Rise8

Analyst

• Collaborate with cross-functional teams to apply cybersecurity best practices across systems, applications, and cloud environments.
• Lead portions of cybersecurity assessments across the technology stack, identifying vulnerabilities and recommending remediation strategies.
• Assist in shaping cybersecurity risk management activities, helping prioritize and guide security initiatives to protect critical assets.
• Engage with external cybersecurity and compliance organizations to support alignment with Continuous RMF (cRMF) and DoD frameworks.
• Lead incident response investigations for medium-complexity events, conducting root cause analyses and proposing resilience improvements.
• Provide cybersecurity education and regular reporting on risks, metrics, and issues to technical and leadership audiences.
• Mentor junior team members, supporting skills development and fostering a culture of proactive security practices.

Senior InfoSec Analyst

• Lead and collaborate with cross-functional teams to enhance security processes and implement best practices.
• Conduct comprehensive cybersecurity assessments across the entire technology stack to identify vulnerabilities and ensure robust security measures.
• Shape and prioritize the organization’s cybersecurity strategy, identifying key risks and remediation actions to protect critical assets.
• Collaborate with external cybersecurity and compliance organizations to drive changes that align with cRMF practices, accelerating the time to value and enhancing overall security outcomes.
• Lead incident response efforts, conducting root cause analyses and driving improvements to security resilience.
• Educate on cybersecurity best practices and provide regular reports on risks, metrics, and issues to leadership, ensuring informed decision-making and proactive risk management.
• Train and mentor security engineers, fostering growth and up-skilling of the cybersecurity practice team members.

Staff InfoSec Analyst

• Support cross-functional teams by applying cybersecurity best practices to enhance security operations and processes.
• Assist in conducting cybersecurity assessments across the technology stack to identify vulnerabilities and help implement remediation strategies.
• Contribute to risk identification and mitigation efforts, providing input to help prioritize cybersecurity initiatives.
• Support collaboration efforts with external cybersecurity and compliance organizations to maintain alignment with Continuous RMF (cRMF) and DoD security frameworks.
• Participate in incident response activities, helping document root cause analyses and recommending basic resilience improvements.
• Deliver security awareness sessions and provide updates to internal stakeholders on cybersecurity risks, issues, and remediation status.
• Continually develop your cybersecurity knowledge and contribute to team training and knowledge-sharing efforts.

InfoSec Analyst III

Recruitment

• Own candidate discovery for Delivery-side hiring (Product, Design, Software Engineering, Platform, Marketing, Growth, Customer Success, etc). You’ll run targeted sourcing campaigns, conduct crisp initial screens, and hand off well-qualified candidates to the Talent Acquisition Partner. Success means a steady, predictable pipeline of high-quality candidates who pass through screening into skills assessments.
• Source candidates across LinkedIn Recruiter, referrals, job boards, ClearanceJobs.com, Slack communities, and events (As Needed).
• Run targeted outreach campaigns and maintain nurture pools for future demand.
• Conduct initial phone screens to qualify skills/company fit, compensation expectations, location, interest, and availability.
• Maintain candidate records and activity in Greenhouse (source, notes, tags, outreach dates, status).
• Collaborate with Talent Acquisition Partner to refine candidate profiles and improve conversion.
• Track outreach results, measure channel performance, and report on what’s working.
• Manage high-volume outreach while keeping candidate experience high and responsive.
• Represent Rise8 at recruiting events (when needed) and help build employer brand in targeted communities.

Recruiter

DevOps Engineer

• Contribute to the development of CI/CD principles to enhance software delivery processes.
• Regularly review and refine CI/CD principles in an iterative manner.
• Provide knowledgeable guidance on the development and operation of CI/CD tools and platforms.
• Collaborate closely with product teams to create and sustain pipeline configurations.
• Implement process automation to streamline and minimize manual efforts.
• Maintain open communication with product teams within your portfolio to understand their software build and deployment requirements, ensuring CI/CD facilitates a seamless experience.

Senior CI/CD Engineer – Top Secret

Security Engineer

• Serve as the cornerstone of Rise8’s industrial security program — owning FCL maintenance, NISPOM compliance (32 CFR Part 117), and the company’s relationship with DCSA/DoD security authorities.
• Manage all personnel security lifecycle activities (e-QIP, NBIS, DISS, NISS) including investigations, upgrades, debriefs, CAC issuance, and VAR coordination.
• Act as the Insider Threat Program Senior Official (ITPSO): develop and operate the Insider Threat program, deliver training, and run required monitoring and reporting activities.
• Develop, maintain, and socialize Security SOPs/SPPs, CUI handling guidance, acceptable use policies, and annual security training.
• Oversee physical security for Rise8 facilities and SCIF-equivalent environments: access control, alarms, visitor management, secure workspace design, and classified material handling/destruction.
• Lead incident response for all security events (data spills, suspected compromises, unauthorized disclosures, loss/theft, personnel security issues) — coordinate investigations and required reporting to DCSA/DoD and internal leadership.
• Align industrial security with cyber and compliance programs (CMMC L2, NIST SP 800-171, FedRAMP High) to ensure consistent physical-to-digital governance and control mapping.
• Prepare for and lead DCSA Security Reviews, internal self-inspections, DD254 execution, contract security deliverables, and remediate audit findings quickly and transparently.
• Act as primary liaison to government security agencies and contracting officers; interpret contract security clauses and advise program teams on implementation.
• Provide security advisory support to executive leadership and program managers — translate contract/classified requirements into practical program controls and risk mitigations.
• Mentor and train program teams and contributors on security best practices; drive continuous improvement of security processes and tooling.
• Maintain security program metrics and reporting for executive visibility (e.g., clearance timelines, open findings, training completion, VAR backlog).

Facility Security Officer, FSO

• Secure cloud-based environments by designing and implementing native security solutions using services.
• Drive Continuous RMF practices, automating control implementation and reporting through modern methodologies like Continuous Authorization to Operate.
• Automate provisioning and configuration of IT environments
• Implement and manage security measures like firewalls, IDS/IPS, vulnerability scanning, encryption, and ICAM solutions.
• Secure containerized and large-scale cloud production systems while responding effectively to security incidents.
• Apply advanced security concepts to protect systems, including threats, vulnerabilities, encryption, boundary defense, and risk management.
• Establish and manage identity and access management policies, ensuring least-privilege access and cross-account role adherence.
• Create and maintain engineering artifacts, such as network diagrams, data flow diagrams, installation procedures, and operational manuals.
• Enforce cloud-native security best practices, leveraging frameworks like AWS’s Well-Architected Security Pillar
• Collaborate with cross-functional teams to integrate Zero Trust principles into the broader security posture, aligning with DoD policies such as the Risk Management Framework (RMF)
• Apply and operationalize RMF, FedRAMP, and DISA CC SRG controls, ensuring compliance with DoD Impact Levels.
• Collaborate with cross-functional teams to integrate lean and agile practices into secure development lifecycles.
• Contribute to the continuous improvement of DevSecOps practices, ensuring systems are secure, scalable, and compliant.
• Work in a dynamic, collaborative environment that supports your professional development.

Senior Cybersecurity Engineer – Top Secret

Platform Engineer

• Create and implement automated configuration and deployment processes to enhance the performance, accessibility, and ease of management of the platform and its related services.
• Establish and manage administrator and service accounts, while also maintaining accurate system documentation and effectively resolving technical issues.
• Utilize scripting tools to craft self-service capabilities within the Platform as a Service (PaaS), fostering a seamless developer experience for development teams.
• Collaborate closely with developers to diagnose and troubleshoot problems, ensuring smooth operations.
• Take on the operational responsibility for the services under your team's ownership.
• Thrive in an environment that nurtures your personal development and growth.
• Continuously enhance the product, delivering software that resonates positively with users and meets their needs effectively.

Senior Platform Engineer – Secret

Solutions Engineer

• Own the end-to-end technical solutioning process that brings Rise8’s value to life for our customers. You’ll blend deep engineering expertise with storytelling and strategy, connecting the dots between customer needs, technical feasibility, and mission outcomes.
• Lead pre-capture and proposal solutioning efforts, support business growth through technical credibility, and guide delivery teams toward successful execution of architectures you help define.
• Lead technical solutioning sessions with customers to translate mission needs into actionable architectures and delivery strategies.
• Scope engagements and frame delivery approaches that align with Rise8’s agile software delivery model.
• Conduct technical assessments and deep dives across applications, platforms, and data environments.
• Facilitate workshops or design sprints to uncover requirements, align stakeholders, and define solution boundaries.
• Write and review technical sections of proposals, including architectures, implementation plans, and engineering strategies.
• Develop prototypes, demos, or code samples to validate ideas and demonstrate technical feasibility.
• Participate in orals presentations, coding challenges, and customer discussions, demonstrating technical credibility and thought leadership.
• Advise clients on architectures, cloud platforms, and product strategies that enable scalability, resilience, and security.
• Collaborate with Growth Managers and Proposal Specialists to craft winning solution narratives and technical differentiators.
• Support technical hiring and mentorship, helping shape Rise8’s technical excellence across teams.
• Maintain awareness of emerging technologies and government modernization initiatives, applying them to solution design.

Solutions Architect

• Drive Rise8’s cybersecurity posture and practice across delivery and client engagements. You’ll own CMMC readiness and compliance, SCG/CUI governance, and act as our cATO SME while building and scaling a high-trust Cyber Practice that supports both internal operations and customer missions. This is a hands-on leadership role that blends technical depth (architecture, DevSecOps, secure cloud operations) with program-level responsibility (SSP/POA&amp;M ownership, audit readiness, customer briefings, staffing and capability delivery).
• Own CMMC (2.0) program delivery end-to-end — policy, System Security Plans (SSPs), POA&Ms, evidence collection, assessor engagements, and audit readiness.
• Lead SCG / CUI governance: define handling policies, training, marking/labeling guidance, and cross-contract controls.
• Serve as the company cATO SME: design and operationalize continuous Authorization-to-Operate approaches, advise customers on sustainment, and integrate continuous monitoring tooling and processes.
• Build and lead the Cyber Practice: define service offerings (advisory, readiness, implementation, managed services), craft go-to-market materials, scope engagements, and own delivery quality.
• Provide technical leadership on secure architecture, cloud security (AWS/Azure/GCP), identity &amp; access management, DevSecOps integration, vulnerability management, SIEM/SOAR operations, and incident response.
• Drive evidence collection and tooling integration to make compliance repeatable and auditable (automation of evidence, drift detection, configuration baselines).
• Support proposals, SOWs, pricing, and technical capture; brief executives and DoD/federal customers on security strategy and risk posture.
• Hire, mentor, and grow cybersecurity staff and contractors; establish OKRs, career bands, and practice playbooks.
• Partner closely with IT, Delivery, Legal, and People Ops to ensure contract-level security obligations are satisfied and sustained.
• Maintain relationships with assessors, auditors, third-party vendors, and MSSPs; select and manage partners as needed.
• Run tabletop exercises, incident post-mortems, and continuous improvement cycles to reduce risk and harden operations.
• Measure and report on cyber KPIs (POA&amp;M closure rate, time-to-remediate, control maturity, audit status) for leadership and customers.

Director of Cybersecurity

Director

• Own day-to-day IT operations and engineering work that keep Rise8 secure, productive, and compliant.
• Lead IT operations: endpoint management (MDM/EDR), patching, device provisioning/deprovisioning, backups, and asset inventory.
• Identity & access management: manage SSO, MFA, service accounts, role-based access, and contractor onboarding/offboarding workflows. Support CAC/PIV and DoD authentication patterns where required.
• Implement and enforce NIST SP 800-171 controls and support CMMC evidence collection: maintain control baselines, run periodic checks, and provide artifacts for SSPs and POA&Ms.
• Vendor & tooling management: own relationships with infrastructure, endpoint, and security vendors (e.g., MDM/EDR, EMM, backup, SSO, M365/GSuite, VPN, cloud providers) and coordinate support with third-party teams (e.g., managed service providers).
• Cloud & network support: assist with secure cloud configuration (AWS/Azure/GCP), VPNs, firewall rules, VPCs/subnets, and connectivity required for customer environments.
• Support DevSecOps and delivery teams by integrating secure tooling, logging/monitoring hooks, and onboarding developer workstations/environments.
• Incident response & escalation: serve as first/second line for operational incidents, coordinate containment/remediation with Cyber team, and help execute tabletop and post-incident reviews.
• Drive automation & standardization: automate repetitive operational tasks (provisioning, evidence collection, patch reporting) and improve runbooks/playbooks for recurring workflows.
• Maintain documentation and runbooks: keep operational runbooks, configuration baselines, and network/topology docs current for audits and handoffs.
• Provide user-facing support: triage and resolve employee IT issues, coordinate change windows, and maintain a good employee support experience across a remote workforce.
• Work closely with the Director of Cybersecurity to ensure operational alignment with compliance roadmaps, audits, and continuous monitoring initiatives.

IT Director

• Create and implement automated configuration and deployment processes to enhance platform performance, accessibility, and manageability
• Establish and manage administrator and service accounts, maintain accurate system documentation, and resolve technical issues
• Utilize scripting tools to craft self-service capabilities within the Platform as a Service (PaaS) to improve developer experience
• Collaborate closely with developers to diagnose and troubleshoot problems and ensure smooth operations
• Take operational responsibility for services owned by your team
• Ensure project success and client satisfaction through reliable platform operations
• Continuously enhance the product and deliver software that meets user needs
• Participate in a collaborative, pairing-focused team environment that supports personal development

Platform Engineer III, TS/SCI

• Create and implement automated configuration and deployment processes to enhance the performance, accessibility, and ease of management of the platform and its related services.
• Establish and manage administrator and service accounts, while also maintaining accurate system documentation and effectively resolving technical issues.
• Utilize scripting tools to craft self-service capabilities within the Platform as a Service (PaaS), fostering a seamless developer experience for development teams.
• Collaborate closely with developers to diagnose and troubleshoot problems, ensuring smooth operations.
• Take on the operational responsibility for the services under your team's ownership.
• Work in small, rotating teams and pair with customer counterparts to deliver production-ready outcomes.
• Continuously enhance the product, delivering software that resonates positively with users and meets their needs effectively.
• Participate in an environment that nurtures personal development and growth.

Cleared Platform Engineer III, TS/SCI

• We’re transforming the United States Government and we know that takes a dream team.
• We believe customer experience starts with employee experience, so we take care of our employees. We offer competitive pay and benefits, invest in employee growth, and offer a culture you can’t find anywhere else.
• At Rise8, we continuously achieve unreached heights through next-level tech, and on-the-level collaboration. Together, we create continuous impact. We turn breakdowns into breakthroughs, make small steps into giant leaps, and deliver game-changing products through culture-changing process.
• We pair Risers with their customer counterparts and practice pairing at every moment to elevate people and teams and deliver results fast and forever. We work in small teams and rotate between them frequently so that we are able to meet new challenges and explore new ideas.
• Our methodology is about experimenting and learning, and our culture is empowering. We subscribe to an ethos of kindness. We make a point to bring empathy to each and every project and are guided by a promise and a purpose: to deploy critical outcomes to prod in order to drive relentless progress. Not just an idea. But an outcome. A better world. A world where every day, fewer bad things happen because of bad software.
• Rise8 is certified as a Great Place to Work with 100% of employees saying they love working here.
• About You
• You want to make tomorrow better than today.
• You have a passion for high-speed security and you care about risk management over compliance.
• You believe the biggest vulnerability in any system is time. You live to securely reduce cycle time.
• You enjoy daily decision making and real product delivery.
• You help ensure project success and client satisfaction.
• You enjoy collaborative teams, pairing with team members, and inviting your clients to participate.
• You like to work alongside, and learn from, lean and agile leaders.
• You are a creative problem solver who is comfortable with uncertainty.
• You are a curious and keen learner who thrives on enhancing your (and our) practices and knowledge.
• As a Senior AIOps Platform Engineer at Rise8, you will:
• Specialize in transforming raw machine data into predictive, actionable intelligence.
• Be the hands-on expert for designing and implementing our client's next-generation monitoring platform using Splunk IT Service Intelligence (ITSI)
• Your work will be critical in moving the client from a reactive to a proactive operational model, helping them predict and prevent outages before they impact critical services.
• Responsibilities:
• Design, build, and maintain service health models and Key Performance Indicators (KPIs) within Splunk ITSI.
• Onboard new data sources into Splunk, including parsing, extraction, and transformation of data.
• Develop advanced dashboards and \"glass tables\" to provide real-time visibility for both technical teams and executive leadership.
• Configure and tune ITSI's machine learning and anomaly detection features to identify and predict service degradations.
• Work closely with application owners to map their services and dependencies, creating a true end-to-end view of service health.
• Qualifications
• 6+ years of experience with a major log aggregation and monitoring platform, with a strong preference for Splunk.
• Must-Have: Deep, hands-on experience with Splunk IT Service Intelligence (ITSI) or a comparable AIOps platform (e.g., Datadog, Dynatrace).
• Expert-level proficiency in Splunk's Search Processing Language (SPL) or equivalent query languages.
• Demonstrated experience in a large-scale IT operations, infrastructure engineering, or Site Reliability Engineering (SRE) role.
• Proficiency in administering cloud environments (AWS, Azure or GCP).
• Skilled in developing automation solutions using scripting languages to streamline recurring tasks.
• Preferred Qualifications:
• Proficiency in troubleshooting challenges using the Linux/Unix command line interface.
• Expertise in container orchestration, specifically Kubernetes.
• Proficient use of Infrastructure as Code (IAC) tools, with a focus on Terraform.
• Possession of recognized Professional Certifications such as RHCE, Linux+, MCSA, AWS Solutions Architect, AWS Developer, Security+, CISSP, and CCNA.
• Background in DevOps automation practices.
• Salary
• The annual salary range for this role as it is posted is $163,121 - $244,681 regardless of final candidate location within the United States. The final job level and annual salary will be determined based on the education, qualification, knowledge, skills, ability, and experience of the final candidate(s), and calibrated against relevant market data and internal team equity.
• Benefits
• Flexible schedule in a 100% distributed workforce
• Premium Insurance: We cover up to 100% of the employee premium and up to 80% of the combined dependent premium on our base health plan, depending on pay band. We also cover 100% of the premium for employee and dependent Dental and Vision as well as employee premiums for Life and Disability coverage.
• Retirement: 401k match at 10% gross pay.
• Paid time off (PTO): 4 weeks combined accrued vacation and sick leave, 11 Federal holidays, your birthday, jury duty, and bereavement.
• Education & Training: Accrued budget of up to $3,500 per year for classes, travel, events, and materials.
• Home Office and Merch: We offer $750 per year for home office technology and equipment as well as $100 per year for Rise8 merch from our Swag Store.
• Wellness Budget: To encourage and support a well-rounded healthy lifestyle, we cover 100% reimbursement on a variety of wellness activities and products, up to $500 per calendar year. Or Rise8 is part of the the Life Time Corporate Partner program. In lieu of your $500 annual wellness benefit, you can instead get a $75 monthly credit towards a Life Time membership ($900 annual benefit).
• Equipment: We offer a MacBook Pro

Senior AIOps Platform Engineer

• As a Senior Automation Security Engineer at Rise8, you will: Focus on making the client's security and IT operations faster, more efficient, and more reliable through automation.
• Be the hands-on expert for Splunk SOAR, designing and building automated "playbooks" that orchestrate responses to incidents.
• Your work will directly reduce manual toil, shorten incident resolution times from hours to seconds, and embed security into the fabric of IT operations.
• Design, develop, test, and maintain automation playbooks within Splunk SOAR (or a similar SOAR platform).
• Write robust, maintainable Python scripts to create custom automation logic and integrate with third-party tools.
• Utilize REST APIs to connect the SOAR platform with a wide range of IT and security systems (e.g., ticketing systems, firewalls, threat intelligence feeds).
• Work with the security and IT operations teams to identify and prioritize manual processes that are ripe for automation.
• Ensure all automated workflows are built securely and adhere to client compliance requirements.

Senior Automation Security Engineer

• Create and implement automated configuration and deployment processes to enhance the performance, accessibility, and ease of management of the platform and its related services.
• Establish and manage administrator and service accounts, while also maintaining accurate system documentation and effectively resolving technical issues.
• Utilize scripting tools to craft self-service capabilities within the Platform as a Service (PaaS), fostering a seamless developer experience for development teams.
• Collaborate closely with developers to diagnose and troubleshoot problems, ensuring smooth operations.
• Take on the operational responsibility for the services under your team's ownership.
• Design and implement solutions for large-volume, long-term cold data storage, including Tier 2 on-prem to Tier 3 cloud migrations, with large capacity expectations.
• Integrate with existing and emerging data lakes by establishing and managing Authorizations to Connect (ATCs).
• Support mission data access, archive, and playback solutions in collaboration with partners ensuring program alignment and modernization baselines.
• Engineer resilient, secure, multi-site cold storage solutions at Secret-level classification, optimized for infrequent access and data older than one year.
• Thrive in an environment that nurtures your personal development and growth.
• Continuously enhance the product, delivering software that resonates positively with users and meets their needs effectively.

Cleared Senior Platform Engineer - Cloud & Cold Storage Ops

Full-stack Engineer

• Work with clients who have never before taken part in design thinking, test-driven-development (TDD), paired programming, continuous-release deployment, backlog management, or even interacted with the user they provide software to.
• Teach the why behind each of these practices, be flexible to client preferences, and discover new tools that will enable your customer to understand the value that comes with agile software development.
• Be responsible for learning how your client likes to learn, how they like to receive feedback, and what ubiquitous language they use so you can speak in terms that resonate with them.
• Learn, teach, and change your approach constantly to best collaborate towards a new way of thinking about engineering.
• Pair with the customer’s developers and engineers to teach them how to develop and deliver user stories that provide business value, technical feasibility, and user-driven functionality.
• Deliver functionality by developing working software and ensure a reliable software solution.
• Ensure that development is delivered week over week and continuously gauge feedback from real users in real time.
• Pairing with military service people and other developers to deliver value in real time.
• Responsible for building and testing software solutions and ensuring the team builds upon what we provide not only technically but what we can teach through our practices.
• Work with a balanced team in mind while building software that fits the user needs, business objectives, and stakeholder vision so the team can quickly make informed engineering decisions based on validated assumptions.