Cayuse Holdings

Engineer

• Perform boundary protection engineering duties consistent with the labor category and required certifications
• Maintain and apply required certifications (IAT/M Level III; PCNSE; SANS Intrusion In-Depth; Cisco Certified Network Professional) within the scope of assigned duties
• Support functions aligned to DCWF work roles (Cyber Defense Infrastructure Support Specialist; Cyber Defense Analyst; Network Operations Specialist; Security Architect; Information Systems Security Developer) as applicable
• Support IT (Cyberspace) and Cybersecurity-aligned activities as specified for the labor category
• Other duties as assigned

Boundary Protection Engineer

Frontend Engineer

• Design, develop, and maintain secure, scalable, and responsive web applications and websites in accordance with federal and agency requirements.
• Maintain and update existing web properties to ensure optimal performance, reliability, and security, implement enhancements as required.
• Apply secure coding practices and comply with cybersecurity standards, including vulnerability identification and remediation.
• Ensure web applications and websites meet Section 508 and other accessibility compliance requirements through ongoing review and testing.
• Integrate web applications with enterprise systems, including databases, APIs, and other agency platforms, to ensure interoperability.
• Troubleshoot and resolve technical issues, including diagnosing bugs, optimizing performance, and addressing user feedback in a timely manner.
• Develop and maintain comprehensive documentation for application architecture, design decisions, codebase, deployment procedures, and user guidance.
• Collaborate effectively with project managers, UI/UX designers, security engineers, and other stakeholders to deliver solutions that meet agency goals.
• Remain current with evolving web technologies, security practices, and federal regulatory changes, recommending improvements when beneficial.
• Support all phases of web application testing, including unit, integration, and user acceptance tests, and participate in independent verification and validation.
• Provide technical guidance and advice to project teams and agency clients regarding web development best practices, security compliance, and technical risks.

Web Developer

Full-stack Engineer

• Provide expert-level software design, development, implementation, and maintenance services for mission-critical government systems.
• Collaborate with cross-functional teams to analyze user needs, design robust solutions, and implement secure, scalable applications.
• Participate throughout the software development lifecycle (SDLC) ensuring compliance with government security standards.
• Support functions aligned to DCWF work roles (e.g., DevSec Ops Specialist; Software Developer; Software/Cloud Architect).
• Document and maintain software configurations, releases, and supporting technical documentation as applicable.
• Design algorithms, scripts, and flowcharts to create new software programs and systems.
• Prepare and install solutions by determining and designing system specifications, standards, and programming.
• Produce code based on customer and platform requirements.
• Test and deploy programs and applications.
• Observe user feedback to recommend improvements to existing software products.

Software Developer

Security Engineer

• Perform Information Systems Security Engineer duties consistent with the labor category and required RMF experience
• Support security architecture and security engineering activities aligned to DCWF work roles
• Support security control assessment and ISSM coordination activities aligned to DCWF work roles
• Maintain and apply required IAT/M certification level (II or III) within the scope of assigned duties
• Stay up to date on emerging technologies, exploits, vulnerabilities, and hacker techniques and provide briefings and reports to leadership
• Train staff on, and oversee the use of, information security standards, policies, and best practices while performing duties outlined in national standards
• Understand system engineering and cybersecurity concepts and methodologies at the professional level with knowledge equivalent to: Certified Information Systems Security Professional, Cisco Certified Network Professional, VMWare Certified Professional, or similar certifications
• Create, draft, and maintain Security Assessment and Authorization packages along with assisting and consulting in the development of information security procedures
• Provide artifacts for RMF packages including, but not limited to: Security Plans, Security Assessment Reports, Security Controls Traceability Matrix, and Plan of Action and Milestones
• Ensure systems comply with Cybersecurity and Information Assurance and Cybersecurity standards and best practices
• Assist and consult in technical management including, but not limited to: Business/Mission Analysis, System Requirements Definitions, System Architecture, Defense in Depth, Zero Trust, Domain Separation, and Disaster Recovery
• Assist/consult in technical processes including, but not limited to: Project Planning, Configuration Management, Risk Management, and Information Management
• Ensure proper implementation of technical security controls and measures
• Ensure all systems are properly logging events
• Perform system audits, vulnerability scans, and threat assessments on all networks
• Perform incident response activities and conduct investigations of information security breaches

Information Systems Security Engineer

• Perform Information Systems Security Engineer duties consistent with the labor category and required RMF experience.
• Support security architecture and security engineering activities aligned to DCWF work roles (Security Architect; Information Systems Security Developer; Cyber Defense Infrastructure Support Specialist).
• Support security control assessment and ISSM coordination activities aligned to DCWF work roles (Security Control Assessor; Information Systems Security Manager).
• Maintain and apply required IAT/M certification level (II or III) within the scope of assigned duties.
• Stay up to date on emerging technologies, exploits, vulnerabilities, and hacker techniques and provide briefings and reports to leadership.
• Train staff on, and oversee the use of, information security standards, policies, and best practices while performing duties outlined in national standards including, but not limited to: CNSSI 4009, NIST 800-37, and NIST 800-160.
• Understand system engineering and cybersecurity concepts and methodologies at the professional level with knowledge equivalent to: Certified Information Systems Security Professional, Cisco Certified Network Professional, VMWare Certified Professional, or similar certifications.
• Create, draft, and maintain Security Assessment and Authorization packages along with assisting and consulting in the development of information security procedures.
• Provide artifacts for RMF packages including, but not limited to: Security Plans, Security Assessment Reports, Security Controls Traceability Matrix, and Plan of Action and Milestones.
• Ensure systems comply with Cybersecurity and Information Assurance and Cybersecurity standards and best practices including, but not limited to: Endpoints, Switches, Routers, Firewalls, and Servers.
• Assist and consult in technical management including, but not limited to: Business/Mission Analysis, System Requirements Definitions, System Architecture, Defense in Depth, Zero Trust, Domain Separation, and Disaster Recovery.
• Assist/consult in technical processes including, but not limited to: Project Planning, Configuration Management, Risk Management, and Information Management.
• Ensure proper implementation of technical security controls and measures including, but not limited to STIGs, AAA, VPN, Public Key Infrastructure (PKI), Identity, Credential, and Access Management (ICAM), and Security Patches.
• Ensure all systems are properly logging events to include but not limited to the Security Incident and Event Monitor (SIEM) used for live monitoring and alerts.
• Perform system audits, vulnerability scans, and threat assessments on all networks including, but not limited to: System Analysis/Forensics and Anomaly Detection.
• Perform incident response activities and conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage including, but not limited to: Provide Intelligence, Provide Reports and Malware.
• Other duties as assigned.

Information Systems Security Manager

• Perform Information Systems Security Officer duties consistent with the labor category and required RMF experience.
• Support Risk Management Framework (RMF) activities consistent with the required experience timeframe.
• Manage and perform records management for all Account Forms including but not limited to: Cybersecurity Awareness training for all students, Authorized User Agreements and associated user forms for all networks required for duty at the 39 IOS, System Authorization Access Requests, Privileged User Agreements, 8570/8140 validation, Operating System Certification validation, and associated user forms.
• Maintain appointment letters for work roles including, but not limited to: Program Managers, ISSO, Information Systems Security Manager (ISSM), Information Systems Security Engineer (ISSE), Systems Administrators, Client Systems Technicians, and Cybersecurity Liaisons.
• Perform wireless scanning throughout the facility to ensure no rogue activity to include but not limited to: review vulnerability scans on all networks and respond to any vulnerabilities appropriately while conducting network audits on all networks.
• Manage and update Management Internal Control Toolkit (MICT) checklists for assigned programs including, but not limited to: Privileged User, 17-1301 Computer Security (COMPUSEC), and 17-101 Risk Management Framework (RMF).
• Inspect equipment prior to the entry and exit of the facilities and ensure entry and exit logs are accomplished along with reviewing, updating, and enforcing Media Control policy including, but not limited to: Issuing and tracking removable media and ensuring media sanitization.
• Validate administrator accounts on all networks and respond to any discrepancies appropriately.
• Review equipment purchases requests to ensure items are on approved products listings and meet requirements to enter the facilities.
• Ensure cybersecurity marking and standards enforcement including but not limited to: Classification stickers and markings on all systems, Bomb threat aids posted by all phones, and Combined Security Cards are posted by all workstations.
• Perform random bag and walkthrough inspections with the Security team along with responding to incidents and assisting with response and reporting.
• Answer all TASKORDS/ taskers by MAJCOM for action on our own networks including but not limited to: vulnerability remediation and data calls.
• Review, update, and enforce the Security Concept of Operations (SECONOPS) along with the contingency plan policy.
• Maintain Risk Management Framework (RMF) packages for all networks owned/operated by the 39 IOS including, but not limited to: answer data calls, prepare system package, Categorize system by guiding documents, Select security controls for risk mitigation, Implement security controls, Assess security control effectiveness, Monitor system and update accreditation package, Security Impact Analysis (SIA) submissions for tenants requesting changes and install of new software, and Respond to and coordinate requirements for accreditation package not owned by the squadron.
• Order, issue, manage, and account for all tokens granting access to network as well as auditing and inventorying issuance of student user tokens.
• Perform COMPUSEC and Information Security (INFOSEC) duties and manage the Cybersecurity Liaison program for the squadron under the direction of the Wing Cybersecurity Office.
• Support functions aligned to DCWF work roles (Information Systems Security Manager; Security Control Assessor; Cyber Defense Incident Responder) as applicable.
• Maintain and apply required IAT/M Level II certification within the scope of assigned duties.

Information Systems Security Officer

Technical Project Manager

• Responsible for successful planning, executing, and closing information technology (IT) projects in support of client objectives.
• Ensure projects are completed on time, within scope, and within budget.
• Act as the primary point of contact for all project communications.
• Coordinate with project managers spanning the host base, wing, group, squadron, and external agencies.
• Maintain and apply required certifications (CompTIA Project+; Project Management Professional).
• Ensure Planning and Identification of projects is completed.

IT Project Manager

System Administrator

• Responsible for the effective provisioning, installation, configuration, operation, and maintenance of systems hardware, software, and related infrastructure.
• Perform system administration duties consistent with the System Administration Labor Category.
• Provide senior system administration expertise consistent with the SME experience requirement (8 years).
• Maintain and apply required IAT/M certification level (II or III) within the scope of assigned duties.
• Support system administration functions aligned to applicable DCWF work roles.
• Document system configurations, changes, and support actions as applicable.
• Understand system administration and cloud technology concepts and methodologies at the associate level with knowledge equivalent to: CompTIA Security+, VMWare Certified Professional-Data Center Virtualization, etc.
• Install, troubleshoot, and maintain physical server hardware and storage systems.
• Create and manage user accounts, computer accounts, security groups, etc.
• Create Scripts to automate tasks including PowerShell, Bash, and Python.
• Install, troubleshoot, and maintain Learning Management System software.

Systems Administrator

DevOps Engineer

• Responsible for designing, implementing, and maintaining automated solutions
• Collaborates with development, operations, cybersecurity, and quality assurance teams
• Ensures rapid delivery of high-quality services while maintaining compliance with all applicable policies, standards, and best practices
• Maintain and apply required certifications within the scope of assigned duties
• Support functions aligned to applicable work roles
• Document and maintain DevOps-related configurations and support actions as applicable
• Other duties as assigned

Translator

• Accurately interpret spoken communication between parties in real time, preserving meaning, intent, and tone.
• Translate written documents and correspondence as required, ensuring cultural and linguistic appropriateness.
• Facilitate cross-cultural understanding by clarifying non-verbal cues and culture-specific concepts, when necessary.
• Maintain strict confidentiality and impartiality in all interactions, consistent with government regulations and ethical standards.
• Complete required documentation, logs, and reports in accordance with agency and contractual protocols.
• Comply with all applicable federal, state, and local laws, government customer policies, and codes of professional conduct.
• Other duties as assigned.

Threat Intelligence Specialist

• Support data fusion from various data inputs and sources, including reported intrusion-network status from CSD Threat Hunting analysis, open source, and law enforcement and intelligence inputs to look for trends across CI.
• Provide research, analytic or operational support regarding infrastructure threats across DHS CI sectors and their sub-sectors.
• Coordinate with the IC and Component partners for additional information to include facilitating/tracking classified RFIs/RFAs with the Service Desk.
• Research and analyze all-source threats, vulnerabilities, and risks to critical infrastructure and develop all-hazards consequence analysis products in support of the mission to include independent or collaborative development of written, graphic or visual products in the steady state and incident response product lines.
• Coordinate, research, develop and deliver work on pre-planned Intelligence products in support of agency program of analysis, analytic requirements, ad-hoc tasks and incident response requirements.
• Write Intelligence estimates, products, or quick turn responses to senior leadership questions in the form of: In Response to Your Question (IRQ), Intelligence Note within requested timeframe established by senior leadership.
• Provide technical review and editing of all types of written and graphics-based products developed to include, but are not limited to, all analytic products, graphics, and strategic and policy documents.
• Support development, administration and management of Priority Intelligence/Information Requirements.
• Edit and review all intelligence products to ensure they conform to style and standards guidelines and adhere to analytic tradecraft standards.
• Track written and graphics-based products through the overall production cycle to include the tracking of requirements used to develop products.
• Support the development or refinement of intelligence templates, standard operating procedures, guides, standards and other policy directives, and instructions.
• Facilitate/track subdivision-directed RFIs and coordinate internally and externally to obtain more information or with the Intelligence Community and other agency components.
• Support incident response efforts that may require after hours, weekends or shift work.
• Other duties as assigned.

All Source Intelligence Analyst – Journeyman

QA Engineer

• Perform highly advanced managerial tasks related to QA and testing activities as well as analysis and testing tasks related to software development and configuration.
• Responsible for activities during all phases of the system development life cycle including analyzing, diagnosing and resolving reported software problems and troubleshooting system issues for internal and external clients.
• Define and review the User Acceptance Testing (UAT) strategy specific to TDLR modernization projects (guidance to team during “Soft UAT” as well) and align resources and Subject Matter Experts (SME) for all review and testing activities.
• Coordinate sprint review feedback with Vendor staff and business SMEs.
• Review of Test Cases received from Vendor with SMEs and suggest edits.
• Work with business users and SMEs to create and update test cases, perform testing, and provide test results/reports (i.e. success/pass, defects, issues/concerns, etc.).
• Act as the main point of contact between IT Division, business users, and Vendor.
• Lead triage efforts and the tracking, prioritizing, and managing of defects.
• Review defects for themes, conduct root cause analysis, and suggest improvements.
• Provide and review weekly updates on UAT progress and results.
• Provide testing-related project status updates, progress on defects, and check progress on requirement traceability and coverage.
• Ensure UAT exit criteria are met and obtain final sign-off from the business.
• Other duties as assigned.

QA Manager

• Provide A/V engineering support consistent with the Audio/Visual Engineer labor category and required A/V certification(s)
• Design, install, troubleshoot, maintain, splice, and terminate all copper and fiber cables for all 39 IOS networks
• Install, troubleshoot, and maintain Closed Circuit Television (CCTV) and AV systems including, but not limited to: Cameras, N-Version Execution (NVX) Encoders, Digital Media NVX (DM-NVX) Encoders, Digital Signal Processors, Microphones, Speakers, Amplifiers, Televisions/Displays, Servers, Switches, and Routers
• Document and maintain A/V system configurations and engineering/support actions as applicable
• Support A/V system integration with underlying IT/network infrastructure aligned to applicable DCWF work roles (e.g., Network Operations Specialist; Enterprise Architect)

Audiovisual Engineer

Software Engineer

• Design, update, and maintain operational cyber training modules and materials, including lesson plans, practical exercises, and assessments, for XCOMM Ops trainees.
• Ensure technical accuracy, relevance to mission needs, and consistency with evolving client standards and frameworks.
• Develop training scenarios that simulate real-world incidents and threats to XCOMM operations.
• Deliver in-depth, hands-on training to diverse audiences, including military operators, cyber analysts, and support teams.
• Lead facilitation of classroom-based, virtual, or in-the-field training sessions, utilizing advanced instructional tools and methods.
• Support XCOMM Ops teams by providing mission-critical insight into communications systems vulnerabilities, security protocols, and cyber risk mitigation strategies.
• Conduct research on emerging cyber threats specific to XCOMM operations and integrate findings into the training program.
• Actively participate in operational exercises and evaluations to provide technical expertise.
• Develop assessment tools to evaluate trainee performance and proficiency.
• Identify areas for improvement in student outcomes and adapt instructional materials accordingly.
• Prepare after-action reports, lessons learned, and recommendations for incorporation into future training iterations.
• Coordinate with technical writers, SMEs (Subject Matter Experts), and policy advisors to ensure training alignment with operational objectives.
• Interface with program managers and client stakeholders to ensure training objectives and deliverables are met on schedule.
• Assist with training solutions proposal development for contracts when required.
• Other duties as assigned.

Ops Cyber Instructor, Developer

• Provide expert instructional and developmental support for IO Intel training programs
• Equip personnel with knowledge and skills for complex IO and intelligence missions
• Develop and deliver instruction aligned to Operations in the Information Environment (OIE)
• Plan, design, develop, integrate, modify, update, and instruct curriculum
• Analyze training needs and recommend changes to improve existing curriculum
• Collaborate with internal and external stakeholders to ensure course material is current
• Assist in the creation of mission simulator virtual environments for training
• Provide counseling and remediation actions for students