• Obtain contractor support for administrative, processing, records management, and reporting activities that support daily HR operations. • Assist with processing and tracking personnel actions, including SF-52 and SF-50 transactions. • Generate, review, and reconcile HR reports; support data calls and audits. • Maintain electronic Official Personnel Folders (eOPFs) and HR records in accordance with federal requirements. • Track HR actions, maintain logs, schedule meetings, and prepare routine correspondence. • Respond to routine HR inquiries and refer complex matters to HR specialists, as appropriate. • Timely and accurate processing of assigned HR actions. • Regular status reports on completed and pending work. • Accurate maintenance of HR records and tracking systems. • Reports and reconciliations as requested by management. • Review documents for relevance according to established guidelines and criteria. • Perform legal and administrative duties as requested by attorneys for Section investigations and trials. • Assist with case organization and maintenance; plays integral role in preparing team for witness interviews, discovery, and trials. • Provide in-courtroom assistance, exhibit collection and review, and legal research as needed based on trial demands. • Utilize eDiscovery platforms to perform document review, communicating detailed summaries and analyses of findings. • Cultivate and maintain positive relationships with DOJ components, Federal agencies, counsel, and others as needed. • Organize and prioritize numerous tasks effectively and completes tasks under strict time constraints. • Work on multiple cases simultaneously and multi-task with minimal supervision. • Log and organize incoming and outgoing discovery productions. • Proofread material as needed for contextual, grammatical, and formatting errors.

• Support the design and improvement of identity, access, profile, workflow, and integration processes; • Participate in initiatives to automate, standardize, and evolve IAM solutions; • Analyze opportunities to improve provisioning, review, approval, and access governance; • Support system integrations, define requirements, and validate identity controls; • Contribute to the evolution of RBAC, SoD, identity lifecycle, and access controls; • Support technical documentation, procedures, flows, and governance criteria; • Work closely with architecture, infrastructure, squads, governance, and IAM operations.

• Manage, review and improve firewall, IPS/IDS, NAC, segmentation and defense-in-depth controls; • Evaluate rules, policies, flows, exceptions and risks related to network security; • Support connectivity, segmentation, expansion, cloud, datacenter and environment integration projects; • Conduct technical analyses of network-related incidents, events, failures and exposures; • Define operational standards, documentation, metrics and improvement recommendations; • Interact with Infrastructure, Architecture, BlueOps, CSIRT and vendors; • Support hardening actions, attack surface reduction and visibility improvement;

Role Description We are seeking a Vulnerability Management engineer to join our team as both a vulnerability management practitioner and an automation builder. This role combines traditional vulnerability analysis and remediation coordination with a strong emphasis on developing AI-powered tools and automations that scale the team's effectiveness. You will analyze vulnerabilities across infrastructure, cloud, and application layers, coordinate remediation with engineering teams, and build automation that makes the entire program faster and smarter. Key Responsibilities - Vulnerability Discovery & Security Research (40%) - Conduct deep-dive source code audits of UKG products (Java, .NET, Python, JavaScript) to discover novel vulnerabilities. - Develop working proof-of-concept exploits that demonstrate real impact. - Perform variant analysis to systematically search the entire codebase for every instance of the same root cause pattern. - Triage and validate findings from automated scanners (SAST, DAST, SCA). - Investigate and reproduce externally reported vulnerabilities to assess actual exploitability in UKG's environment. - Collaborate with engineering teams on remediation. - AI-Powered Vulnerability Automation (35%) - Build AI-assisted vulnerability discovery tools using automation. - Develop autonomous security scanning agents. - Create AI-powered remediation tools. - Build automated vulnerability lifecycle pipelines. - Contribute to the team's shared automation repositories. - Vulnerability Management & Remediation Driving (20%) - Own vulnerability remediation outcomes for assigned product areas. - Produce clear, actionable vulnerability reports. - Drive mean time to remediate (MTTR) down through better automation. - Support vulnerability management program metrics and dashboards. - Support compliance-driven vulnerability management requirements. - Research & Knowledge Sharing (5%) - Publish internal/external research on novel vulnerability classes. - Stay current on emerging vulnerability classes and exploitation techniques. - Mentor other team members on vulnerability research methodology. Qualifications - 7+ years of hands-on experience in vulnerability research, application security, or penetration testing. - Demonstrated ability to read and audit source code in at least two of: Java, C#/.NET, Python, JavaScript/TypeScript, Go, C/C++. - Experience developing working proof-of-concept exploits. - Strong proficiency in Python for building security tools. - Experience with AI/ML tools for security. - Deep understanding of common vulnerability classes. - Experience with vulnerability management programs. - Ability to work directly with development teams. - Excellent written communication. - Bachelor's degree in Computer Science, Cybersecurity, or equivalent experience. Preferred Qualifications - Published CVEs, security advisories, or bug bounty findings. - Experience in SaaS/multi-tenant environments processing sensitive data. - Familiarity with SAST/DAST/SCA tooling. - Experience with cloud security assessment. - Familiarity with FedRAMP, NIST SP 800-53, or federal compliance frameworks. - Security certifications that demonstrate hands-on skill. - Conference presentations, published research, or open-source security tool contributions. - Experience with reverse engineering, binary analysis, or firmware security. Benefits - Competitive base salary. - Annual bonus. - Equity. - Full medical/dental/vision. - 401(k) match. - Unlimited PTO. - Professional development budget. - Remote work eligibility anywhere in the US. Company Description UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched.