True Zero Technologies, LLC

Software Engineer

• Design and implement RESTful, SOAP, or GraphQL services following industry best practices and API-first principles.
• Integrate third-party services, APIs, and databases to enhance the capabilities of internal applications.
• Implement robust authentication and authorization mechanisms (e.g., OAuth, JWT) to protect sensitive endpoint data.
• Write and maintain comprehensive, easy-to-understand documentation for internal and external developers to consume.
• Monitor performance, resolve bottlenecks, and implement caching and load-balancing technique
• Proficiency in backend languages such as Python, Java, JavaScript, or C#.
• Strong understanding of web protocols and architectural styles, specifically REST, GraphQL, and SOAP.
• Experience with tools like Postman, Swagger, OpenAPI, or SoapUI.
• Familiarity with cloud platforms (AWS, Azure, GCP)
• Basic knowledge of DevOps practices, containerization (Docker, Kubernetes), and automated testing pipelines
• Experience handling JSON and XML data formats.
• Expertise in authentication and authorization mechanisms such as OAuth2 and JWT.
• Experience querying and managing both SQL and NoSQL databases (e.g., PostgreSQL, MongoDB).

Senior API Developer

Recruitment

• Maintain and update candidate data in the Applicant Tracking System (ATS).
• Guide candidates through the hiring process, providing updates and answering questions.
• Facilitate background checks, reference checks, and assist with onboarding new hires.
• Help draft job postings, manage job boards, and assist with sourcing talent.
• Coordinate and participate in job fairs and potential networking events.
• Demonstrate exceptional attention to detail and the ability to manage multiple priorities.
• Possess outstanding written and verbal communication skills.
• Maintain proficiency with Applicant Tracking Systems and calendar management tools.

Talent Acquisition Coordinator

AI Engineer

• This candidate will be configuring data pipelines, establishing data ingestion processes, and implementing predictive modeling components that analyze five (or more) years of historical data to generate time- and location-based risk forecasts.
• Role includes integration with existing systems and data to ensure seamless data flow and usability within current operational workflows.
• Experience with all AI models to validate data integrity, model performance, and system reliability.
• Assessing prediction accuracy, ensuring alignment between forecasted and observed patterns, and verifying that outputs are operationally meaningful for command staff and field leadership.
• Experience within STRIDE platform.
• Build machine learning and deep learning models (e.g., neural networks, LLMs) to address specific business problems.
• Fine-tune AI models to ensure high performance, scalability, and efficiency in cloud environments.

Senior AI Engineer

Security Engineer

• Endpoint Data Analysis: Lead the team in analyzing data from Tanium modules (Asset, Discover, and Inventory) to identify unauthorized hardware, software discrepancies, and gaps in enterprise visibility.
• Vulnerability & Compliance Assessment: Interpret results from the Comply and Patch modules to perform deep-dive analysis into the organization’s attack surface. Prioritize remediation efforts based on risk scoring, exploitability, and mission impact.
• Threat Hunting & Pattern Recognition: Utilize the Threat Response and Impact modules to analyze Indicators of Compromise (IoCs). Conduct trend analysis to identify recurring threat vectors and suspicious endpoint behavior.
• Cross-Functional Impact Analysis: Analyze USCC and DCDC directives to determine the specific operational risks to enterprise systems. Translate these directives into technical queries and monitoring strategies.
• Intel & IoC Management: Evaluate intelligence feeds to identify relevant IoCs. Manage the lifecycle of these indicators within the Tanium platform, ensuring detection logic is refined to reduce false positives.
• ACEM Analytics: Monitor Automated Continuous Endpoint Monitoring (ACEM) outputs to provide real-time situational awareness of the network's security posture.
• Reporting and Documentation: Manage and generate cybersecurity RMF artifacts such as System Security Plans, POA&M (Plans of Action & Milestones), and security CONOPS (Concept of Operations).
• Executive Dashboards: Design and manage Trend boards to communicate complex security metrics to leadership, focusing on long-term risk reduction and security posture maturation.
• Continuous Process Improvement: Regularly review and update vulnerability management processes and procedures (SOP) based on lessons learned from routine and event-oriented incidents in accordance with DoD regulations, directives, and industry best practices.
• Excellent communication skills along with Team management able to do planning and scheduling with team members.

Cybersecurity Tanium SME

Engineer

• Configure, manage, and maintain Palo Alto Next-Generation Firewalls (NGFW) and Panorama.
• Create and enforce security policies, including NAT, rules, VPN, and URL filtering.
• Identify and resolve network security, traffic inspection, and connectivity issues.
• Deploy security solutions (intrusion detection/prevention) to protect data centers.
• Utilize scripting (Python, bash) and API integration to automate tasks and optimize configurations.
• Ensure adherence to industry best practices and maintain compliance documentation

• Actively identify and prioritize security risks, utilizing vulnerability scanning for cloud workloads, containers, and Kubernetes.
• Configure security policies across AWS, Azure, GCP, and OCI to enhance security posture, focusing on misconfigurations and compliance.
• Integrate Wiz scanning tools (SAST, DAST, SCA) directly into developer workflows and CI/CD pipelines for "shift-left" security, allowing developers to catch risks early.
• Use the Wiz Security Graph to visualize attack paths, prioritizing toxic combinations of vulnerabilities over isolated alerts.
• Work with developer teams to remediate findings, providing technical expertise on cloud security, IAM permissions, and threat detection
• Manage agents for VM and conducting CSPM and integrate CI/CD Pipelines (multi-cloud infrastructure)
• Lead the end-to-end installation and configuration of Wiz agents (Red, Blue, Green) within cloud infrastructure to detect risks and vulnerabilities.

WIZ Engineer

• Oversee RBAM projects, schedules, milestones, and team execution
• Facilitate meetings and brief leadership on status, risks, priorities, and progress
• Lead and coordinate vulnerability management activities across enterprise systems, including vulnerability identification, prioritization, remediation tracking, and validation
• Oversee remediation efforts by working with system owners, engineers, administrators, database teams, and other stakeholders to ensure timely and risk-informed mitigation
• Apply knowledge of CVE, CVSS, NVD, and the CISA KEV catalog to support risk-based vulnerability prioritization and remediation sequencing
• Establish, manage, and enforce configuration baselines across Windows, Linux, network, cloud, containerized, and database environments
• Incorporate security configuration baselines into configuration management processes, including operating system image hardening, automation, audit, and compliance validation
• Support configuration management practices aligned with NIST SP 800-128 and other applicable federal guidance
• Coordinate database hardening activities across relational, NoSQL, and cloud-native database environments
• Apply DISA STIGs, CIS Benchmarks, and hardening best practices to support secure database configuration and compliance
• Assess on-premises and cloud-hosted database environments for security posture, hardening compliance, logging, encryption, data masking, and audit readiness.
• Use scanning and validation tools to verify database hardening compliance and identify configuration gaps
• Translate audit requirements into actionable technical configurations, remediation tasks, dashboards, reports, and evidence artifacts
• Develop, modify, and maintain dashboards and reports in Splunk or similar SIEM platforms to support leadership visibility, operational tracking, and program performance.
• Use enterprise ticketing systems such as ServiceNow to document findings, assign remediation actions, track progress, and support auditability
• Support automation through scripting, Splunk searches, and repeatable workflows using tools such as Python, PowerShell, Bash, or similar technologies
• Support DevSecOps and CI/CD pipeline activities by helping integrate vulnerability management, configuration validation, and hardening requirements into development and deployment processes.
• Coordinate with technical teams to ensure remediation, configuration, and database security activities are properly documented and supported by evidence
• Provide technical guidance to stakeholders on remediation priorities, configuration risk, database hardening, and cyber hygiene improvement.
• Support recurring reporting on vulnerability trends, remediation progress, configuration compliance, database hardening status, operational gaps, and risk reduction.
• Help mature the risk-based asset management program by improving processes, automation, reporting, evidence generation, and stakeholder coordination
• Direct and support enterprise vulnerability scanning, analysis, remediation prioritization, and reporting
• Guide the development and enforcement of secure configuration baselines across systems and platforms
• Coordinate database hardening, patching, scanning, and compliance activities with stakeholders
• Review cyber hygiene findings and translate results into actionable remediation plans
• Support evaluation of new technologies and products through security review and software approval processes
• Develop or enhance dashboards, reporting, and metrics to improve visibility into risk and remediation progress
• Support process improvement, automation, and operational maturity efforts across the RBAM function
• Ensure work products, reporting, and technical activities align with DHS, client, and federal cybersecurity expectations
• Lead and coordinate vulnerability management, configuration management, and database hardening activities

Lead Cyber Hygiene Engineer

• Installing, configuring, and upgrading SCCM/MECM hierarchy, site systems, and clients. High level of end point support (500,000+)
• Packaging and deploying applications, software updates, and security patches (IAVM/AGM) to workstations and servers.
• Imaging and provisioning machines, using PXE boot, task sequences, and managing drivers.
• Ensuring systems meet compliance standards and generating reports on asset inventory and patch status.
• Analyzing logs (SMSProv.log, WUAHandler.log, etc.) to resolve client communication or deployment failures

SCCM Engineer Lead

Network Engineer

• Support the maintenance and management of IT infrastructure within the NOC environment.
• Monitor system performance, availability, and operational health.
• Assist with troubleshooting hardware, software, network, and system-related issues.
• Perform routine system maintenance in accordance with established procedures.
• Support patching and system update activities to help ensure systems remain current and secure.
• Maintain and monitor system backups and backup-related processes.
• Manage or assist with user accounts, access permissions, and basic identity administration tasks.
• Provide technical support to NOC staff to help ensure seamless daily operations.
• Work closely with network engineers, system administrators, and other IT personnel to resolve operational issues.
• Assist with identifying recurring problems and recommending improvements to system reliability and performance.
• Support the implementation of approved system and infrastructure changes.
• Document system configurations, changes, incidents, troubleshooting steps, and resolutions accurately.
• Communicate clearly with both technical and non-technical stakeholders.
• Follow established operational procedures, escalation paths, change management practices, and documentation standards.

Junior NOC Network Administrator

Network Operations

• Monitor network infrastructure in real time to ensure availability, performance, and operational stability.
• Identify, investigate, and troubleshoot network issues, outages, alerts, and performance degradations.
• Use network management and monitoring tools to detect problems, assess impact, and support timely resolution.
• Escalate incidents to appropriate engineering, infrastructure, security, or vendor support teams when required.
• Perform routine network maintenance tasks in accordance with established procedures.
• Support the implementation of approved network changes, ensuring changes are completed accurately and documented properly.
• Document incidents, changes, troubleshooting steps, resolutions, and follow-up actions clearly and accurately.
• Maintain comprehensive operational records to support reporting, trend analysis, and issue tracking.
• Communicate effectively with technical and non-technical stakeholders regarding network events, status, and resolution progress.
• Collaborate with IT staff and other operational teams to improve network performance, availability, and resilience.
• Support the development and implementation of strategies for network improvement and risk mitigation.
• Follow established operational procedures, escalation paths, and change management practices.

Junior NOC Engineer

• Incident Investigation: Lead investigations into high-severity threats, identifying root causes to prevent recurrence.
• Threat Containment & Remediation: Take immediate, hands-on action to stop attacks and restore systems to normal operations.
• Digital Forensics: Perform host, memory, and network forensics to uncover indicators of compromise (IOCs).
• Automation & Tooling: Write scripts (Python, Bash, PowerShell) and build SOAR playbooks to automate response actions.
• Monitoring & Hunting: Proactively monitor security alerts and conduct threat hunting to detect malicious activity.
• Documentation & Reporting: Create detailed post-mortem reports and update runbooks

Incident Response Engineer

• Deep knowledge of identity and access management platforms (like Okta), protocols (like SAML, OAuth), and concepts like SSO, multi-factor authentication (MFA), and role-based access control (RBAC).
• Implementing, configuring, and maintaining Okta for SSO, MFA, and Lifecycle Management across various applications.
• Integrating Okta with on-premises and cloud-based applications (e.g., Office 365, Salesforce, Google Workspace) using protocols like SAML, OAuth, and OpenID Connect.
• Using Okta's APIs and scripting languages (like Python, PowerShell, or JavaScript) to automate user provisioning, data synchronization, and other management tasks.
• Diagnosing and resolving complex IAM issues related to authentication, authorization, and access.
• Understanding how to integrate Okta with cloud environments like AWS, Azure, and Google Cloud.
• Implement and manage solutions to ensure secure and efficient access for users while supporting frameworks like "zero trust" for the Department of Defense (DoD).
• Work with security, infrastructure, and business units to troubleshoot issues and ensure compliance with security frameworks.
• Architect, develop, and implement ICAM solutions across cloud and on-premises environments to manage user identities, authentication, and authorization.
• Automate user provisioning, deprovisioning, and updates, often using tools for user lifecycle management.
• Ensure all ICAM systems comply with relevant security standards, policies, and regulations (like GDPR, HIPAA, or federal mandates).

ICAM Engineer

• Serve as the Contractor Program Manager and primary management lead for enterprise cybersecurity support activities
• Oversee contract execution, staffing, deliverables, schedules, and customer communications
• Manage program risks, issues, dependencies, and mitigation strategies across task areas
• Coordinate technical and management activities across multiple cybersecurity functions and stakeholders
• Lead status reporting, executive briefings, program reviews, and customer-facing meetings
• Ensure deliverables are accurate, complete, timely, and aligned with contract requirements
• Oversee support for RMF implementation, FISMA reporting, data calls, and related compliance deliverables
• Coordinate work across governance and risk management activities, including policy lifecycle, privacy and data governance, training and awareness, security control assessments, continuous monitoring and automation, and audit management
• Support requirement analysis, process control, and program planning activities
• Oversee subcontractor and third-party performance where applicable
• Drive integration across enterprise architecture, systems integration, and technology support efforts
• Ensure program execution supports mission priorities and evolving customer needs

Senior Cybersecurity IT Program Manager

Business Analyst

• Support vulnerability management activities by identifying, analyzing, and prioritizing vulnerabilities across client systems, applications, and networks
• Translate scan results and cyber hygiene findings into actionable remediation guidance
• Coordinate with stakeholders to track resolution efforts
• Help strengthen the organization’s overall security posture
• Initiate or coordinate vulnerability scans using approved tools
• Review and analyze scan results to identify weaknesses and security gaps
• Assess risk and prioritize remediation activities based on severity, impact, and likelihood
• Track remediation progress and support reporting to leadership and stakeholders
• Review cyber hygiene findings and develop actionable recommendations
• Coordinate with system owners, engineers, and administrators to support remediation efforts
• Monitor emerging vulnerabilities, threat activity, and high-risk exposures that may affect client systems
• Support security review of new technologies, applications, and software introduced into the environment
• Help maintain vulnerability metrics, dashboards, and reporting outputs
• Support process improvement and automation efforts related to vulnerability identification and tracking
• Assist with documentation, status reporting, and stakeholder communications as needed

Vulnerability Management Analyst

Security Operations

• Applying software engineering principles (version control, CI/CD, testing) to security rules.
• Mapping detection strategies against frameworks such as MITRE ATT&CK to identify coverage gaps.
• Analyzing telemetry from endpoint, network, cloud, and identity systems to identify anomalous patterns.
• Continuously tuning rules to reduce noise and enhance actionable alerts.
• Designing, developing, testing, deploying, and maintaining rules to detect threats.