Edgesource Corporation

Support employee engagement initiatives, coordinate onboarding processes, manage corporate communications, and facilitate office administration to enhance operational efficiency and promote a positive employee experience.

• Work alongside low-level vulnerability and reverse engineering specialists to transform their research and capabilities into a robust, user-facing application. • Responsible for stabilizing, extending, and scaling a cross-platform desktop application built with Electron and TypeScript. • Communicate with connected devices via byte-level protocols. • Emphasize strong experience in event-driven systems, asynchronous programming, and application architecture. • Improve reliability, usability, and maintainability of the system, particularly in areas where device interaction introduces timing sensitivity and complexity. • Significant ownership over application design and shaping of development practices in a small, fast-moving team.

• Support the design and implementation of secure application architectures under guidance from senior engineers. • Apply secure coding practices and assist in threat modeling and vulnerability assessments. • Conduct and support application security testing (SAST, DAST, SCA, and manual reviews). • Assist in integrating security controls into CI/CD pipelines, including automated testing and scanning. • Leverage automation and RPA tools to improve efficiency in vulnerability tracking, reporting, and remediation workflows. • Support implementation of security controls and policy gates aligned with organizational standards. • Participate in the vulnerability management lifecycle, including identification, triage, and remediation tracking.

• Lead the design, development, and implementation of advanced RPA and ML-based automation solutions. • Act as an innovation radar, identifying and evaluating emerging RPA/AI/ML technologies. • Ability to successfully manage multiple teams of RPA developers including providing them with career development, oversight, and feedback. • Design end-to-end RPA solutions using tools like UiPath, Automation Anywhere, or Blue Prism. • Define automation architecture and best practices.

• Lead the implementation of application security practices across the SDLC, including secure coding, threat modeling, and vulnerability management • Design and deploy automated security controls within CI/CD pipelines (SAST, DAST, SCA, secrets scanning, policy gates) • Leverage RPA and automation tools to streamline vulnerability detection, triage, reporting, and remediation workflows • Conduct application security assessments, including code reviews, dynamic testing, and manual analysis • Identify, prioritize, and remediate application and API vulnerabilities aligned with OWASP Top 10 and modern threat landscapes • Partner with engineering, DevOps, and product teams to implement secure-by-design and DevSecOps practices • Integrate security into release pipelines, ensuring continuous monitoring, scanning, and compliance enforcement • Support and improve the vulnerability management lifecycle, including metrics, reporting, and risk-based prioritization

Company Overview For over 25 years, Edgesource Corporation has served as an innovative technology service provider for the Department of Defense (DOD), Department of Homeland Security (DHS), Department of State (DOS), the U.S. Intelligence Community, Law Enforcement, and other federal, state, and commercial clients locally, nationally, and abroad. From providing boutique technical solutions in support of the DOD Counter Unmanned Aerial Systems (CUAS) mission set to addressing the most critical Cybersecurity threats facing our nation as a prime contractor with the DHS Cybersecurity & Infrastructure Security Agency (CISA), a career at Edgesource is an opportunity to do meaningful, interesting, and impactful work. Position Overview The Cyber Security Consultant supports the security aspects of DevSecOps implementations by ensuring that systems, pipelines, and applications meet required security and compliance standards. This role works closely with DevSecOps engineers, developers, and security stakeholders to integrate and validate security controls across the development lifecycle. The Cyber Security Consultant focuses on implementing and maintaining security tools, conducting vulnerability assessments, and supporting compliance activities within cloud and on-premise environments. They help identify risks, recommend mitigations, and ensure security practices are consistently applied across systems and pipelines. This role contributes to maintaining a strong security posture by supporting continuous monitoring, assessment, and improvement of security controls in alignment with program and customer requirements. Required Qualifications - Demonstrated experience supporting cybersecurity engineering activities within a program or enterprise environment. - Must be able to obtain and maintain a favorable contractor fitness determination - Experience working with security tools and practices in cloud and/or DevSecOps environments. - Ability to support vulnerability scanning, risk identification, and mitigation efforts. - Experience supporting compliance with security frameworks (e.g., NIST, RMF, FedRAMP, or similar). - Minimum 7–10 years of experience in Information Technology with a focus on cybersecurity. - Experience integrating security tools into CI/CD pipelines (e.g., SAST, DAST, container scanning). - Ability to assess security risks and support implementation of mitigation strategies. - Experience supporting audit, compliance, and accreditation activities. - Strong analytical and problem-solving skills related to security issues. - Ability to collaborate with DevSecOps and engineering teams to ensure secure system design and operation. - Strong written and verbal communication skills, including documenting findings and recommendations. - Demonstrated ability to stay current with evolving cybersecurity threats and best practices. - High professional discretion and ability to operate in sensitive, high-security environments. Working at Edgesource As an ISO 9001:2015 certified and CMMI Level 3 appraised small business, Edgesource specializes in providing a variety of technical solutions to include software development, database services, enterprise networking, data center virtualization, and management support. We are always seeking top-talent to join our team in helping to address the most critical technical challenges facing our nation. At Edgesource, we understand that our employees are our greatest asset, and as such we offer a wide array of benefits to support the well-being of our staff to include: - Flexible PTO Policy + 11 Paid Holidays - Flexible Work Schedules (Remote / Hybrid) - Medical / Dental / Vision / Flexible Spending Account (FSA) - 401k Plan with Match - Tuition & Professional Development Support - Commuter Benefits - Bonus & Employee Referral Programs - Career Growth Opportunities Disclaimer All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Edgesource is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact our Recruiting Department by email at recruiting@edgesource.com or by phone at (703) 837-0550

• Serve as a Subject Matter Expert (SME) for application security, providing guidance on secure design, development, and deployment practices. • Lead security assessments of web applications, APIs, and RPA solutions (UiPath, Automation Anywhere, Blue Prism) • Identify, analyze, and prioritize application and automation-related vulnerabilities. • Design and implement automated security controls and testing within CI/CD pipelines. • Develop and maintain security automation scripts/tools to streamline vulnerability detection and remediation. • Integrate security practices into RPA development lifecycle, ensuring bots follow secure coding and credential management standards. • Perform threat modeling and risk assessments for applications and automated workflows. • Partner with development, DevOps, and RPA teams to remediate vulnerabilities and improve security posture.

• Lead the design, development, and deployment of scalable RPA solutions using platforms such as UiPath, Automation Anywhere, or Blue Prism • Act as the technical authority for RPA initiatives, defining best practices, standards, and reusable frameworks • Analyze complex business processes and translate them into efficient automation workflows • Integrate RPA solutions with enterprise systems, APIs, databases, and web services (REST/SOAP) • Collaborate with business analysts, architects, and IT teams to ensure end-to-end solution alignment • Establish and enforce RPA governance, security standards, and development best practices

• Support the implementation and maintenance of DevSecOps pipelines, tools, and processes to enable secure and efficient software delivery. • Work within a team of engineers to integrate automation and security practices into the development lifecycle while supporting mission and program objectives. • Assist in configuring CI/CD pipelines, integrating security tools, and supporting system interfaces under the guidance of senior engineers. • Contribute to troubleshooting pipeline issues, improving automation workflows, and ensuring adherence to established DevSecOps standards. • Focus on building technical proficiency in modern DevSecOps practices, cloud platforms, and security integration while contributing to team delivery and continuous improvement efforts.

• Supports the testing and quality assurance activities of the task order by applying deep technical expertise in automation, test strategy, and quality engineering practices. • Works closely with Automation Engineers, developers, and technical leadership to ensure testing is thorough, repeatable, and aligned with mission objectives. • Contributes to the design and implementation of automation testing strategies and toolsets, helping integrate them into the end-to-end development lifecycle. • Plays a key role in strengthening QA practices across cloud and data-driven solutions, ensuring test coverage, regression health, and overall product quality. • Operates at the intersection of engineering and quality governance—supporting test planning, participating in quality forums, and helping translate test results into actionable insights for stakeholders. • Collaborates with lead engineers and SMEs across teams to support release readiness and continuous improvement efforts. • Stays current on emerging trends in test automation and quality engineering, applying best practices to enhance delivery and mission outcomes.