Quantum Sky

Lead SOC operations and continuous improvement, including incident response, threat hunting, analyst training, playbooks, reporting, and stakeholder communication. | Requires a bachelor's degree, an advanced cybersecurity certification, at least five years of senior SOC experience, incident command expertise, and Top Secret clearance with SCI eligibility. | Responsibilities: • Serve as the foremost technical authority and point of escalation regarding monitoring, detection, analysis, and incident response • Be the primary technical leader and change agent for the planning and execution of continual improvement initiatives including but not limited to: knowledge management, documentation, automation, tuning, lessons learned, QA/QC, and metrics • Ensure a full library of Plans, SOPs, and playbooks exists for all SOC functions • Create and implement a training plan to ensure all Analysts on your team have superior levels of knowledge and experience to triage and investigate all types of alerts • Maintain constant awareness of the security posture of the organization versus internal and external threats, notifying stakeholders of changes, trends, and immediate threats or vulnerabilities; make recommendations to more effectively monitor, defend, and continuously improve the security posture of the organization • Define, document, execute, measure, monitor, and improve SOC processes, paying special attention to integration points with other internal and external teams • Write and publish after-action reviews; ensure lessons learned result in action items that are resolved and closed in a timely manner • Build and implement a robust Cyber Threat Hunting program • Correlate and contextualize Cyber Threat Intelligence; identify actionable indicators of compromise; disseminate and make recommendations to senior leadership regarding courses of action • Plan and execute test exercises; recommend modifications or adjustments based on results • Author, brief, and submit daily, weekly, and monthly status reports and other deliverables as required • Remain abreast of current and emerging cybersecurity tools and technologies • Other duties as assigned Qualifications Required: • Bachelor's degree (or an additional 4 years of related experience) • At least one advanced cybersecurity certification is required (e.g., CISSP, CISM, CEH, GIAC/SANS, etc) • Minimum five (5) years of SOC experience in a Tier 3, Shift Lead, SOC Lead, or similar role including: • Advanced knowledge and experience providing technical leadership during major incidents (i.e., in an "incident commander" role) • Advanced technical understanding of current and emerging cybersecurity tools and technologies • Technical understanding of the full cyber threat/attack lifestyle, including attack vectors, methods, and TTPs • Understanding of and experience with intelligence-driven defense • Mature understanding of industry SOC standards and best practices (e.g., OMB, NIST, US-CERT, etc.) • Strong leadership, written and verbal communication, customer service, and analytical and problem-solving skills are required • Ability to provide steady leadership in a high-pressure environment with changing priorities. Desired: • Active Program Management certification OR ability to obtain one within 90 days of hire. Clearance: • Top Secret Clearance, SCI Eligibility required Location: • This is a hybrid role that can be based in Washington, DC but would require travel to Columbia, SC up to one week per quarter.

Manage daily security operations including system hardening, vulnerability remediation, and security tool maintenance across AWS and GCP, participate in 24/7 on-call incident response, and ensure compliance with FedRAMP, FISMA, and NIST frameworks. | 6+ years IT or cybersecurity experience with at least 3 years in cloud security engineering, proficiency in AWS and GCP, and experience in vulnerability management and system administration. | Description Quantum Sky is hiring a Cloud Security Engineer (AWS & GCP) to join our team of cloud, security, and compliance experts. This role is primarily focused on day‑to‑day security engineering, including system hardening, vulnerability remediation, cloud operations, and security tool management across AWS & GCP environments. In addition to regular business‑hours responsibilities, engineers participate in a structured after‑hours 24×7 on‑call rotation (primary or backup) to support response to incidents, alerts, and escalations for customers operating under FedRAMP, FISMA, and NIST 800‑53 frameworks. Responsibilities: Perform systems administration and maintenance including patching, vulnerability scanning, compliance scanning and remediation, backups, and recovery for cloud workloads. Support AWS & GCP environments, including Windows and Linux virtual machines, container workloads, and cloud services such as EC2, EBS, S3, RDS, WorkSpaces (AWS), Compute Engine, Cloud Storage, Cloud SQL (GCP), and Active Directory or equivalent identity services. Configure, update, and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring. Troubleshoot issues across network, compute, application, and identity layers by reviewing logs, collecting data, and analyzing system behavior. Implement hardening and compliance controls using CIS Benchmarks, DISA STIGs, and FedRAMP requirements. Remediate vulnerabilities identified by tools such as Tenable, Trivy, OpenSCAP, Anchore, Twistlock, and others. Provide quality assurance feedback during system deployments to ensure architecture meets compliance and operational requirements. Collaborate with Security Analysts to ensure uninterrupted delivery of security services to customers. Create and maintain documentation including network diagrams, dataflow diagrams, SOPs, and security tool configuration guides. Support client communications, deliverables, and issue resolution with strong verbal and written communication skills. Support and mentor junior engineers as and when required. After‑Hours 24×7 On‑Call Rotation: Serve as primary or backup on‑call engineer during assigned rotation. Respond to after‑hours security alerts, infrastructure incidents, outages, and ConMon events. Perform initial triage, containment, and stabilization using established runbooks. Investigate and respond to alerts generated. Escalate complex issues to senior engineers, architects, or compliance teams. Document incidents, actions taken, and recommended improvements. Contribute to automation improvements and runbook enhancements. Qualifications Required: Six (6) or more years of IT engineering and/or cybersecurity experience, with at least three (3) years working in a dedicated cloud security engineering or similar position. Hands‑on experience with both AWS and Google Cloud Platform (GCP). Ability to diagnose and resolve issues across Linux and Windows systems, network infrastructure, and cloud services. General systems administration and vulnerability management experience, including system patching and hardening, identity and access management (IAM), and related tasks. Experience working in a DevSecOps environment, integrating security practices into cloud and infrastructure workflows. Familiarity with ITSM ticketing systems such as Gitlab (preferred), Jira, ServiceNow, etc. Ability to work independently during both business hours and on‑call periods. Strong written and verbal communication skills for customer interaction and incident documentation. Hands‑on experience with one or more of the following tools: Splunk Enterprise Tenable Security Center/Nessus Invicti/Acunetix Appgate Okta GitLab Palo Alto Networks Firewalls TrendMicro Deep Security Trivy Anchore Terraform CloudFormation Ansible Desired: Bachelor's Degree in Computer Science or other relevant field. Experience supporting federal/government-facing customers or consulting engagements, ensuring compliance and operational requirements. Experience with FedRAMP, FISMA, or NIST 800‑53 compliance frameworks. Prior on‑call, SRE, SOC, or incident response experience. Relevant AWS or Google Cloud Platform certifications. Security+ or other relevant industry security certification. Experience with infrastructure‑as‑code or automation tooling. Experience with Kubernetes is highly desirable. Location: Remote (US) Clearance: Must be a US Citizen with the ability to obtain a security clearance About Quantum Sky Compensation: Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $115,000-$140,000 This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range. Benefits: Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave. The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it. At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky? Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.

Develop and maintain web applications and sites supporting government program management with a focus on security, responsiveness, and stakeholder requirements. | Bachelor's degree, 3+ years web development experience, active IAT Level II certification, strong knowledge of MS SharePoint, JavaScript, CSS, HTML, REST, JSON, and Power Platform, plus cybersecurity experience. | Quantum Sky is searching for a Web Developer and Designer to support a Government Program Management Office in Suitland, MD. Responsibilities: • Support the Chief Technology Officer (CTO) with creation and maintenance of websites and applications for various business management, inventory management, change management, and program tracking systems. • Responsible for management of web development, design, and applications. Implement various database entry and retrieval functions for multiple users. • Develop and implement well designed, testable, back-end programming to provide users with functional, data-visualization front-end interfaces. • Continuously review existing applications alignment with stakeholder requirements and performance, optimization, resilience, and security risks. Identify problem areas and develop solutions. • Troubleshoot and optimize web pages and applications for security and responsiveness via testing, evaluation, and coordination with stakeholders. • Remain current with emerging technologies by using industry best practices and applying innovative designs with websites and applications. • Assist with development, review, and preparation of briefing materials, reports, and other project documentation. Coordinate responses to periodic reports. • Provide input to department strategic decisions that affect the functional area of responsibility. Required: • Bachelor’s degree in information technology related field. • Three (3) or more years of relevant web development and application experience. • Active IAT Level II certification (e.g. CompTIA Security+ or other eligible certifications). • Extensive knowledge of MS SharePoint, JavaScript, CSS, HTML, REST, and JSON. • Extensive knowledge of the MS Power Platform (Power Automate & Power Apps/Power Fx) with working knowledge and/or familiarity with Power BI. • Experience in protecting data, software, and hardware by coordinating, planning, and implementing cybersecurity measures. • Excellent communication and customer service skills (written and oral); able to effectively interact with customers, partners, and associates through multiple means. Desired: • Familiarity with DOD and/or U.S. Navy organizations and functional missions. • At least one other Web Developer professional certification or certificate, such as CWP, CSDP, MCAD, MCPD, MCSA Web Applications, MCSD SharePoint Applications, MCSE SharePoint, etc. • Understanding of Inventory Management and/or Financial Management software. Clearance: • TS/SCI Location: • Suitland, MD. Work is located 100% on government site. Travel: • <10%