• Support cybersecurity compliance and risk management efforts within the HACS program. • Help maintain system authorization. • Develop security documentation. • Ensure systems meet federal cybersecurity standards.

• Support the maturation and day‑to‑day operationalization of the ransomware recovery governance program through hands‑on process execution, documentation updates, and technical validation activities. • Apply and enforce ransomware recovery maintenance policies by performing configuration checks, control verification, and operational compliance reviews. • Coordinate and execute testing for protected applications, including technical recovery validation, dependency mapping, and test result analysis. • Design and implement the application review and onboarding workflow, including technical assessments, readiness evaluations, and control implementation support. • Develop and document the decision authority framework by gathering requirements, validating operational roles, and ensuring alignment with technical processes. • Partner with incident response teams to build and refine the ransomware incident response plan, leading technical exercises, simulations, and tabletop scenarios. • Contribute technical insights to future‑state technology assessments, tool evaluations, and ransomware resilience capability improvements. • Review and enhance existing: Security policies and standards; Backup and recovery strategies; Risk management processes

• Build, operationalize, and scale the security engineering practices that protect the benefits platform • Work across application security, cloud security, security architecture, supply chain security, detection engineering, and vulnerability management • Partner deeply with the teams building web and mobile applications, backend services, system integrations, card and banking workflows, infrastructure as code, and data platforms • Turn risk reduction into scalable guardrails, automated controls, and clear engineering guidance • Help define secure AI tooling usage, LLM and code-assistant governance, and data protection practices for AI-enabled development workflows • Balance ideal security outcomes with engineering velocity and business priorities

• Lead Contribute to security requirements in designing, developing, and deploying large-scale services and platforms • Conducting security architecture reviews of the application stack, including applications built on cloud and emerging technologies • Design and develop platform-level solutions to promote security-related initiatives and improvements. - Review source code for potential security issues, recommend and implement fixes • Providing specific risk assessment and remediation guidelines for developers and business owners - Belief in automation and tooling as a critical part of the software lifecycle • Document and disseminate security guidelines for common security issues, remediation guidance, and security baselines • Contribute to SOC2 and ISO 27001/27701 audits as needed • Work with developers to provide security guidance • Actively promote improving the security culture and education within the organization • Eager to learn new technologies and solutions • Be curious about how systems work and how they fail, design them to be sustainable in the face of failures