M9 Solutions

• Work closely with business stakeholders to rapidly develop, demonstrate, and refine AI solutions. • Take a hands-on engineering approach focused on building rather than advising. • Work directly with the client to translate business problems into AI-enabled prototypes and production-ready solutions.

• Work remotely in support of a government contract for a client located in Washington, DC. • Provide risk and vulnerability analysis. • Conduct security assessments and scanning. • Collaborate with teams to address vulnerabilities and improve security measures.

• Work remotely in support of a government contract for a client located in Washington, DC. • Provide threat hunting capabilities. • Collaborate with teams to enhance the security posture.

• Work remotely in support of a government contract for a client located in Washington, DC. • Collaborate with teams to generate reports and analyze threats. • Utilize threat intelligence for technical analysis of enterprise assets. • Create and present Cyber Threat Intelligence products and white papers to senior leadership.

• Work remotely in support of a government contract for a client located in Washington, DC. • Conduct data hunting and manipulation to detect cyber threats. • Manage projects and tasks against tight deadlines, potentially leading teams.

Role Description M9 Solutions is seeking a Vulnerability Management Cyber Managed Services Contractor to work remotely in support of a government contract for a client located in Boston, MA. - Develop rapport with others by demonstrating an understanding of their concerns, needs, and issues, and focusing on developing an internal network of relationships that can provide advice and support. - Monitor progress, manage risk, and ensure key stakeholders are kept informed about progress and expected outcomes. - Stay abreast of current business and industry trends relevant to the client's business and cybersecurity. - Assist engagement teams in evaluating client vulnerability management programs across people, process, and technology. - Work with engagement teams to own distinct portions of vulnerability management solutions tailored to client environments. - Perform and control vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls. Qualifications - Bachelor's degree in a related field. - 5 years of related work experience. - Experience with Tenable One. - Demonstrated experience in vulnerability management, including hands-on use of vulnerability management tools. - Prior experience in providing Vulnerability Management services to clients from various industries, demonstrating versatility and adaptability in addressing diverse Vulnerability Management challenges. - Strong written and verbal communication skills with demonstrated ability to interact with senior management, technical SMEs, business partners, and influence decisions. - Must be able to effectively communicate with business partners in non-technical terms. - A willingness to travel to meet client needs. - Familiarity with security and risk standards including ISO 27001-2, CIS, PCI DSS, NIST, ITIL, COBIT. - Knowledge of Windows, Linux, UNIX, and any other major on-prem and cloud-based operating systems. - Hands-on operational experience with vulnerability management tools, including Tenable One modules, including the ability to deploy, configure, and run these tools. - Ability to evaluate vulnerability management tools and assist with vendor selection. - Ability to conduct root cause analysis against vulnerabilities and determine feasible technical solutions. - Knowledge of general cybersecurity concepts and methods including, but not limited to, vulnerability management, privacy, incident response, governance, risk and compliance, enterprise security strategies and architecture. - Ability to help manage cybersecurity projects including development of project charters, plans and status updates. - Experience with scripting/programming skills (e.g., Python, PowerShell). - Experience with utilizing Microsoft Excel and/or PowerBi to develop vulnerability management program metrics. - Familiarity with latest security vulnerabilities and exploits, understanding of web-based application vulnerabilities (OWASP Top 10), cloud security and architecture. - Experience with using factors such as EPSS, CVSS, CISA KEV, and threat intelligence sources to identify and prioritize vulnerabilities. - Proficient knowledge of CVE (Common Vulnerabilities and Exposures) and CWE (Common Weakness Enumeration) frameworks. - Experience in developing and curating meaningful metrics for both executive and operational audiences, translating technical details into actionable insights. Preferred Skills and Qualifications - Strong interpersonal and communication skills to collaborate with clients and present solutions. - Ability to analyze issues both strategically and technically. - Proven ability to influence decisions and work across multiple simultaneous initiatives. - A cybersecurity certification such as the CISSP, CEH, or GSEC. Benefits - Salary Range: $60,000 — $180,000 USD - Competitive compensation package. - Valued diverse perspectives in driving the vision of the company.

• Design and implement the foundational DevSecOps CI/CD pipeline architecture using GitHub Actions for tenant onboarding automation. • Automate tenant workspace provisioning and IaC-based onboarding workflows using Terraform and Databricks Asset Bundles. • Enforce code quality, dependency scanning, and policy-as-code with approval gates and full audit trails. • Implement secure environment promotion through dev/test/prod for client deliverables. • Support 24x7 CI/CD pipeline monitoring and failure remediation. • Maintain Platform Operations Runbook and IaC Baselines deliverable. • Contribute to tenant satisfaction by ensuring provisioning pipelines meet deadlines.

• Lead workspace architecture, Unity Catalog governance, and cluster policy design for client tenant organizations. • Perform tenant discovery and requirements gathering, source profiling, and security classification for new data intake requests. • Develop end-to-end technical designs for tenant onboarding, including Data Sharing Agreements and SLA documentation. • Maintain Requirements Traceability Matrix (RTM) and prepare Architecture Review Board (ARB) submissions. • Contribute to tenant onboarding automation, financial operations integration, and ROI reporting. • Deliver tenant training materials and facilitate weekly office hours for client program teams. • Support P1/P2 incident response within SLA for tenant-related platform issues. • Provide NIST 800-53 control evidence within 5 business days of the client audit requests.

• Diagnose, analyze, and troubleshoot hardware, software, and network issues and situations using critical thinking skills. • Install and configure new hardware, software, and network components. • Collaborate with the sales team and other engineers to design and develop technical solutions. • Provide phone, email, and in-person onsite support to a wide variety of clients. • Mentor, coach, and train other engineers. • Learn and work with new technologies on a constant basis. • Complete tasks in a group as well as individually.

• Work remotely in support of a government contract for a client located in Washington, DC. • Collaborate on technical solutions and lead implementation efforts. • Develop and engineer data workflows to merge disparate data sources. • Design and develop automation for security tools management. • Apply analytical rigor and statistical methods to analyze large amounts of data.