Role Description Ajaia is hiring a Director of IT & Security to own the full scope of internal IT operations, information security, and compliance across a multi-cloud, multi-country organization. This is a hands-on leadership role. You will build and maintain the systems, policies, and infrastructure that keep the company running securely while driving automation wherever possible. - Own internal IT (devices, access, onboarding) - Manage security posture (policies, monitoring, incident response) - Oversee compliance (HIPAA, SOC 2, vendor risk) - Utilize AI tools to automate routine operations, improve monitoring, and accelerate output - Start as an individual contributor with potential to build a small team as the company scales - Use AI in daily workflows across research, ideation, drafting, design iteration, quality checks, and delivery acceleration Qualifications - Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or equivalent experience - 8+ years of experience in one or more of the following areas: - IT operations and infrastructure management - Information security and security operations - Cloud administration and security (GCP, Azure, or multi-cloud environments) - Compliance and audit management (HIPAA, SOC 2, or similar frameworks) - Hands-on experience managing multi-cloud environments (GCP and Azure required) - Working knowledge of HIPAA and SOC 2 compliance, including direct experience preparing for or managing external audits - Experience building and enforcing security policies, access controls, and incident response procedures - Strong understanding of identity management (SSO, MFA, RBAC), endpoint management, and network security fundamentals - Proficiency with AI tools and a working practice of using automation to reduce operational burden - Excellent documentation and communication skills with the ability to translate security concepts for non-technical stakeholders - Comfortable working autonomously in a fast-paced, fully remote, distributed environment Requirements - Relevant certifications: CISSP, CISM, CCSP, CompTIA Security+, or equivalent - Experience with DevSecOps practices, CI/CD pipeline security, or infrastructure-as-code (Terraform, Pulumi, or similar) - Background in vendor risk management and third-party security assessments - Experience supporting healthcare or financial services clients with regulated data requirements - Familiarity with GDPR, DPDPA, or other regional data protection frameworks - Experience with GRC platforms such as Vanta, Drata, or similar tools - Experience with SIEM platforms, vulnerability management tools, or penetration testing coordination Benefits - Base salary: Approximately $35,000 USD per year (calibrated for target regions) - Performance bonus: Opportunity to earn up to 100% of base salary in performance-based bonuses - Salary and total compensation depend on experience, location, and demonstrated performance during the hiring process

• Be part of our Global Engineering Network! • Design and implement a high-availability IBM QRadar SIEM architecture to ensure resilience, scalability, and business continuity. • Perform platform sizing and capacity planning based on log volume, EPS/FPS requirements, retention policies, and future growth. • Lead the deployment, configuration, and optimization of the IBM QRadar platform. • Plan and execute the migration from the existing SIEM solution to IBM QRadar with minimal service disruption. • Integrate, collect, parse, and normalize logs from diverse security devices, network infrastructure, servers, applications, cloud services, and endpoint solutions. • Develop, tune, and maintain correlation rules, use cases, offenses, and detection content aligned with the MITRE ATT&CK framework. • Optimize SIEM performance by reducing false positives and improving detection accuracy. • Configure and manage access security, including Multi-Factor Authentication (MFA), LDAP / Active Directory integration, Role-Based Access Control (RBAC). • Ensure compliance with security standards and organizational policies. • Produce technical documentation, architecture diagrams, deployment guides, and operational procedures. • Collaborate with SOC analysts, infrastructure teams, and cybersecurity stakeholders to continuously improve monitoring and incident detection capabilities. • Provide technical support, troubleshooting, and knowledge transfer to operational teams.

Role Description PNNL's National Security Directorate (NSD) provides the tools, technologies, and training needed to prevent and counter acts of terrorism and the proliferation of weapons of mass destruction (WMD), helping the United States secure its sources, materials, and borders. NSD experts directly support a range of U.S. government departments across critical national security mission areas, including: - Safeguards and security - Cybersecurity - Emergency response - Counterintelligence Within NSD, the Integrated Security Solutions (ISS) group focuses on understanding the full range of security domains and their interdependencies, applying that insight to develop new and effective ways to keep our nation safe. A primary focus of this position is supporting the National Nuclear Security Administration's (NNSA) Office of Radiological Security (ORS), which works to secure high-activity radiological materials at civilian sites across the United States and internationally. Specifically, this role will support ORS domestic implementation teams in executing the new ORS Prevent mission, providing direct technical expertise as a National Security Specialist (NSS) at PNNL. The selected candidate will be organizationally based within the ISS group in NSD while remaining directly accountable to PNNL's ORS Program for project execution and reporting to the assigned ORS Project Manager for day-to-day project activities. This position involves frequent, high-level engagement with senior government, political, and industry stakeholders, including leadership at U.S. Department of Energy (DOE) Headquarters, other U.S. government agencies, hospital administrators, university leadership, and regulators. It offers a meaningful opportunity to make a lasting, positive impact on the security of the nation by helping safeguard high-consequence materials and strengthen the protective posture of critical sites and assets. Additional responsibilities include: - Provide technical expertise in the development, operation, and implementation of security systems, operational security, nuclear material safeguards, vulnerability assessments, risk analysis, security policy, and critical infrastructure protection. - Apply specialized knowledge of equipment and technologies deployed for physical security, WMD counter-proliferation, and interdiction operations. - Develop and implement training, exercises, procedures, logistics strategies, concept of operations, planning, and assessment techniques and tools associated with the deployment, operation, maintenance, and sustainability of these systems. - Conduct assessments, evaluations, and analysis of these systems to support troubleshooting, forecast reliability and sustainability challenges, and identify opportunities for technological or operational enhancements. - Utilize breadth and depth of knowledge related to national and international safeguards and security policies and guidelines in the development and implementation of security strategies. - Areas of emphasis include program planning and management, system design and analysis, tactics and training, requirements definition, and operational sustainability. - Serve as a technical subject matter expert for procurement, installation, and maintenance of integrated systems, including identification of R&D opportunities associated with next-generation security systems, counter-proliferation, and interdiction technologies. - Communicate with a wide range of federal, state, and local authorities regarding policies, requirements, and conduct of operations both domestically and internationally. Qualifications - Minimum Qualifications: - BS/BA and 7 years of relevant experience -OR- - MS/MA or higher and 5 years of relevant experience -OR- - AA and 16 years of relevant experience -OR- - HS/GED and 18 years of relevant experience - Qualifying experience in the following areas will be counted: Department of Energy, Department of Defense, Homeland Security, intelligence community or military that supports national security or radiation detection/protection operations. - Preferred Qualifications: - Physical Security Systems: Hands-on experience designing, implementing, configuring, and maintaining physical security components, including access control, intrusion detection, video surveillance, and delay/denial systems, preferably in support of high-consequence assets such as radiological materials or critical infrastructure. - Security Planning & Assessment: Demonstrated experience developing site security plans and executing self-assessments, performance testing, and vulnerability discovery to identify and close gaps in protective postures. - Training, Delivery & Mentoring: Proven ability to design and deliver technical training to diverse audiences, and to mentor staff and partners by building rapport and trusted relationships across all levels of an organization, from front-line operators to executive leadership. - Cybersecurity Fundamentals: Working knowledge of cybersecurity principles as they relate to the integration, hardening, and protection of networked physical security systems and operational technology (OT) environments. - Response & Law Enforcement Training: Experience providing response-focused training to law enforcement and security personnel through workshops, tabletop and field exercises, and on-site delivery of operational training. - Federal Program Experience: Prior experience supporting the U.S. Department of Energy (DOE), National Nuclear Security Administration (NNSA), Nuclear Regulatory Commission (NRC), or comparable federal agencies, including effective communication with senior government officials, regulators, and program leadership. - Insider Threat Mitigation: Experience supporting insider threat programs, including risk assessment, behavioral indicators, and integration with broader physical and cyber security controls. - Uncrewed Systems (UxS) Knowledge: Experience with uncrewed systems (aerial, ground, or maritime), including both UxS operations and counter-UxS strategies for protecting high-value targets and facilities. - Professional Certifications: Industry-recognized security certifications such as Physical Security Professional (PSP) or Certified Protection Professional (CPP). Requirements - U.S. Citizenship - Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix B. - Drug Testing: All Security Clearance positions are Testing Designated Positions, which means that the applicant selected for hire is subject to pre-employment drug testing, and post-employment random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP). - Testing Designated Position: This position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program. Benefits - Medical insurance - Dental insurance - Vision insurance - Robust telehealth care options - Several mental health benefits - Free wellness coaching - Health savings account - Flexible spending accounts - Basic life insurance - Disability insurance* - Employee assistance program - Business travel insurance - Tuition assistance - Relocation - Backup childcare - Legal benefits - Supplemental parental bonding leave - Surrogacy and adoption assistance - Fertility support - Employees are automatically enrolled in our company-funded pension plan* and may enroll in our 401 (k) savings plan with company match* - Employees may accrue up to 120 vacation hours per year - Employees may receive ten paid holidays per year

• Monitor security events and provide technical analysis on alerts • Lead information security incidents and employee insider investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident • Deliver security guidance clearly and concisely for incident response and insider threat initiatives • Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat • Champion, role model, and embed Samsara’s cultural principles as we scale globally and across new offices • Participate in our on-call rota covering weekends