SIXGEN

• Support the Enterprise Fraud Risk Management Program (EFRMP) by identifying, assessing, and mitigating fraud risks across the organization. • Combine fraud risk management, investigative analysis, open-source intelligence (OSINT), cybersecurity collaboration, and enterprise reporting to help protect organizational assets, financial integrity, and mission-critical operations. • Conduct research and analytical assessments to identify emerging fraud trends, schemes, and operational risks. • Utilize Open-Source Intelligence (OSINT), commercial intelligence sources, public records, and internal data to support fraud investigations. • Analyze internal and external fraud indicators to identify patterns, anomalies, and potential control weaknesses. • Produce analytical reports and recommendations supporting fraud prevention and risk reduction initiatives. • Collaborate with cybersecurity teams to identify fraud activities with cyber-related indicators or technical components. • Provide analytical support throughout fraud investigations involving suspected internal or external fraud.

Title: Mobile CNO Developer Location: Sterling, VA Job Description: Job Type: Full-time Location: Sterling, VA , Hybrid (WFH and in office) Clearance Requirements: Must be a U.S. citizen. TS clearance required Years of Experience: 8+ years Working with SIXGEN SIXGEN is committed to solving our customer’s hardest problems with eagerness, effectiveness, and efficiency. We reject the status quo and constantly look for new ways to push the boundaries in our field. As an engineer at SIXGEN, you’ll work in a unique position at the intersection of software development, binary and network protocol reverse engineering, and large-scale data analysis. SIXGEN recognizes that a company is nothing without well-cared for employees. We cultivate an encouraging and innovative workplace environment and give employees flexibility to work on their terms. Kyrus offers industry-leading benefits, including - Employer-funded health, dental, vision, and life insurance - Flexible Leave Policy - Flexible hours and opportunities to work from home - 4% 401(k) contribution, vested immediately - Reimbursements for training events, gym memberships, cell phone and internet bills, and lunches with coworkers Why You Matter At SIXGEN, you’ll provide meaningful support to our federal customers. You will use your knowledge of Android or iOS reverse engineering, static and dynamic analysis of Android or iOS apps, and analysis of forensic artifacts left on mobile devices to assess the security of Android and iOS mobile apps. Your commitment to our customer’s missions, curiosity, and attention to detail will make you a valuable addition to the SIXGEN team. As a Mobile Application Reverse Engineer, we need you to - Perform static and dynamic reverse engineering of Android and iOS mobile applications and the custom protocols they implement - Be familiar with rooting and jailbreaking techniques, as well as emulation of Android devices - Capture, triage, and analyze network packet captures - Overcome difficult problems through collaboration with teammates and brainstorming novel approaches - Examine on-disk artifacts that apps leave behind - Identify opportunities for streamlined processes or automation through development of custom tools in Python or C - Write clear and precise technical reports to document findings - Contribute across projects and disciplines; we are a small company and expect that you will grow into adjacent technical areas as you further your career Who You Are To you, every new app is a puzzle to be explored. You are an accomplished professional with - A bachelor’s degree in computer science, computer engineering, cyber security, or other technical degree or equivalent work experience - Experience with industry standard reverse engineering tools such as jadx, Frida, Objection, apktool, and Hopper or Ghidra - An understanding of Android compilation obfuscation techniques such as ProGuard - Familiarity with Android Debug Bridge (ADB) and debugging iOS with Xcode - Knowledge of standard TCP/IP protocols, experience with Wireshark or comparable tools; past experience using mitmproxy or performing network traffic man-in-the-middle is desired - Knowledge of industry standard cryptographic primitives - Experience developing software with Python and/or C is desirable - Prior Android or iOS application development experience is desirable - A drive to understand the obfuscated, leverage new technology to move the mission forward, and seize the opportunity to mentor junior engineers

• provides cybersecurity compliance, Risk Management Framework (RMF) implementation, and system authorization support to ensure the customer system meets Department of Defense (DoD) cybersecurity requirements • serves as the primary interface between engineering, testing, and authorization stakeholders to ensure all security controls are properly implemented, documented, and assessed • support RMF lifecycle activities in accordance with DoDI 8510.01 • assist with system categorization and control selection (NIST SP 800-53) • develop and maintain RMF artifacts including System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Control Traceability Matrix (SCTM), Security CONOPS (SECONOPS), Incident Response Plan (IRP) • coordinate with Authorizing Official (AO), Security Control Assessor (SCA), and Government stakeholders • document implementation of security controls • validate control inheritance from Government Furnished Equipment (GFE) • ensure alignment between system architecture and cybersecurity requirements • support assessment readiness for cyber test events (CVI, CVPA, ACDT, AA) • maintain the system Body of Evidence within eMASS • track control implementation status and associated artifacts • ensure all documentation is complete, current, and audit-ready • support continuous updates based on testing results and design changes • incorporate findings from Cyber test events, MBCRA and CTT activities • translate technical findings into RMF-relevant documentation updates • support risk determination and mitigation tracking • ensure vulnerabilities are properly reflected in POA&M entries • develop recommendations for continuous monitoring strategy • track and report cybersecurity risks to program leadership • support mitigation planning and validation • provide input into system design decisions to reduce cyber risk