• Lead day-to-day IT operations and maintain a secure, compliant, and reliable technology environment. • Administer, configure, and troubleshoot Microsoft Entra ID, Intune, Defender, SharePoint Online, and related Microsoft 365 services. • Oversee Cristcot’s Managed Service Provider and other technology vendors. • Drive execution, resolve issues, improve processes, and ensure technology enables business. • Manage identity and access controls, including multifactor authentication, Conditional Access, privileged roles, single sign-on, guest access, and user lifecycle management. • Manage Intune device enrollment, Autopilot, compliance policies, configuration profiles, application deployment, security baselines, and update policies. • Investigate Microsoft Defender alerts and coordinate security remediation. • Administer SharePoint sites, permissions, external sharing, governance, and access issues. • Lead operational cybersecurity activities and continuously improve Cristcot’s security posture. • Ensure IT processes and controls support applicable GxP requirements and company quality standards.

• Perform vulnerability research on embedded systems and software applications to identify previously undisclosed security risks • Reverse engineer multiple architectures and platforms as needed, including ARM, x86, x64, and MIPS • Leverage both static and dynamic analysis tools for firmware/software evaluation • Bypass modern security controls (such as ASLR, NX, canaries) in order to develop a working proof-of-concept (PoC) • Apply knowledge of offensive and defensive reverse engineering techniques, including countering and developing advanced security measures • Design, develop, or analyze low-level system components, including kernel modules and other system foundational firmware services • Develop tools and software solutions using python scripts, C, or other programming languages as needed • Work proficiently within a Unix/Linux operating system environments

Role Description The Facility Security Officer (FSO) is responsible for administering and maintaining AgTS’s industrial security program as a cleared contractor in the National Industrial Security Program (NISP). This role is intended for a hands-on FSO who can operate independently, maintain compliant records and systems, support personnel clearance actions, coordinate with DCSA and government/customer security offices, and keep senior management informed of security program status, risks, and required actions. Primary Duties and Responsibilities - Serve as AgTS’s appointed FSO and primary company point of contact for industrial security matters with DCSA, NAESOC/ISR/CISA personnel, government customers, primes, and subcontractor security offices. - Maintain AgTS’s facility security records and required online security accounts and workflows, including NISS, DISS, NBIS/eApp, SWFT, NCAISS and successor systems, as applicable. - Maintain and update Facility Clearance (FCL) information, Key Management Personnel (KMP) records, FSO appointment documentation, SF-328 / FOCI-related data, change condition packages, and other DCSA submissions. - Administer personnel security clearance actions including initial clearance processing, upgrades, reinvestigations/continuous vetting support, SF-312 processing, fingerprints, eligibility/access records, outbriefings/debriefings, adverse information reporting, and routine employee security questions. - Review, track, and maintain classified contract security requirements, including DD Form 254 records, contract security classification guidance, access requirements, NATO/COMSEC/CUI-related flow-downs, and contract-specific limitations for a non-possessing facility. - Process and coordinate visit requests, visit certifications, CAC or government access support, customer/program access documentation, PAR/PSQ-related coordination when required, and need-to-know validation with program managers. - Develop, update, and deliver security education, training and awareness activities, including initial briefings, annual refresher training, special briefings, NATO or contract-specific briefings, foreign travel/contact reminders, and continuing awareness communications. - Conduct or lead annual self-inspections, maintain evidence, document findings and corrective actions, brief senior management on results, and support DCSA security reviews or continuous monitoring engagements. - Prepare and submit required reports for security incidents, suspected loss/compromise, adverse information, changed conditions, suspicious contacts, foreign travel/reportable activities, and other NISPOM/SEAD-3 reporting obligations. - Maintain security records in controlled repositories, including FSO-only records where appropriate, and ensure records are complete, retrievable, and retained consistent with AgTS procedures and applicable security requirements. - Coordinate with the Insider Threat Program Senior Official (ITPSO), cybersecurity/CMMC stakeholders, export compliance, HR, contracts, program management, and operations to ensure security requirements are addressed across AgTS processes. - Advise leadership on security program risks, resource needs, process gaps, upcoming deadlines, and compliance impacts associated with FCL status, PCL eligibility, contract requirements, foreign ownership/control issues, and customer expectations. Qualifications - Non-Possessing Facility Experience - Direct experience as an FSO, AFSO, security specialist, contractor program security officer, or comparable industrial security role for a cleared, non-possessing or access-elsewhere contractor. - Practical working knowledge of 32 CFR Part 117 (NISPOM), DCSA/NAESOC processes, DISS/NISS/NBIS workflows, eApp/e-QIP concepts, SF-312s, KMP management, FCL sponsorship or upgrade support, and annual self-inspection expectations. - Experience managing cleared employees who perform classified work at U.S. Government or prime contractor locations rather than storing classified material at the company facility. - Experience with DD Form 254 interpretation and maintenance, classified visit procedures, access verification, need-to-know validation, subcontractor/security office coordination, and contract security recordkeeping. - Experience managing reportable events and security inquiries, including adverse information, suspicious contacts, foreign travel/contact reporting, possible security violations, and preliminary fact gathering for incident reports. - Familiarity with FOCI/SF-328, change condition packages, board/KMP questions, exclusion resolutions, and coordination with DCSA for cleared companies with affiliates, ownership changes, or foreign person considerations. - Ability to translate security requirements into practical, understandable guidance for operations personnel, deployed personnel, managers, and senior leadership. - U.S. citizenship and ability to maintain personnel security eligibility at the level required for the AgTS FCL. - Active Top Secret eligibility strongly preferred. Candidates with Secret eligibility may be considered if they have strong FSO experience and can be upgraded as required by business need. - Completion of CDSE FSO Orientation for Non-Possessing Facilities (IS020.CU), or ability to complete the curriculum promptly after appointment if selected as an internal development candidate. - Demonstrated understanding of NISPOM requirements and the role of the FSO in supervising and directing security measures for a cleared contractor facility. - Hands-on working knowledge of DISS, NISS and NBIS/eApp or equivalent security systems used for personnel and facility security administration. - Strong written communication skills, discretion in handling sensitive personnel/security matters, and the ability to prepare clear, factual communications for DCSA, customers, employees, and management. - Excellent organization and follow-through; ability to independently manage deadlines, records, recurring compliance actions, customer requests, and system notifications. - Proficiency with Microsoft Office and common document/records management tools. SharePoint/Microsoft 365 experience is preferred. - Valid U.S. passport or willingness/ability to obtain one if travel is required. Preferred Qualifications - Current or recent FSO/AFSO appointment for a DCSA-cleared contractor. - Experience supporting a non-possessing facility, access-elsewhere contract performance, deployed field service personnel, or classified work performed at Government/customer sites. - Experience preparing for DCSA security reviews, conducting self-inspections, preparing SMO certification packages, and managing corrective actions. - Working knowledge of Insider Threat Program requirements and the interface between FSO, ITPSO, cybersecurity, export compliance and CMMC controls. - Experience with export compliance, DDTC/DECCS/SNAP-R concepts, CAC/Navy email/DoD SAFE coordination, or overseas/deployed personnel support is a plus. - Security professional certification or professional development through NCMS, CDSE, ASIS, SPēD, or comparable security organizations is a plus. Success Profile - Comfortable working with senior management and government security personnel while maintaining clear boundaries on what is required, recommended, or optional. - Able to convert complex security requirements into practical employee instructions, checklists, training, and records. - Detail-oriented and evidence-minded: maintains audit-ready records, documents decisions, tracks open actions, and closes loops. - Calm and factual under pressure, especially when handling security incidents, DCSA questions, or employee clearance issues. - Willing to partner across compliance, operations, contracts, HR, cybersecurity, quality, and export control programs. Physical Demands - While performing the duties of this job, the FSO spends a lot of time sitting and is also required to stand, walk, sit, climb stairs, speak and hear. - The FSO must be prepared for interruptions as they manage several projects simultaneously. - The FSO must also be able to lift or move office products and supplies up to 30 pounds. Export Control Notice This position may require access to or use of information which is subject to the federal International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR). All applicants for this position must be U.S. Persons within the meaning of ITAR and EAR. ITAR and EAR define a U.S. Person as any individual who is a citizen of the United States, a permanent resident alien of the United States, or a protected individual as defined by 8 U.S.C. 1324b(a)(3). NOTE: This job description is not intended to be all-inclusive. Employees may perform other related duties as negotiated to meet the ongoing needs of the organization.

• Perform offensive security testing on hosts running various platforms and operating systems (Windows, UNIX, Linux); • Conduct intrusion tests (penetration testing) on network infrastructures, cloud systems, mobile applications (Android, iOS), and web applications; • Ethically and responsibly exploit vulnerabilities, whether documented or previously undocumented; • Analyze log files from various sources (hosts, network traffic, firewalls, intrusion detection systems) to identify potential security threats; • Collaborate with the defensive team to establish controls and measures that prevent identified exploitations; • Produce detailed reports on exploitation activities performed and document actions taken during tests; • Present penetration test results and act in a consultative capacity, providing support to incident response teams; • Operate autonomously to perform intrusion tests and pentests across different platforms and environments, adhering to ethical and legal guidelines; • Ability to propose and recommend preventive and corrective actions to mitigate identified vulnerabilities; • Authority to guide and assist defensive teams in implementing controls and adjustments based on test findings.