Tyto Athene, LLC

Incident Response Analyst

• Lead cross-functional teams to perform in-depth analysis and investigation of high-priority cybersecurity incidents
• Utilize security tools to analyze, investigate, and triage security alerts
• Coordinate the monitoring of our customers environments, including cloud and SaaS solutions for evidence of adversarial activity
• Utilize advanced tools, such as digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact
• Collaborate with cyber threat hunting and cyber threat intelligence teams
• Serve as the primary incident point of contact with law enforcement, third-party vendors, and other external parties
• Conduct post-incident analysis and lessons learned to identify improvement opportunities
• Develop or tune detection rules or signatures to improve the effectiveness of security monitoring and collaborate with engineering teams to implement them
• Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System(IMS)
• Learn new open and closed-source investigative techniques
• Perform research on emerging threats and vulnerabilities to aid their prevention and mitigation
• Assist in developing and implementing initiatives that will enhance the SOC’s performance (e.g., SOPs, playbooks, capability deployments)
• Escalate SOC performance issues or risks to management
• Provide guidance and mentorship to Tier 1 and Tier 2 SOC Analysts to enhance their skills and capabilities

Tier 3 Digital Forensics and Incident Response Analyst

General

• Lead the development of quantum computing workloads for mission-critical operations
• Design fault-tolerant algorithms that support hybrid classical-quantum workflows
• Model qubit stability and implement critical error correction codes
• Mentor traditional classical application engineering talent to exploit quantum platforms
• Establish Quantum Deployments with Real Value

Quantum Algorithm Development Lead

Analyst

• Analyze cyber incidents, correlate incident details and formulate response actions.
• Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
• Monitor government provided DCO tools and systems.
• Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
• Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
• Participate in development of DCO concept of operations, processes and procedures.
• Identify security discrepancies and report security incidents.
• Provide expert research and analysis in support of expanding programs and area of responsibility.

Defensive Cyber Analyst

Proposal Manager

• Lead and oversee the management of all functions of the proposal process including the Proposal Management Plan
• Lead the management and development of Requests for Proposals (RFPs), Requests for Quotes (RFQs), Requests for Information (RFIs), Sources Sought Notices (SSNs), and other client solicitations
• Create and manage proposal compliance matrices, outlines, templates and writing assignment templates
• Responsible for cradle-to-grave proposal efforts including planning, hands-on supporting, directing support staff, technical inputs from business units and teammates, conducting reviews, and ensuring end products are high-quality with aggressive turn-times
• Provide proposal and technical writing support for content created to ensure both compliance and responsiveness to the customer’s issues and needs, solicitation requirements
• Lead daily proposal progress status and proposal kickoff meetings, stand-up, or tag-up calls as well as maintain the proposal schedule
• Facilitate color team reviews for the internal evaluation of all or specific proposal sections or content, identifying deficiencies, strengths as well as ensuring compliance with all solicitation or client requirements have been appropriately developed and incorporated
• Participate as a color team reviewer
• Apply working knowledge of company service offerings related solutions, technology, terminology, and industry best practices for the purpose of supporting proposal content development, solicitation analysis, company teaming partner representation where applicable and as required
• Develop and facilitate data calls and response content for proposal-related material both internally and externally to Teaming Partners
• Prior to the RFQ dropping, being heavily involved in the proposal development meetings based on attendance and involvement in the win themes and solutioning sessions
• Manage and update proposal SharePoint sites
• Write, edit, and proof proposal content, consolidating, rationalizing, and incorporating reviewer/technical expert edits, and ensuring proper grammar
• Manage multiple proposal tasks that require rapid turnaround deadlines
• Manage the proposal process on assigned proposals from pre-RFP activities through final production and close out processes
• Develop/author as writer the proposal sections as appropriate (technical, management, past performance, resumes, etc.)
• Interview Subject Matter Experts and draft content for required sections as needed
• Monitor development of the business/pricing proposal to ensure it is on track and in sync with the technical proposal
• Ensure compliance with RFP requirements

Senior Proposal Manager

Threat Intelligence Specialist

• Actively hunt for Indicators of Compromise (IOC) and APT Tactics, Techniques, and Procedures (TTP) in the network and in the host as necessary
• Search network flow, PCAP, logs, and sensors for evidence of cyber-attack patterns, and hunt for Advanced Persistent Threats (APT)
• Create detailed Incident Reports and contribute to lessons learned in collaboration with the appropriate team
• Collaborate with the SOC and Threat Analysts to contain and investigate major incidents
• Provide simple and reusable hunt tactics and techniques to a team of security engineers, SIEM specialists, and SOC analysts
• Work with leadership and the engineering team to improve and expand available toolsets
• Analyze network perimeter data, flow, packet filtering, proxy firewalls, and IPS/IDS to create and implement a concrete plan of action to harden the defensive posture
• Monitor open source and commercial threat intelligence for IOCs, new vulnerabilities, software weaknesses, and other attacker TTPs.

Cyber Threat Hunter

Solutions Engineer

• Develop and deploy AWS-based hosting environments on EKS and meet customer requirements that span multiple AWS services.
• Support cloud migration, implementation, and modernization efforts, providing architectural guidance for AWS-based solutions.
• Troubleshoot application deployments, recreate customer issues, and build proof of concept applications.
• Write and interpret configuration scripts for customer environments to install programs, configure logging, and modify configuration files.
• Apply advanced troubleshooting techniques to provide unique solutions depending on customer use cases.
• Support infrastructure hardening, vulnerability scanning, and remediation efforts following cloud security best practices.
• Provide technical documentation and supporting artifacts for Authorization to Operate (ATO) packages and work closely with compliance teams when supporting regulated cloud environments.
• Research, evaluate, and apply emerging technologies to improve cloud architectures, security, and operational efficiency.
• Mentor and develop team members by sharing technical expertise, promoting knowledge sharing, and fostering continuous learning.

Senior AWS Solutions Architect

Security Operations

• Support development, improve proficiency, and increase operational effectiveness of USSF Cyber Squadron personnel
• Provide cyber defense remediation and mitigation implementation recommendations in support of all incidents/events
• Participate in the planning process for Operational Planning Teams (OPTs) and crew shift planning
• Draft and validate accuracy of squadron level DCO Tactics, Techniques, and Procedures (TTPs)
• Conduct analysis on new DCO-Space capability releases
• Provide recommendations for exercises and mission rehearsals
• Maintain proficiency by performing DCO crew operation for assigned space mission systems
• Provide expertise for DCO-Space capabilities such as SIEM, Intrusion Detection and Prevention Systems, ELK Stack, Endpoint Protection Systems
• Advise and assist with cyber incident response processes IAW squadron policies
• Participate in Government-established Cyber Incident Response Teams (CIRTs) and provide technical assistance
• Recommend cyber incident response best practices to improve TTPs, processes, and policies

Defensive Cyber Operations SME

Network Engineer

• Provides daily operational support for the LAN core and edge switches across the medical network campus
• Resolves technical issues associated with network and routing protocols at all levels of the OSI model utilizing diagnostic and network administration tools
• Provides overall network infrastructure support to routing and switching equipment, firewalls, and associated cabling
• Plans, installs, and supports hardware and software upgrades, and resolves associated technical issues

Network Specialist

Technician

• Understand and analyze design documentation and system data
• Complete high-quality device and component installation and maintenance activities
• Execute testing to verify high quality installations
• Install system raceway (conduit) & system cabling
• Terminate and test system cabling and all components
• Install equipment racks, enclosures, panels, and all mounting hardware components
• Meet all attendance requirements and working hours of the project
• Communicate effectively with supervisors & subordinates
• Incorporate, and always follow all required safety practices

Electronics Technician

• Serve as the primary technical authority for coordinating and integrating all system components
• Ensure all technical elements are integrated to meet performance, security, and mission requirements
• Provide technical leadership for system integration activities across all task areas
• Coordinate closely with the Program Manager, Lead Cybersecurity Manager, and Lead IT Solutions Architect
• Identify and resolve integration issues in a timely manner
• Manage technical discrepancies and ensure interoperability across all systems
• Lead integration efforts involving multi-vendor environments and complex networked systems
• Coordinate integration activities with commercial internet service providers when applicable
• Conduct technical analysis using industry-standard tools to inform integration decisions
• Support network modernization efforts including fiber, wireless, and 5G infrastructure
• Ensure solutions comply with DoD cybersecurity and interoperability requirements