Tyto Athene, LLC

• Build high-fidelity, interactive prototypes in React and TypeScript • Own the polish layer for demos across the portfolio • Establish and grow a shared component library • Maintain Section 508 and WCAG 2.1 AA conformance • Use modern AI tools for design and prototyping

Description Tyto Athene is searching for a Technical Academic Advisor. The Technical Academic Advisor provides full technical and navigational support for the Defense Acquisition University’s Learning Management System and many of its peripheral systems, at a Tier 1 level. This includes answering inbound phone calls and emails pertaining to account management, navigation, browser troubleshooting, course-enrollment management and policy clarification, among other topics. Responsibilities: - Provide a high level of customer service in a fast-paced environment to DAU students, faculty, staff, and other inquirers (user base of 500,000+) - Answer inbound phone call, email, and ticket inquiries - Follow up with existing tickets/inquiries, as appropriate - Accurately classify and record details of inquiries into a web-based ticketing system - Aid in the account management, navigation and technical troubleshooting of the DAU Virtual Campus – to include login, course-enrollment management, and peripheral systems - Effectively diffuse problem issues for users with empathy and professionalism - Effectively manage time to ensure that minimum standards are met Qualifications Required: - Exceptional communication skills, both verbal and written - Demonstrable PC skills - Previous clerical, call center or help desk experience, with email support desired - Microsoft Office Suite, especially Outlook, Word, and Excel - Associates Degree or higher in Information Technology or related field preferred - 1+ years’ experience with troubleshooting – to include researching problems, analyzing trends, and expressing findings. - 1+ years’ experience in customer service desirable Clearance: - Must be able to obtain a Public Trust About Tyto Athene Compensation: - Compensation is unique to each candidate and relative to the skills and experience they bring to the position. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range. Benefits: - Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave. Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains—Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT—empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide. At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto? Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.

• Serve as a subject matter expert in Machine Learning and its applications in Cyber Defense, researching and implementing differentiating and novel ML-based solutions to problems SOCs face • Developing agentic solutions for Cyber Incident Response • Solve complex security and architecture challenges with creativity and precision, with a focus on real-time performance and scalability • Identify and recommend improvements to architectures, especially in secure environments

Role Description Tyto Athene is searching for a Vulnerability Management Analyst to assist our Federal client in the development and maintenance of the full lifecycle of vulnerability management services from discovery, triage, advising, remediation, and validation. The role can be remote. - Support the development and maintenance of vulnerability management services, including vulnerability scanning, vulnerability assessments, and providing advisory and tracking support for vulnerability remediation. - Operate and configure agency tools used for vulnerability testing and identification. - Review agency vulnerability management plans/policies and update documents as needed. - Coordinate with customers regarding scanning schedule and scope. - Review, analyze, validate, and report on vulnerability scan results. - Develop and disseminate operational and executive-level reports on vulnerability status to stakeholders involved in remediating vulnerabilities. - Work with stakeholders as necessary to develop vulnerability remediation strategies and track status. - Identify areas for improvement and/or efficiencies including processes, tools, and templates; Identify relevant metrics. - Develop processes and document procedures in a Standard Operating Procedures (SOP) format for use by other team members and to enhance efficiencies. - Coordinate with other teams, including ISSOs and penetration testers to share information as needed. - Opportunity to perform security testing activities, such as application and vulnerability assessments. Qualifications - Minimum of 3 years of professional experience in information security or information technology roles; 2 years of experience in Vulnerability Management preferred. - Bachelor’s Degree, or an equivalent combination of formal education, experience preferred. - Experience conducting vulnerability scans, including configuration and use of tools such as Tenable Security Center and/or Qualys. - Experience executing security testing activities such as penetration testing and application/vulnerability assessments preferred. - Knowledge of cybersecurity frameworks, controls and standards, and best practices (e.g., FISMA, ISO 27K, CMMC, NIST). - Knowledge of cloud and network security. - Proven track record of identifying and recommending improvement initiatives. - Excellent people skills and the ability to work both independently and in a team environment. - Excellent communication skills, both written and verbal. - Excellent organizational skills with the ability to multi-task and meet deadlines. Requirements - Active Secret clearance required. Benefits - Health/Dental/Vision. - 401(k) match. - Paid Time Off. - STD/LTD/Life Insurance. - Referral Bonuses. - Professional development reimbursement. - Parental leave.

• Monitor, maintain, and troubleshoot Boundary Control and Access Point (BCAP) infrastructure components including firewalls, routers, switches, and associated security appliances. • Perform configuration management and change control procedures for BCAP boundary devices. • Enforce and maintain network access control policies at the boundary to protect classified and sensitive systems. • Coordinate with network operations center (NOC) and security operations center (SOC) teams to investigate and resolve boundary security events. • Support BCAP architecture reviews, upgrades, and technology refresh activities. • Ensure all BCAP components are operating within approved configurations and security baselines. • Administer, configure, and maintain F5 BIG-IP Local Traffic Manager (LTM) and Access Policy Manager (APM) in support of secure application delivery. • Develop and manage F5 iRules, profiles, pools, virtual servers, and persistence configurations. • Perform health monitoring, performance tuning, and capacity planning for F5 BIG-IP environments. • Troubleshoot application delivery issues including SSL/TLS offloading, load balancing failures, and traffic policy conflicts. • Support F5 software upgrades, patch management, and configuration backups. • Integrate F5 APM with identity and access management (IAM) solutions, including CAC/PKI authentication. • Configure and support Common Access Card (CAC) and Public Key Infrastructure (PKI) authentication mechanisms on F5 APM and network boundary systems. • Coordinate with PKI administrators to manage certificates, OCSP/CRL configurations, and certificate trust chains. • Troubleshoot CAC authentication failures and PKI validation issues across network and application layers. • Support Authority to Operate (ATO) processes for BCAP and F5 systems in accordance with NIST SP 800-53 and DoD RMF requirements. • Develop and maintain System Security Plans (SSPs), POA&Ms, and supporting RMF documentation. • Implement and validate security controls and continuous monitoring requirements for boundary and application delivery systems. • Participate in security assessments, audits, and vulnerability remediation activities. • Serve as a technical escalation point for network boundary and F5-related incidents. • Analyze traffic captures, logs, and system events to diagnose and resolve complex issues. • Support incident response activities including containment, eradication, and recovery for boundary security events. • Maintain detailed incident records and produce after-action reports as required. • Develop and maintain accurate network diagrams, configuration documentation, standard operating procedures (SOPs), and runbooks. • Create and update technical documentation in accordance with organizational and federal standards. • Provide knowledge transfer and cross-training to support team members.

Description Tyto Athene is searching for a dynamic Cybersecurity Policy Analyst to support our Federal Customer in Washington, DC. Responsibilities: - Serve as part of a team lead supporting the CISO knowledgeable in the field of information assurance and Cybersecurity Policy Analyst. - Participate in working groups and cybersecurity committees that are tackling the government’s current and emerging challenges such as maturing the CDM program, automating ATO processes, developing and implementing enterprise security services. - Perform control reviews, security audits, evaluations, and risk assessments of sensitive and complex operational systems and facilities and provides recommendations for remediating vulnerabilities. - Conduct application, system, and network security assessments, analyses, authorizations, and evaluations in sensitive environments. - Develop requirements and specifications for reviewing and approving procurement requests, major systems development activities, telecommunications hardware and software, and hardware and software encryption techniques on the basis of security concerns. - Review and assess current federal policy and procedures and emerging technology changes to the cybersecurity landscape to recommend new policies and procedures. - Support technical reviews to support non-standard operational requirements and systems, including design, development, and maintenance of unique security assessment security tools and conducting assessments. Qualifications Required: - Bachelor’s Degree or an equivalent combination of formal education and experience. Bachelor's Degree may be substituted for eight (8) additional years of relevant experience. - Minimum six (6) years of general experience and three (3) years of relevant experience in functional responsibility - 4+ years’ experience with NIST, FISMA, and Security Assessment & Authorization - Well-versed in risk management and must have experience working with SDLC and performing security tasks throughout - Experience with and working understanding of FISMA compliance, experience conducting all phases of Certification and Accreditation, and creating documentation in accordance with NIST guidance - Well-versed with NIST publications, including NIST 800 series, OMB circulars such as OMB A-123 circular and OMB A-130 circular and memoranda, and CNSS publications and their requirements and impact on system security such as CNSS 1253 and risk management methodologies - Strong analytical and organizational skills - Concise writing skills - CAP and Security+ highly desired - Understanding of and experience with CSAM is a plus Clearance: - Secret clearance required to start Location: - Remote About Tyto Athene Compensation: - Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $120,000-$130,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range. Benefits: - Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave. Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains—Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT—empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide. At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto? Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.

• Perform systems administration and maintenance including patching, vulnerability scanning, compliance scanning and remediation, backups, and recovery for cloud workloads • Primarily support AWS environments, including Windows and Linux virtual machines, container workloads, and cloud-native services • Support GCP and Azure cloud environments as needed • Configure, update, and maintain security tools for various security purposes • Troubleshoot issues across network, compute, application, and identity layers • Implement hardening and compliance controls • Remediate vulnerabilities identified by security tools • Provide quality assurance feedback during system deployments • Collaborate with Security Analysts to ensure uninterrupted delivery of security services • Create and maintain documentation • Support client communications, deliverables, and issue resolution • Support and mentor junior engineers • Contribute to automation and infrastructure-as-code initiatives

• Interpret operational requirements and constraints. • Deploy and configure virtualized routers, firewalls, load balancers, and other network functions. • Configure overlay and underlay networks in virtualized environments. • Validate connectivity, routing, segmentation, and policy enforcement across distributed systems. • Convert manual deployment procedures into parameterized and reusable automation workflows. • Automate policy enforcement, compliance validation, and certificate lifecycle management (PKI/TLS). • Implement configuration drift detection and self-healing automation. • Document automation frameworks, deployment standards, and operational procedures. • Engineers in this role may encounter challenges such as: Automating configuration across multiple network vendors and platforms. • Managing overlay and underlay networks in hybrid and virtualized environments. • Converting manual operations into automated deployment pipelines. • Diagnosing connectivity, routing, and segmentation issues in distributed systems. • Maintaining configuration consistency across large-scale infrastructure. • Supporting mission-critical environments requiring high availability and rapid recovery. • Develop infrastructure automation workflows integrated with CI/CD pipelines. • Convert operational procedures into repeatable Infrastructure-as-Code deployments. • Implement API-driven automation for network device configuration and orchestration. • Integrate network automation into broader platform engineering initiatives. • Integrate telemetry and monitoring into automated infrastructure workflows. • Provide visibility into network performance, service health, and operational events. • Support troubleshooting and root cause analysis across distributed environments.

Description Tyto Athene is searching for a dynamic Senior Cybersecurity Policy Analyst to support our Federal Customer in Washington, DC. Responsibilities: - Serve as part of a team supporting the CISO knowledgeable in the field of Cybersecurity RMF and Cybersecurity Policy Analyst. - Represent the program in working groups and cybersecurity committees that are tackling the government’s current and emerging challenges such as maturing the CDM program, automating the ATO process, and developing and implementing enterprise security services. - Perform control reviews, security audits, evaluations, and risk assessments of sensitive and complex operational systems and facilities and provide recommendations for remediating detected vulnerabilities. - Conduct application, system, and network security assessments, analyses, authorizations, and evaluations in classified and sensitive environments. - Develop requirements and specifications for reviewing and approving procurement requests, major systems development activities, telecommunications hardware and software, and hardware and software encryption techniques on the basis of security concerns. - Review and assess current federal policy and procedures and emerging technology changes to the cybersecurity landscape to recommend new policies and procedures. - Support technical reviews to support non-standard operational requirements and systems, including design, development, and maintenance of unique security assessment security tools and conducting assessments. Qualifications Required: - Bachelor’s Degree or an equivalent combination of formal education and experience. Bachelor's Degree may be substituted for eight (8) additional years of relevant experience. - Minimum six (6) years of general experience and three (3) years of relevant experience in functional responsibility - 4+ years’ experience with NIST, FISMA, and Security Assessment & Authorization - Well-versed in risk management and must have experience working with SDLC and performing security tasks throughout - Experience with and working understanding of FISMA compliance, experience conducting all phases of Certification and Accreditation, and creating documentation in accordance with NIST guidance - Well-versed with NIST publications, including NIST 800 series, OMB circulars such as OMB A-123 circular and OMB A-130 circular and memoranda, and CNSS publications and their requirements and impact on system security such as CNSS 1253 and risk management methodologies - Strong analytical and organizational skills - Concise writing skills - CAP and Security+ highly desired - Understanding of and experience with CSAM is a plus Clearance: - Secret clearance required to start Location: - This role is remote, preference to the client site in Washington, DC About Tyto Athene Compensation: - Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $125,000-$135,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range. Benefits: - Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave. Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains—Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT—empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide. At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto? Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.

Description Tyto Athene is searching for a Senior Information System Security Officer (ISSO) Support to be responsible for the overall handling of information assurance expertise for a large, complex IT infrastructure program in Washington DC. Systems are deployed using a public cloud service provider to deliver advanced capabilities to the Federal government using IaaS, PaaS, and SaaS service models. This role is responsible for researching, generating, and validating security controls that support the customers’ Risk Management Framework (RMF) and ICD 503 Security Accreditation. Responsibilities include defining, creating, and maintaining Systems Security Plans (SSP) to support Accreditation and Authorization (A&A) reviews and coordinating with customer security organizations as part of a delivery pipeline to achieve Authority to Operate (ATO). Additionally, ISSOs review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, and assist with implementing changes and documenting upgrades. Responsibilities: - Developing and updating security authorization packages in accordance with the client’s requirement and compliant with FISMA. Core documents that you will be responsible for are the System Security Plan (SSP), Risk Assessment Report, Security Assessment Plan and Report, Contingency Plan, Incident Response Plan (IRP), Standard Operating Procedures (SOP), Plan of Actions and Milestones (POA&M), Remediation Plans, Configuration Management Plan (CMP), etc. - Validate that protective measures for physical security are in place to support the system's security requirements - Maintain an inventory of hardware and software for the information system - Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans - Manage emerging and defined risks associated with the administration and use of assigned information systems - Coordinate with the client's Cybersecurity Unit to achieve and maintain the information systems' compliance and authorization to operate (ATO) - Perform risk analyses to determine cost-effective and essential safeguards - Support Incident Response and Contingency activities - Able to perform security control assessment using NIST 800-53A publication as well as OMB A-130 and OMB A-123 circulars - Conduct Independent scans of the application, network, and database (where required) - Provide continuous monitoring to enforce client security policy and procedures and create processes that will provide oversight into the following activities for the system owner - Coordinate with multiple stakeholders to complete mandatory agency data calls in a timely manner Qualifications Required: - Bachelor’s Degree or equivalent combination of formal education and experience. Bachelor's Degree may be substituted for 8 additional years of relevant experience. - Minimum of 10 years of general experience and 8 years of relevant functional experience as an ISSO or Security Controls Analyst. - Familiarity with program security responsibilities to include, but not limited to the NIST RMF, audit log reviews, system monitoring, SPAA processes, FISMA requirements, vulnerability & compliance scanning, continuous monitoring activities, security testing and evaluation, and security policies. - Understanding of Cloud (Amazon Web Services (AWS) or Azure and FedRAMP is highly desired. - Demonstrated an understanding of system administration in understanding permissions, event monitoring, and logging. - Thorough understanding and knowledge of FISMA and SA&A process - Proficiency in writing technical analysis reports - Strong written and oral communication skills - Project management (ability to track detailed tasks and ensure timely delivery) - Good business acumen - Relationship management - Ability to work quickly, efficiently and accurately in a dynamic and fluid environment Desired: - Understanding and experience with CSAM or JCAM is a PLUS - Balancing security requirements with mission needs Clearance: - Secret Clearance to start Location: - Remote About Tyto Athene Compensation: - Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $125,000-$135,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range. Benefits: - Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave. Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains—Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT—empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide. At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto? Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.