Markon

Analyst

• Perform advanced SIGINT and cyberspace analysis to support multi-domain operations
• Respond to RFIs across multiple intelligence disciplines to solve complex problem sets
• Exploit target digital networks and develop network enumeration maps of key infrastructure
• Develop and maintain detailed target profiles, including associations, activities, and communication infrastructures
• Conduct network analysis to support intelligence collection and targeting efforts
• Identify trends in threat development, capabilities, and performance
• Provide intelligence recommendations and mitigation strategies to counter emerging threats
• Produce intelligence products including briefs, reports, threat assessments, and technical documentation
• Deliver subject matter expertise through presentations and stakeholder engagements
• Coordinate SIGINT and cyber intelligence products with interagency and Communities of Interest (COI)
• Collaborate with analysts and planners to integrate SIGINT and cyber into operational frameworks
• Conduct Scientific and Technical Intelligence (S&TI) analysis of foreign systems and technologies
• Analyze commercial and foreign devices to determine functionality and operational intent

Defense Network Exploitation Analyst – Level 4

Network Engineer

• Conduct analysis of collection and open-source data to generate actionable insights and leads
• Ensure target continuity by profiling targets, activities, and associated behaviors
• Develop techniques to acquire additional target information and enhance intelligence collection
• Maintain databases supporting targeting, tasking, and analytical efforts
• Build and maintain comprehensive baseline profiles for designated target sets
• Identify intelligence gaps and recommend adjustments to collection strategies
• Apply multiple analytic disciplines, including pattern recognition across communications, network usage, and digital footprints
• Leverage understanding of IC missions, target cultures, behaviors, and communications technologies to inform analysis
• Support development of new analytic methodologies and tradecraft
• Mentor junior analysts on tools, methodologies, and best practices for conducting TDNA

Target Development Network Analyst, Level 3

• Analyze data from multiple sources (e.g., intrusion detection systems, firewalls, network traffic logs, host system logs) to identify vulnerabilities and detect cyber threats
• Respond to cyber events and support defensive measures to protect network infrastructure and systems
• Develop and implement mitigations to strengthen network defenses and prevent future attacks
• Support a wide range of data transport environments, including wired, wireless (Wi-Fi, cellular), and collaborative platforms
• Analyze and secure hardware and software systems across diverse network architectures
• Apply analytical techniques to evaluate data, form hypotheses, and generate actionable insights
• Query, merge, enrich, and interpret large datasets to identify patterns and anomalies
• Document findings, develop tradecraft, and communicate insights to stakeholders and intelligence consumers
• Collaborate with government, military, and contractor personnel to support mission objectives
• Continuously expand expertise in networking protocols, cloud security, IoT, and advanced cybersecurity practices

Computer Network Defense Analyst – Level 3

• Analyze adversary networks, network defenses, and cyber operational capabilities
• Develop exploitation plans and recommend operational adjustments as missions evolve
• Apply analytical techniques to query, merge, enrich, evaluate, and pivot across data sets
• Form hypotheses and identify actionable insights to support cyber mission objectives
• Document and share findings, methodologies, and newly developed tradecraft
• Collaborate with government, military, and contractor teams to align intelligence needs and mission priorities
• Communicate technical findings to teammates, stakeholders, and intelligence consumers
• Support continuous improvement of analytic processes and exploitation strategies

Exploitation Analyst, Level 3

Software Engineer

• Design, develop, and deploy advanced hardware- and software-based CNO capabilities
• Manage the full software development lifecycle, including design, development, testing, debugging, and documentation
• Develop and implement algorithms to meet performance and mission requirements
• Program in low-level and high-level languages (C, C++, Python, and Assembly as needed)
• Analyze OS internals across Windows, Linux, mobile, and network devices
• Apply expert knowledge of networking protocols (TCP/IP) and socket-level programming
• Debug and troubleshoot complex systems and software applications
• Develop data queries for databases and data repositories supporting mission needs
• Lead technical efforts and provide guidance on CNO solution development
• Collaborate with cross-functional teams to deliver mission-critical capabilities

Senior CNO Developer

• Design and develop hardware- and software-based CNO capabilities
• Assist with the full software development lifecycle, including design, development, testing, debugging, and documentation
• Apply knowledge of security concepts and network technologies in software development
• Ensure adherence to software engineering standards and best practices
• Troubleshoot and debug software systems and applications
• Collaborate with team members to deliver mission-focused technical solutions

CNO Developer

Full-stack Engineer

• Design and develop new software or modify existing applications to add features and functionality
• Analyze user requirements to derive software design and performance specifications
• Debug and resolve software defects and performance issues
• Develop and implement algorithms to meet or exceed system performance standards
• Integrate existing software into new or modified systems and environments
• Develop software solutions by analyzing system performance and collaborating with stakeholders
• Write and review software and system documentation to ensure compliance with development standards
• Mentor development teams and provide technical guidance throughout the development lifecycle
• Ensure work is completed in accordance with established software development processes and constraints

• Support Fort Meade customer mission operations through intrusion detection, analysis, and reporting.
• Analyze cyber threat activity targeting high-value and hard targets, including state-sponsored APTs.
• Leverage SIGINT systems to collect, analyze, and exploit technical cyber data.
• Use customer-provided analytic and mission toolsets to identify adversary tactics, techniques, and procedures (TTPs).
• Correlate SIGINT, network, and host-based data to assess intrusions and threat actor behavior.
• Produce timely, actionable intrusion and threat intelligence reporting for operational and leadership audiences.
• Collaborate with cyber operators, analysts, and mission partners to support defensive and investigative actions.

Intrusion Analyst – Level 3

Security Engineer

• Lead and support all phases of the Risk Management Framework (RMF) process in accordance with NIST SP 800-37 and related standards.
• Develop, maintain, and update RMF documentation including: System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and Continuous Monitoring Strategies.
• Coordinate security authorization packages for Authorization to Operate (ATO) decisions.
• Apply and validate security controls based on NIST SP 800-53 and organizational overlays.
• Conduct control assessments and support independent security assessments and audits.
• Identify security gaps and recommend remediation actions.
• Support continuous monitoring programs to ensure ongoing compliance with security controls.
• Track vulnerabilities, risks, and mitigation progress through POA&M management.
• Communicate security posture and risk status to technical and non-technical stakeholders.

Information Assurance, RMF Security Specialist

• Support developers by integrating modern tools and practices into software workflows.
• Onboard personnel and projects to new tools, processes, and environments.
• Work effectively in offline (air-gapped) environments.
• Develop and troubleshoot software in multiple languages (Java, Python, C/C++).
• Use and maintain various build systems and software pipelines.
• Apply container technologies (Docker, Podman, Kubernetes) in development and deployment.
• Troubleshoot development issues and provide customer-focused support.
• Use Git and hosting services (GitHub, Bitbucket) for version control.
• Manage packages with tools like Conda, Spack, and Lmod.
• Connect to and work with databases (Oracle, PostgreSQL, MSSQL).
• Use development tools like VS Code and Linux/Unix CLI.
• Implement and support CI/CD processes (Jenkins, GitHub Actions, Tekton).
• Understand and manage pipeline integrations across tools and systems.
• Interpret and resolve toolchain and integration errors.

Software Developer

• Conduct vulnerability research on software systems, operating systems, and embedded platforms
• Perform reverse engineering using industry-standard tools to analyze binaries and identify vulnerabilities
• Assist in developing, testing, and refining exploits and related capabilities
• Analyze system behavior at the OS and application level across Windows, Linux, iOS, and Android
• Work with low-level programming and assembly across multiple architectures (x86, x64, ARM, etc.)
• Support analysis and development involving embedded systems and hardware interfaces (e.g., JTAG/BDI)
• Evaluate common exploit mitigations such as DEP and ASLR
• Analyze and work with network protocols, including TCP/IP and other communication protocols
• Use debugging tools to troubleshoot and understand application and system behavior
• Contribute to the development of tools for vulnerability discovery and analysis
• Collaborate with team members to support mission objectives and technical solutions

CNO Developer, Level 1

• Conduct vulnerability research on complex software systems, operating systems, and embedded platforms
• Perform reverse engineering using tools such as IDA Pro, Ghidra, Binary Ninja, and related technologies
• Develop, test, and refine exploits and support their transition into operational capabilities
• Analyze OS internals across Windows, Linux, iOS, and Android environments
• Develop and analyze low-level code using assembly and languages such as C, C++, and Python
• Work across multiple architectures (x86, x64, ARM, PPC, MIPS, etc.)
• Analyze and develop solutions for embedded systems and hardware interfaces (e.g., JTAG/BDI)
• Evaluate and bypass exploit mitigations such as DEP and ASLR
• Analyze and work with network protocols, including TCP/IP stacks, routing protocols, and RF communications
• Utilize debugging tools (e.g., gdb, WinDbg, OllyDbg) to analyze system behavior
• Design and develop tools for vulnerability discovery, exploitation, and analysis
• Collaborate with team members and provide technical guidance on projects

CNO Developer, Level 2

Engineer

• Perform reverse engineering of hardware components, software applications, and operating systems to determine functionality, code structure, and circuit design
• Analyze binaries and system internals to identify vulnerabilities and assess system behavior
• Program in Assembly, C, C#, C++, Java, Perl, or Python to support reverse engineering efforts
• Administer and utilize hardware and software reverse engineering tools
• Perform computer forensics and kernel-level analysis
• Apply reverse engineering techniques to support development of tools and capabilities
• Use version control systems (e.g., Subversion, CVS) to manage code and artifacts
• Develop proof-of-concept code, prototypes, and demonstrations based on analysis results
• Produce detailed technical reports and documentation of findings
• Deliver technical presentations to internal and customer stakeholders
• Collaborate with cross-functional teams to provide reverse engineering expertise in support of mission objectives

Reverse Engineer, Level 2

Customer Support

• Design, develop, troubleshoot, and debug complex software applications.
• Passionate about programming, passionate about quality and enjoy communicating and working with end-users.
• Work in a team environment.
• Provide technical support for multiple applications (legacy and newly developed GOTS as well as COTS).
• Build and maintain a deep understanding of functionality, configuration, and limitations of multiple applications.
• Collaborate with application developers to identify and report defects, bugs, and other issues that impact application reliability and maintenance.

User Support Specialist

System Administrator

• Deploy, manage, and scale applications and infrastructure supporting the DEFSMAC mission.
• Administer and maintain RKE2/Kubernetes cluster environments.
• Manage and support containerized applications using Docker.
• Perform system administration tasks within Unix/Linux environments, including troubleshooting and performance tuning.
• Develop and maintain automation scripts using Bash.
• Monitor system health, availability, and performance across containerized environments.
• Troubleshoot infrastructure and application-level issues across compute, storage, and networking layers.
• Support configuration management, system updates, and security compliance efforts.
• Collaborate with engineering and operations teams to support continuous integration and deployment workflows.
• Maintain documentation for system configurations, procedures, and operational support.