• Coordinate cyber range environments that allow customers to safely build, train, and evaluate AI agents against realistic adversary behaviors, enterprise network conditions, simulated telemetry, security tool outputs, and operational workflows• Support customers in training AI agents using realistic cyber scenarios, including attack progression, detection events, incident artifacts, forensic evidence, adversary TTPs, and SOC decision points• Collaborate with range engineers, AI engineers, detection engineers, threat emulation teams, and customer SOC teams to create repeatable AI agent test scenarios mapped to real-world threats and defensive objectives• Help customers compare AI agent performance against baseline human workflows, existing automation, playbooks, and security stack capabilities• Document AI agent test outcomes, gaps, risks, improvement opportunities, and recommended next steps in customer-ready reports and executive summaries• Develop repeatable AI agent validation playbooks, test plans, scoring rubrics, and after-action reporting templates for use across customer engagements• Support customers in progressing from prototype AI agent concepts to validated operational use cases that can be safely integrated into cyber defense workflows• Ensure customers can demonstrate that their AI agents are not only functional, but tested, trusted, monitored, and aligned to real-world cyber defense requirements• Lead the overall event and be responsible for the ultimate success• Interface with the customer to define goals, scope and schedule• Develop detailed event schedules, tasks and milestones• Work with customer to define requirements for network topology, defensive tool suite, and threat presentation• Scope level of effort and staffing with supporting Professional Services teams• Track all activities associated with the events planning, preparation, execution and reporting providing leadership updates on any areas of concern• Work with the customer event lead to manage all details• Lead all internal and customer-facing planning meetings• Lead the event execution and post-event administration• Structure and lead teams to deliver outstanding customer experiences and value• Build and maintain strong customer relationships; exceptional relationship-builder• Share in knowledge dissemination, reporting, and communications• Ability to work efficiently and flexibility to bring value to customers via the SimSpace platform and associated events• Build and maintain relationships with a wide array of people – junior and senior, and from diverse backgrounds

• Champion the integration of AI, intelligent automation, and advanced security technologies • Design and advance a globally integrated ecosystem of security technologies • Ensure interoperability and integration between physical security systems, enterprise data platforms, and digital technology infrastructure • Partner with Digital Technology, Corporate/Regional Security, EHS, Cybersecurity, Legal, Privacy, Compliance, and Sourcing • Evaluate emerging technologies such as AI-enabled video analytics, computer vision, sensor networks, and advanced situational awareness platforms

Role Description This project will optimize the agency's CrowdStrike SIEM and related CrowdStrike services to improve threat detection, monitoring, and response capabilities. The contractor will expand and tune telemetry, integrate additional high-value log sources, enhance security dashboards, and support the rollout of additional CrowdStrike services. The effort will increase visibility into endpoint and security risk, improve signal quality and correlation, and provide security leadership with clear insight into security operations effectiveness and overall risk posture. Expected Outcomes: - Expanded and optimized CrowdStrike SIEM telemetry coverage - Integration of additional high-value log sources - Improved dashboards for operational and executive visibility - Enhanced detection fidelity and monitoring effectiveness - Clearer insight for leadership into endpoint risk and security operations performance Duties to Be Performed: - Assess current CrowdStrike SIEM configuration, telemetry coverage, and log ingestion - Enable and tune additional CrowdStrike telemetry to improve visibility and signal quality - Identify and integrate new high-value log sources into CrowdStrike SIEM - Develop and refine security dashboards aligned to SOC and executive use cases - Assist with technical enablement and rollout of additional CrowdStrike services - Validate data quality, parsing, and correlation within the SIEM - Coordinate with Security Operations, IT Operations, and system owners - Identify gaps, risks, and improvement opportunities in monitoring and detection - Provide weekly status updates and monthly executive-level progress summaries - Deliver supporting documentation and recommendations to sustain improvements Deliverables: - Summary of work performed and capabilities delivered - Documentation supporting all telemetry enablement, log integrations, and dashboard implementations - Measurable improvements in monitoring, detection, or visibility - Recommendations for future enhancements or next-phase efforts Qualifications - 8 years - Demonstrated skill with documentation, reporting, and knowledge transfer - 8 years - Experience with Stakeholder Engagement, and Executive Communication - 8 years - Experience in SIEM Detection Engineering and Alert Optimization - 8 years - Experience in Log Source Integration and Data Normalization - 3 years - Hands-On Experience with CrowdStrike SIEM and Dashboard Development - 5 years - Hands-On Experience with SIEM and Dashboard Development (Preferred) Requirements - Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity. Company Description - Solicitation Reference Number: 70126092 - Customer/Dept: Texas Education Agency

Role Description You'll be embedded in the product development process, not sitting outside it. From threat modeling new features before they're built, to reviewing code with engineers, to making sure regulatory requirements turn into real, scalable solutions, you'll shape how Higgsfield builds securely as we grow. Responsibilities - Conduct threat modeling of new features - Test new features and products pre-release - Partner with engineers on security design and code review - Develop security processes that fit into existing delivery cycles - Turn regulatory requirements into scalable solutions Qualifications - Ability to read and understand code (Go, Python, TypeScript) - Basic understanding of AWS and Kubernetes security - High agency - Working English Requirements - Experience with LLM/agent attack surface (nice to have) - Ability to write code (nice to have) Benefits - Shift schedule: 2/2 - Competitive salary in USD - Preferably on-site in Almaty (remote possible) - Full-time position, part of a world-class team