We are looking for a Cybersecurity Analyst to support a focused application security effort centered on identifying, validating, and resolving exposed secrets and credentials within source code repositories. This role is based in Murray, Utah, and is offered as a Long-term Contract position. The person in this role will work closely with engineering and security partners to move findings from investigation through remediation and documented closure in a fast-paced, project-driven environment.<br><br>Responsibilities:<br>• Investigate security alerts related to exposed credentials and embedded secrets found in source code repositories, confirming validity and potential risk.<br>• Partner with software engineers, application owners, and security teams to assign ownership, define remediation steps, and drive issues through resolution.<br>• Use scripting and automation tools such as PowerShell, Bash, or Python to streamline analysis, tracking, and follow-up activities.<br>• Review repository history and code context in Git and GitHub to support remediation planning and verify corrective actions.<br>• Document findings, decisions, remediation progress, and final disposition in a clear and audit-ready manner.<br>• Coordinate with cross-functional stakeholders across a large engineering organization to maintain momentum on a backlog of security findings.<br>• Evaluate factors such as credential type, privilege level, environment, and exposure scope to help prioritize response actions.<br>• Validate that completed fixes fully address the identified issue and close findings with accurate reporting and supporting evidence.
<p>Want to build security, not just maintain it?</p><p>This isn’t a role where you’ll inherit a mature security program, spend your days updating policies, or stay buried in one narrow piece of the environment.</p><p>We’re looking for an experienced security focused<strong> Systems Engineer</strong> who wants to take real ownership of security and compliance while staying hands-on with the technology behind it.</p><p>You’ll serve as a go-to security expert across the organization, partnering closely with IT leadership to strengthen the security program, advance CMMC and NIST compliance, and tackle infrastructure and systems initiatives along the way.</p><p>And yes, there’s a pretty great perk: <strong>work four 10-hour days and get a three-day weekend every week.</strong></p><p><br></p><p>Why This Role Is Different</p><p>This is a <strong>newly created position</strong>, which means there’s an opportunity to put your fingerprints on the security program rather than simply stepping into someone else’s playbook.</p><p>You’ll have:</p><ul><li><strong>Ownership:</strong> Help build, mature, and operationalize the security and compliance program.</li><li><strong>Executive visibility:</strong> Work closely with IT leadership and the CTO on security strategy, risk, and framework roadmaps.</li><li><strong>Hands-on technical work:</strong> Security is the priority, but you’ll still work with systems, infrastructure, identity, endpoints, networking, Microsoft 365, and cloud technologies.</li><li><strong>Autonomy:</strong> You’ll be trusted to own projects, make recommendations, communicate risk, and drive initiatives forward.</li><li><strong>Variety:</strong> Work across security, compliance, infrastructure, and systems rather than being siloed into one narrow function.</li><li><strong>A 4/10 schedule:</strong> Four workdays. Three-day weekends. Enough said.</li></ul><p>What You’ll Own</p><p>Your center of gravity will be <strong>security and compliance</strong>, particularly within a government contracting environment.</p><p>You’ll:</p><ul><li>Drive readiness and ongoing compliance for <strong>CMMC Level 2 and NIST SP 800-171</strong>.</li><li>Support <strong>SOC 2 and PCI DSS</strong> initiatives, including control design, evidence collection, remediation, and audit coordination.</li><li>Take security and infrastructure projects from idea to implementation, managing timelines, stakeholders, vendors, risks, and deliverables.</li><li>Administer and improve security technologies across endpoint protection, IAM, SIEM, MFA, email security, vulnerability management, and logging.</li><li>Lead access reviews, security awareness efforts, phishing simulations, and incident-response tabletop exercises.</li><li>Develop the policies, procedures, and security plans required for compliance, then make sure those controls actually work in the real world.</li><li>Partner with leadership on security risk, vendor reviews, customer requirements, and business decisions.</li><li>Roll up your sleeves alongside the IT team on <strong>Microsoft 365, Entra ID, servers, networking, endpoints, identity, and other infrastructure initiatives</strong>.</li></ul><p><br></p>
<p>Security-focused Database Administrator responsible for protecting enterprise Oracle and IBM DB2 environments. This role owns database hardening, least-privilege access control, activity monitoring, and audit/compliance readiness across on-premises and cloud platforms. The ideal candidate blends deep DBA fundamentals with a security-first mindset and hands-on experience with database security tooling.</p><p><strong>Key Responsibilities</strong></p><ul><li>Administer and secure production and non-production Oracle and IBM DB2 databases, with security controls as a primary responsibility rather than an afterthought.</li><li>Manage <strong>Oracle Data Safe</strong> end to end: security assessments, user risk assessments, sensitive data discovery, data masking, activity auditing, and SQL Firewall policy management.</li><li>Design, implement, and maintain <strong>row-based access controls</strong> — Oracle Virtual Private Database (VPD), Oracle Label Security, and Real Application Security; DB2 Row and Column Access Control (RCAC) and Label-Based Access Control (LBAC).</li><li>Own <strong>user maintenance and access governance</strong>: account provisioning and deprovisioning, roles, privileges, grants/revokes, profiles, and password/authentication policies.</li><li>Conduct periodic access reviews and recertification; enforce separation of duties and least-privilege principles.</li><li>Deploy, configure, tune, and monitor <strong>Imperva</strong> (Database Activity Monitoring / Data Security Fabric / database firewall): policies, alerting, blocking rules, and audit reporting.</li></ul><p><br></p>
<p>Our client is looking for a Help Desk/IT Support Specialist to provide responsive technical support for employees in the Salt Lake area. This Long-term Contract position is ideal for someone who can quickly become a dependable point of contact for day-to-day IT issues while helping maintain a stable, secure, and productive user experience. The role supports a manufacturing organization and offers the opportunity to work closely with end users while contributing to reliable technology operations across multiple sites.</p><p><br></p><p>Responsibilities:</p><p>• Deliver front-line technical assistance for hardware, software, and access-related issues affecting office and plant-based employees.</p><p>• Diagnose and resolve desktop, laptop, peripheral, and Microsoft Windows problems to minimize user downtime.</p><p>• Administer user accounts and permissions in Active Directory and support core Microsoft 365 Enterprise services.</p><p>• Provide device support and enrollment assistance through Intune, including basic configuration and troubleshooting activities.</p><p>• Investigate routine network connectivity issues and coordinate with broader IT teams when escalation is needed.</p><p>• Guide employees on effective use of workplace technology by offering clear end-user training and practical support.</p><p>• Track, prioritize, and document support requests to ensure timely follow-up and consistent service delivery.</p><p>• Assist with operational IT activities that help senior team members focus on larger infrastructure, cybersecurity, and service improvement efforts.</p>