Responsibilities Cardinal Technology Systems Corp. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking a Cybersecurity Assessment & Authorization - SME to work for our company. Summary - Must possess IT-I security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies) - Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. - Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. - Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. - Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. - Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process. Requirements - Must possess IT-I security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies) - Must possess and maintain a certification compliant with DoD 8570/8140 CSSP Analyst requirements (e.g., CompTIA CySA+, CEH, GCIH, GCIA, or CISSP). - 5+ years of relevant Risk Management Framework (RMF) and NIST A&A experience. - DOD cybersecurity experience. - Experience in assessing security controls and conducting authorization reviews for large, complex organizations. - Experienced in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes. - Knowledgeable in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures. Benefits • Medical, Dental, Vision Benefits • Paid Life • Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave • Semi-monthly pay cycle Work With Us Cardinal Technology Systems, Corp (“CTech-Sys”), www.ctech-sys.com, is an SBA Certified 8(a) and HUBZone company located in the National Capital Region (NCR) and serves both government and commercial clients such clients as US CBP, US CIS, DLA, DFuse Technologies, and American Environmental Engineering Consultants. Cardinal Technology Systems, Corp is an Equal Employment Opportunity employer and it’s our policy to consider applicants for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, or any other factors prohibited by law. Employment selections are based on company and client requirements and the qualifications and skills of the candidate. CTech-Sys is committed to actively capitalizing on the diversity of skills, talents and perspectives of our employees.

Who We AreFounded in 2012 by 3 expert hackers with no investment capital, Trail of Bits is the premier place for security experts to boldly advance security and address technology’s newest and most challenging risks. It has helped secure some of the world's most targeted organizations and devices. Our combination of novel research with practical solutions reduces the security risks that our clients face from emerging technologies. Our work helps drive the security industry and the public understanding of the technology underlying our world. Cybersecurity preparedness is a moving target. Companies like ours are the tip of the spear in the fight against attackers. Our research-based and custom-engineering approach ensures that our client’s capabilities are at the forefront of what’s available. For companies and technologies that live and die by their security, a proactive, tailored approach is required to keep one step ahead of attackers. Democratizing security information is essential. As part of our business, we provide ongoing informational support through blogs, whitepapers, newsletters, meetups, and open-source tools. The more the community understands security, the more they’ll understand why a company like ours is so unique and valuable. RoleThis role is for a security-focused software engineer who will design, build, and enhance security tools and frameworks across various contexts. You'll work on projects ranging from AI/ML security frameworks to compiler-based security tools, and everything in between, contributing to software that makes a real difference in the security landscape. Trail of Bits is AI-native, so you will have all the latest technologies at your disposal to help you establish an efficient workflow at your discretion. As a Security Engineer, you are an individual contributor who receives tasking from project leads and delivers on technical milestones. Over time, you'll grow into leading major feature development, breaking down high-level objectives into manageable tasks, and presenting your work to clients. You'll be expected to pursue subject-matter expertise in areas that are part of Trail of Bits' core competencies and share what you learn through blogs, Lunch 'n' Learns, and publications. Software development will primarily involve Rust, C++, and Python, with occasional work in Go and Java. You will typically work in teams of 2–4 people, all from remote locations. Technical leads guide the team's work, collaborating with you and other members to define responsibilities based on project needs, individual strengths, and team input. Frequent communication with team members and clients is essential to success, and writing about your work publicly is encouraged and incentivized. We welcome applications from experienced professionals and talented recent graduates with relevant skills and interests. What You'll Achieve - Security Tool Development: Design and implement security-focused software tools and frameworks, contributing to projects that help achieve their technical milestones. - Open Source Contribution: Contribute to open-source security projects and develop internal tools that advance Trail of Bits' core competencies. - Security Solution Architecture: Analyze complex security challenges and develop practical, deployable solutions. As you grow, take ownership of deconstructing high-level objectives into smaller, more manageable tasks. - Full-Stack Security Understanding: Understand security implications across the stack, from low-level systems to application frameworks. - Secure Implementation: Implement secure CI/CD pipelines and integration with GitHub Actions. - AI/ML Security Research: Contribute to AI/ML security research and tooling. - Security Code Review: Evaluate and improve the security of existing software through code review and enhancement. - Technical Communication: Communicate technical concepts effectively to team members, clients, and the broader security community. Write blog posts, participate in Lunch 'n' Learns and publications, and grow toward delivering client-side presentations. - Technical Troubleshooting: Root-cause analysis and debugging on low-level technical issues. - Project Execution: Interpret requirements, decompose tasks, and make engineering estimates. Work toward leading major feature development and moving projects toward their milestones. What You'll Bring - Strong software development skills with experience in: Rust, C++, and/or Python. Occasionally, Go or Java knowledge is necessary. - Knowledge of AI/ML systems and associated security challenges. - Familiarity with AI development tools like Claude Code, Cursor, and others. - Experience with secure development practices and building secure software. - Demonstrated ability to quickly learn new programming languages, frameworks, and technologies. - Understanding of computer security principles and common vulnerability classes. - A drive to develop subject-matter expertise in an area of Trail of Bits' core competency. - Ability to work independently and as part of a remote team. - Strong written and verbal communication skills, with a willingness to write blog posts and present at internal knowledge-sharing sessions. - Familiarity with GitHub, CI/CD pipelines, and automated testing. Preferred Qualifications - Prior contributions to open-source security tools or frameworks. - Experience developing commercial-grade software used by the public. - Understanding of low-level systems, including memory management and operating system internals. - Experience with compiler technology, program analysis, or binary analysis. - Participation in CTF competitions or other security challenges. - Experience with multiple programming languages and paradigms. - Experience in reading, writing, and publishing academic papers. - Experience in public speaking. (Preferred qualifications are nice to have, but not required. Please apply even if you don’t meet all of these!) The US base salary for this full-time position ranges from $125,000 to $185,000, excluding benefits and potential bonuses. Various factors influence our salary ranges, including the specific role, level of seniority, geographic location, and the nature of the employment contract. An individual's specific work location, unique skills, experience, and relevant educational background will determine the final offer within this range. Trail of Bits, Inc. participates in E-Verify, the US federal electronic employment eligibility verification program. Learn more. When you apply, you'll be added to our newsletter so you can stay updated on company news and opportunities. You can opt out anytime. BenefitsBenefits, Perks & WellnessTrail of Bits is our people, not a place. With over 100+ employees working from every time zone across the globe, our remote-first culture is built on autonomy and trust (and backed by smile-worthy benefits) for full-time employees: Empowered Living: - Competitive salary complemented by performance-based bonuses. - Fully company-paid insurance packages, including health, dental, vision, disability, and life. - A solid 401(k) plan with a 5% match of your base salary. - 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. Nurturing New Beginnings: - 4 months of parental leave to cherish the arrival of new family members. - Our team is global and remote-first. However, if you are interested in moving to NYC, we offer $10,000 in relocation assistance to support your transition. Work & Life Enrichment: - $1,000 Working-from-Home stipend to create a comfortable and productive home office. - Annual $750 Learning & Development stipend for continuous personal and professional growth. - Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements. Community Impact: - Philanthropic contribution matching up to $2,000 annually.

Who We AreFounded in 2012 by 3 expert hackers with no investment capital, Trail of Bits is the premier place for security experts to boldly advance security and address technology's newest and most challenging risks. It has helped secure some of the world's most targeted organizations and devices. Our combination of novel research with practical solutions reduces the security risks that our clients face from emerging technologies. Our work helps drive the security industry and public understanding of the technology that underlies our world. Cybersecurity preparedness is a moving target. Companies like ours are the tip of the spear in the fight against attackers. Our research-based and custom-engineering approach ensures that our clients' capabilities are at the forefront of what's available. For companies and technologies that live and die by their security, a proactive, tailored approach is required to keep one step ahead of attackers. Democratizing security information is essential. As part of our business, we provide ongoing informational support through blogs, whitepapers, newsletters, meetups, and open-source tools. The more the community understands security, the more they'll understand why a company like ours is so unique and valuable. RoleThe Principal Security Engineer serves as a cultural, business, and technical leader within Trail of Bits' Research & Engineering practice. Principal Engineers set technical vision, drive new business growth, lead projects, manage people, and champion the company's publications and marketing efforts. You'll leverage your experience and professional network to turn your ideas into meaningful research and engineering efforts that impact our digital world. You will mentor and inspire other engineers who share your vision, helping them build their networks and skillsets. You will be an ambassador to the company using our blog and speaking at conferences as your primary medium. Principal Engineers identify team organization and operational problems, spot knowledge gaps across the team, and take steps to help the team fill them. You'll work closely with Staff Engineers on technical roadmaps, collaborate with Directors on resourcing, and support the proposal process through SoW writing and scoping. Software development will primarily involve Rust, C++, and Python, with occasional work in Go and Java. You will lead and participate in teams of 2–4 people across remote locations. Frequent communication with team members, clients, and industry partners is essential to success. What You'll Achieve - Technical & Strategic Leadership: Set the technical vision for your area of expertise. Design and guide the execution of complex security research and engineering efforts that advance Trail of Bits' capabilities. - Business Development: Engage with potential clients and drive the sales process independently. Leverage your professional network to find external funding for new research and engineering initiatives. Support the proposal process through SoW writing and scoping. - People Leadership & Mentorship: Mentor 3–4 Senior Engineers, helping them build their professional networks and skillsets. Introduce mentees to your network and find opportunities for their growth. - Project Leadership: Lead projects end-to-end within and beyond your core expertise. Deconstruct high-level objectives into actionable milestones, allocate work across team members, and ensure delivery. - Publications & Industry Presence: Lead the company's publications and marketing efforts in your domain. Represent Trail of Bits at speaking events, panel discussions, and conferences. Author blog posts, whitepapers, and academic publications. - Organizational Improvement: Identify team organization and operational problems. Spot knowledge gaps across the team and take concrete steps to help the team fill them. - Security Tool Development: Architect and oversee the development of security-focused software tools and frameworks. Contribute hands-on when needed, particularly on novel or high-stakes problems. - Cross-Practice Collaboration: Work closely with other practices to understand their challenges and needs. Turn these into collaborative efforts to build useful tooling and advance shared goals. - AI/ML Security: Guide the team's approach to AI/ML security research and tooling. Identify emerging risks and opportunities in the AI/ML security landscape. What You'll Bring - Extensive software development and security engineering experience, with deep expertise in Rust, C++, and/or Python. - A well-established professional network in the security industry, government, or adjacent technical communities. - Demonstrated track record of leading security projects end-to-end, from scoping and proposal through delivery. - Experience engaging with clients and participating in the sales or business development process. - Proven ability to mentor and develop senior-level engineers, helping them grow their careers and professional networks. - Experience setting technical vision and strategy for a team or practice area. - Strong knowledge of AI/ML systems and associated security challenges. - Public speaking experience at conferences, panels, or industry events. - Published work demonstrating thought leadership in security through blog posts, whitepapers, academic papers, or open-source tools. - Excellent written and verbal communication skills, with the ability to communicate effectively with technical teams, clients, and executive leadership. - Experience writing SoWs, scoping proposals, and supporting the business development lifecycle. - Ability to identify organizational and operational problems and drive solutions. Preferred Qualifications - Experience building and maintaining a revenue-generating practice area or service line. - Track record of securing external funding (government contracts, grants, or sponsored research). - Deep understanding of low-level systems, including memory management, operating system internals, compiler technology, or binary analysis. - Experience designing IRAD portfolios or technical roadmaps for a research organization. - Contributions to major open-source security tools or frameworks. - Experience managing direct reports (1–4) and providing career development guidance. - Familiarity with the US Government contracting and proposal process. (Preferred qualifications are nice to have, but not required. Please apply even if you don't meet all of these!) The US base salary for this full-time position ranges from $200,000 to $250,000, depending on experience and qualifications, excluding benefits and potential bonuses. Various factors influence our salary ranges, including the specific role, level of seniority, geographic location, and the nature of the employment contract. An individual's specific work location, unique skills, experience, and relevant educational background will determine the final offer within this range. Trail of Bits, Inc. participates in E-Verify, the US federal electronic employment eligibility verification program. When you apply, you'll be added to our newsletter so you can stay updated on company news and opportunities. You can opt out anytime. BenefitsTrail of Bits is our people, not a place. With over 100+ employees working from every time zone across the globe, our remote-first culture is built on autonomy and trust (and backed by smile-worthy benefits) for full-time employees: Empowered Living: - Competitive salary complemented by performance-based bonuses. - Fully company-paid insurance packages, including health, dental, vision, disability, and life. - A solid 401(k) plan with a 5% match of your base salary. - 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. Nurturing New Beginnings: - 4 months of parental leave to cherish the arrival of new family members. - Our team is global and remote-first. However, if you are interested in moving to NYC, we offer $10,000 in relocation assistance to support your transition. Work & Life Enrichment: - $1,000 Working-from-Home stipend to create a comfortable and productive home office. - Annual $750 Learning & Development stipend for continuous personal and professional growth. - Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements. Community Impact: - Philanthropic contribution matching up to $2,000 annually.

Role Description The OSINT Public Engagement Investigator will support CIR’s objective to grow its engagement with public audiences and media by sharing its investigative reporting on the war in Ukraine. The Investigator will work in a team dedicated to investigating war crimes and human rights abuses associated with the conflict in Ukraine. They will: - Translate investigative analysis into compelling public-facing reporting. - Support awareness, advocacy, and international engagement around war crimes and human rights violations in Ukraine. - Establish and build effective partnerships with international and domestic Ukrainian media. - Blend established OSINT investigative skills with storytelling, narrative development, and communication skills. - Produce accurate, engaging, and insightful content underpinned by OSINT investigative analysis. Contract Type: Contractor Contract duration: Until 31 March 2027. Immediate start available. Hours needed for this role: Full time. Languages: You must be able to speak and write English and have working proficiency in both Russian and Ukrainian languages. Location: While this role can be performed remotely, strong preference will be given to candidates who are normally physically located in or near Kyiv, Ukraine. The candidate may make use of CIR’s office premises in Kyiv, Ukraine. Closing date: Monday 27th April 2026 at 23:55pm. Qualifications - Proven track record in OSINT-driven investigations. - Working proficiency in Russian and Ukrainian languages. - Excellent written and verbal communication skills, including the ability to translate technical terminology for lay audiences. - Established body or proven track record of published reporting, articles, video, blogs, podcasts, or other long- or short-form content for public audiences. Requirements - Lead and conduct open-source investigations using advanced OSINT methodologies, including digital forensics, geolocation, chronolocation, media verification, and pattern-of-life analysis. - Translate complex investigative findings into compelling narratives based on clear, evidence-based findings. - Produce high-quality written reports, long-form articles, briefings, and explanatory content suitable for publication, media release, or campaign use. - Work closely with CIR’s central media team to shape stories for maximum clarity, impact, and audience engagement. - Engage with journalists, editors, advocates, policymakers, and external partners to support dissemination and amplification of investigative findings. - Contribute to interviews, background briefings, and public presentations to explain CIR’s findings to non-specialist audiences. - Deliver training, mentoring, and capacity-building sessions for colleagues, partners, or external audiences in OSINT tools, methods, and best practices. - Uphold CIR’s standards for ethical, safe, and secure investigative practice, ensuring compliance with organisational policies and safeguarding requirements. Benefits - Opportunity to work on impactful investigations related to human rights and war crimes. - Collaboration with a dedicated team of professionals. - Flexible remote working options. Recruitment Process To apply, please submit your CV and complete the application form questions. Shortlisted candidates will be invited to interview, which can be conducted remotely unless specified otherwise. CIR encourages applicants from under-represented communities. CIR is an equal opportunities employer. If you require adjustments or additional support to complete this process, please let us know in your application.