Careers
Own the work.
Build systems that last.
Senior, hands-on roles in small teams, with responsibility from design through delivery.
Current hiring status
No open positions today.
We staff commercial, state, and federal work as contracts are awarded. Send your resume for future consideration; we keep it on file for 12 months and contact you when there’s a match.
Future opportunities
Roles we plan to staff.
These are role profiles, not current vacancies. Pay, terms, and location are published when a position opens.
Systems & Cloud Engineer
Build and operate cloud infrastructure, identity, backup, and monitoring.
RHEL · AWS GovCloud · Azure Government · Terraform · Ansible
DevSecOps Engineer
Build secure pipelines and repeatable deployments, with evidence produced along the way.
Kubernetes · GitLab CI · Argo CD · Iron Bank · Trivy
Atlassian Platform Engineer
Configure and integrate Jira, Jira Service Management, and Confluence.
Jira · JSM · Confluence · Government Cloud · REST APIs
Data & AI Engineer
Build data pipelines and applied AI with documented data handling.
Databricks · Snowflake · Microsoft Fabric · Azure OpenAI
Program & Task Order Manager
Own schedules, deliverables, risks, and the working relationship with the customer.
FFP and T&M · Agile delivery · CDRLs · Jira · Confluence
State and federal programs
Cybersecurity roles.
Roles we plan to staff for state and federal cybersecurity programs. These are role profiles, not current vacancies.
Architecture & engineering
Security Architect
Design security into systems and networks, from zero trust patterns to control mapping.
NIST 800-53 · Zero Trust · Threat modeling · Cloud reference architectures
Security Engineer
Build, configure, and maintain security controls across networks, endpoints, and applications.
Firewalls · EDR · Network segmentation · System hardening · Scripting
Cloud Security Engineer
Secure cloud accounts, workloads, and identities, and keep configurations compliant.
AWS · Azure · Cloud security posture management · IAM policy · Terraform
Identity and Access Management (IAM) Engineer
Run single sign-on, multifactor authentication, and privileged access.
Entra ID · Okta · SAML and OIDC · Privileged access management
OT Security Engineer
Secure industrial control systems and plant networks without disrupting operations.
ICS and SCADA · IEC 62443 · Network segmentation · Asset inventory
AI Security Engineer
Secure AI and machine learning systems, models, and the data that feeds them.
NIST AI RMF · Prompt injection defense · Model and data governance
Detection & response
SOC Analyst
Monitor alerts, investigate events, and escalate incidents.
SIEM · EDR · Alert triage · Incident response
Detection Engineer
Write, test, and tune SIEM detection rules and content.
Splunk · Microsoft Sentinel · Sigma · KQL and SPL
Threat Hunter
Search proactively for attackers who have slipped past existing defenses.
Hypothesis-driven hunting · EDR telemetry · KQL and SPL · MITRE ATT&CK
Threat Intelligence Analyst
Track threat actors and turn intelligence into detections and briefings.
MITRE ATT&CK · STIX and TAXII · OSINT · Reporting
Insider Threat Analyst
Detect and investigate risky activity by people with trusted access.
UEBA · Data loss prevention · Case management
Testing & vulnerability management
Penetration Tester
Test networks and applications under agreed rules of engagement, and report what you find.
Burp Suite · Metasploit · Nmap · Written findings
Vulnerability Management Analyst
Find, prioritize, and track vulnerabilities through remediation.
Tenable · Qualys · CVSS · CISA KEV · Patch tracking
Security operations
Security Tools Administrator
Install, tune, and maintain security platforms so they stay healthy and integrated.
SIEM · EDR · Vulnerability scanners · Log pipelines
Security Operations Engineer
Keep deployed security solutions running day to day and resolve issues that affect them.
Runbooks · Patching · Monitoring · Ticket queues
How to introduce yourself
Email resume@kosmatechnology.com with the role name in the subject line, your resume, work authorization status, and whether you hold or have held a Public Trust or security clearance.
How we evaluate candidates
A hands-on technical evaluation uses a written rubric and a relevant environment. Federal roles have citizenship and suitability requirements set by the awarding agency.