock owners elect the Board of Directors and are directly impacted by the success of the company. Lifelong Learning Our culture promotes and nurtures a growth environment. We hire and scale rapidly to meet the needs of our partner customers. Through periodic company sponsored training events, and the ability to use IBA funds for reimbursement of work-related education expenses you will have the opportunity to continually grow your skills and abilities. Join Our Talented Team We hire the BEST employees and value each one. Since 2021, The Washington Post has recognized Northstrat among its "Top Workplaces". We think that your friends and family will like it here too, so we offer employee referral incentives. Northstrat is an Equal Opportunity Employer We are committed to fostering an inclusive, diverse workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status or other legally protected status.

Work individually or in a small integrated team to develop innovative solutions to enable secure and reliable operations of enterprise computer systems. Develop new concepts and processes and analyze root causes and resolve complex issues utilizing your knowledge of industry. Performs systems administration of cyber tools sets and server systems connected to networks across multiple classification domains. Provide support to developmental and operational systems including day-to-day operations, monitoring, and problem resolution for all client/server/storage/network devices, etc. Install, configure and manage operating system and application software as necessary. Support Linux & Windows systems engineering efforts in system design and evaluation, solution engineering, software development, or system administration. Requirements 3+ years of experience as a system administrator Experience with installing or configuring devices, applications, and security tools, including Fidelis Experience maintaining, engineering, deploying, and configuring Fidelis DLP and XPS appliances, including DirectSensor 10G, Mail DLP, and CommandPost, through both iLO and connected directly to the appliance via SSH or Console Port Experience operating and maintaining Linux servers, including operating systems and applications, patching, and other updates Ability to analyze and respond to Fidelis system logs, security logs, and other events to troubleshoot Fidelis appliance stack and network issues to ensure it remains fully operational Active TS/SCI clearance; willingness to take a polygraph exam HS diploma or GED and 7+ years of experience as a system administrator, Associate’s degree and 5+ years of experience as a system administrator, or Bachelor’s degree and 3+ years of experience as a system administrator Active DoD 8570 IAT Level II Certification, including Security+ CE, CCNA - Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider (CSSP) - Infrastructure Support (IS) certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND within 60 days of start date. Optional Qualifications: Experience with operating and maintaining Microsoft Windows and Linux servers to include operating systems. Prior experience as a SOC analyst, Hunt analyst, or DLP analyst, or have previously used Fidelis DLP in an administrative & monitoring capacity. Familiarity with DoD Risk Management Framework. Experience automating deployments and configuration management. Experience as a network administrator or systems engineer. Experience in using Active Directory to manage Windows policies. Knowledge of different layers of the technology stack, including network, application frameworks, database systems, and vendor solutions. Knowledge of Git and Atlassian tools, including Jira and Confluence and Microsoft Visio (or like product) graphic and flowchart design. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers’ Compensation Relocation Assistance

ARETUM is actively seeking an Information System Security Engineer (ISSE) - Contingent to join our esteemed team. As an ISSE, you will play a pivotal role in ensuring the security of our clients' information systems. This position is ideal for a detail-oriented professional who thrives in a fast-paced environment and is committed to safeguarding data and critical assets. At ARETUM, we provide dynamic solutions in areas such as Cyber Security, Engineering Services, and IT Systems, aiming to empower our Federal clients with the most effective and secure technologies available. This is a contingent position, pending the successful award of the associated contract and the necessary security clearance verification. This is a contingent position, meaning employment is dependent upon the successful award of the associated contract to Aretum and completion of any required background investigation or security clearance verification.  Responsibilities Design, implement, and maintain security systems and protocols to protect sensitive information and infrastructures. Conduct security assessments, vulnerability analyses, and audits to identify and mitigate risks across information systems. Develop and maintain security documentation, including System Security Plans (SSPs), security requirements, and risk management assessments. Oversee the integration of security within the systems development lifecycle (SDLC) and collaborate with various teams to ensure compliance. Respond to security incidents and perform detailed investigations and root cause analysis. Implement and maintain continuous monitoring strategies to ensure compliance with federal regulations and standards. Provide technical expertise in areas such as firewalls, intrusion detection systems, and encryption technologies. Keep abreast of the latest security trends, technologies, and regulatory changes to advise on and implement relevant best practices. Prepare and deliver technical reports and security status updates to management and stakeholders. Requirements A minimum of 5 years of experience in information security engineering or a related field. Active DOD Secret Clearance or higher. Proficient knowledge of security frameworks and guidelines such as NIST, RMF, and FISMA. Hands-on experience with security engineering principles and associated tools. Strong understanding of network, application, and database security practices. Excellent problem-solving skills and the ability to assess complex security scenarios. Strong interpersonal and communication skills for effective collaboration with technical and non-technical audiences. Relevant industry certifications such as Security+, CISSP, or CEH are preferred. Work Environment & Physical Requirements This is a remote/work-from-home position. The employee is expected to maintain a professional and distraction-free home office environment with reliable internet access and the ability to participate in video and audio calls during standard working hours. Standard office equipment such as a computer, phone, and webcam will be used regularly.  Travel Requirement This is a remote position; however, occasional travel may be required based on project needs, client meetings, team collaboration events, or training sessions. Travel is expected to be less than 10% and will be communicated in advance whenever possible.  EEO & Pay Transparency Statement Aretum is committed to fostering a workplace rooted in excellence, integrity, and equal opportunity for all. We adhere to merit-based hiring practices, ensuring that all employment decisions are made based on qualifications, skills, and ability to perform the job, without preference or consideration of factors unrelated to job performance. As an Equal Opportunity Employer, Aretum complies with all applicable federal, state, and local employment laws. We are proud to support our nation’s veterans and military families, providing career opportunities that honor their service and experience. If you require a reasonable accommodation during the hiring process due to a disability, please contact our Talent Acquisition team for assistance. In compliance with Executive Order 13665, Aretum will not discharge or otherwise discriminate against employees or applicants for inquiring about, discussing, or disclosing their own pay or that of another employee or applicant. U.S. Work Authorization Applicants must be U.S. citizens and currently authorized to work in the United States on a full-time basis. This position supports a federal government contract and requires Active Secret Clearance or higher. Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development

Navarro Research and Engineering is recruiting an Senior Technical Security Specialist in Oak Ridge, TN. A DOE Q Clearance or DOD equivalent is required to be considered for this position. Navarro Research & Engineering is an award-winning federal contractor dedicated to partnering with clients to advance clean energy and deliver effective solutions for complex challenges in the nuclear and environmental fields. Joining Navarro means being a part of an exceptional team committed to quality and safety while also looking for innovative strategies to create value for the client’s success. Headquartered in Oak Ridge, Tennessee, Navarro has active programs in place across the nation for DOE/NNSA, NASA, and the Department of Defense. Candidate will provide technical security services for the UPF Project, supporting the Manager of the UPF Security Support organization. The candidate will provide subject matter expert and technical support to ensure TEMPEST requirements are validated for UPF.   Specific Job Responsibilities: Primary responsibilities for conducting Technical Security assessments, inspections and other services include but are not limited to: • Evaluating classified processing systems and facilities to ensure they meet the requirements of UPF TEMPEST Plan. • Assist the Y-12 TEMPEST Coordinators in conducting and documenting TEMPEST threat assessments of UPF facilities in which classified information is processed. • Collecting information to assist the Y-12 TEMPEST coordinators in updating the TEMPEST checklist for UPF facilities that process classified information. • Evaluating wireless technologies located within proximity to classified processing areas to determine if they meet the UPF TEMPEST plan or may need further countermeasures or mitigations. • Assist the TSCM team in coordinating UPF evaluations and equipment inspections. • Working independently, advising and assisting NNSA personnel on matters of technical security policy, procedures, and regulations as it relates to the UPF project. • Reviewing proposed recommendations for the design of technical security upgrades and provide recommendations based on technical security policies in collaboration with the Technical Security Team. • Assist in developing and administering a UPF Technical Security education program in coordination with the Y-12 Technical Security program. Specific Job Knowledge and Training Required: • Must possess a strong understanding of basic electrical principles. • Must have the ability to read and understand technical and engineering drawings. • Applicant must be knowledgeable and capable of providing guidance on TEMPEST principles, and procedures. • Applicants must have an active TS/SCI clearance, or be SCI eligible and willing to undergo a polygraph examination to be considered for this position. • Applicants must demonstrate a minimum of 5 years of general security experience. • Other general security related experience include counterintelligence, security policy standard development, security countermeasures programs, computers and computer networking, wireless technologies, electrical distribution systems, grounding and bonding, operation & management, personnel protection & protecting security information. • Candidate must be willing to attend basic level TEMPEST related training Requirements Bachelor's degree and 20 years of relevant experience or Master's degree and 19 years of relevant experience. A DOE Q Clearance or DOD equivalent is required to be considered for this position. Due to the nature of the government contract requirements and/or clearances requirements, US citizenship is required. Navarro is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, religion, color, national origin, age, disability, veteran’s status or any classification protected by applicable state or local law. Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation & Public Holidays) Short Term & Long Term Disability