Cybersecurity Research Assistant

<div style="font-size: 10pt; font-family: 'Tahoma';">(ID: 2026-1702) <p>&nbsp;</p> <br> <p><strong>Axle</strong> is a bioscience and information technology company that offers advancements in translational research, biomedical informatics, and data science applications to research centers and healthcare organizations nationally and abroad. With experts in biomedical science, software engineering, and program management, we focus on developing and applying research tools and techniques to empower decision-making and accelerate research discoveries. We work with some of the top research organizations and facilities in the country including multiple institutes at the National Institutes of Health (NIH).</p> </div> <p>&nbsp;</p> <div style="font-size: 10pt; font-family: 'Tahoma';"> <p><strong>Benefits We Offer:</strong></p> <ul> <li>100% Medical, Dental &amp; Vision Coverage for Employees</li> <li>Paid Time Off and Paid Holidays</li> <li>401K match up to 5%</li> <li>Educational Benefits for Career Growth</li> <li>Employee Referral Bonus</li> <li>Flexible Spending Accounts: <ul> <li>Healthcare (FSA)</li> <li>Parking Reimbursement Account (PRK)</li> <li>Dependent Care Assistant Program (DCAP)</li> <li>Transportation Reimbursement Account (TRN)</li> </ul> </li> </ul> </div> <div class="ck-content" style="font-family: Segoe UI; font-size: 11pt;" data-wrapper="true"> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Axle is seeking a Cybersecurity Research Assistant to join our vibrant team supporting rare disease research at the National Institutes of Health (NIH). This is a Remote position within the United States.&nbsp;</span></span></p> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><strong><span style="line-height: 115%;">Overview&nbsp;</span></strong></span></p> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Axle supports AI research systems that run on on-premises Kubernetes clusters and shared high-performance computing infrastructure. This role implements and monitors defined security controls across that environment, and helps develop AI tooling that assists with developing and maintaining cybersecurity controls.&nbsp;</span></span></p> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">This is a hands-on early-career role for someone with a systems or IT background who wants to move into security engineering. You would be jointly supervised by our AI technical lead and by a lead systems administrator, giving you a direct line into both the security engineering side and the day-to-day operation of the infrastructure you are securing. We are looking for a self-motivated person who wants to build a career in cybersecurity, gaining hands-on experience and earning the certifications that go with it. Axle will sponsor the right candidate for those certifications and provides working hours to study for them.&nbsp;</span></span></p> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><strong><span style="line-height: 115%;">Responsibilities&nbsp;</span></strong></span></p> <ul> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e05680e4647733496c18d72ce8cb344a2"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Implement assigned security controls as configuration changes across our Kubernetes, Linux, database, and model-serving environments, working from the control catalog and an assigned task list.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e386af5096786ed55f459f8cccbee7c48"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Build out and operate monitoring and detection coverage, including metrics collection, dashboards, log aggregation, and alert routing.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e10a900053a05e4d79a5bddcc8f532253"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Run vulnerability scanning across container images, hosts, and application dependencies on a set schedule, track findings to closure, and keep the plan of action and milestones current.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e4b900e40291ffbc493fab44461f3e702"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Write and maintain the automation that applies hardening baselines and checks them for drift, using Ansible and Python.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="ee0fa9094b6d6e90ac84c4e7e19a607df"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Contribute to secrets management, network policy, and role-based access control work across the cluster environments.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e6ea1288b81cf5522b782dab1fe7aedbc"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Build the deterministic collectors that gather control evidence, including cluster API queries, policy engine reports, scan output, access control dumps, and database configuration exports, normalized into a common format and stored with timestamps.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e3e44faa8b5cb85e964dd0c68b6895b14"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Help build the internal AI tooling that assists with this work, including retrieval over the control catalog and system documentation, drafting from collected evidence, and triaging scanner output into ranked findings for human review.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="ee27e1a5816069b963b403744eda66439"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Keep security documentation in agreement with the deployed configuration, and raise discrepancies promptly through your supervisors.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e98072089fc11b67efccd31debaabac96"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Test what you build. Restore a backup and confirm it works, break a policy on purpose and confirm the alert fires, and verify that a control you implemented does what the catalog says it does.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e924268c0700e96d3f8f09a9f3e3a043b"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Document what you did in enough detail that an assessor can follow it a year from now.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e306578106d61edbc1a07c98459e8d6fa"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Prepare material for security reviews and continuous monitoring reports, working with your supervisors on anything that goes to an assessor or an authorizing official.&nbsp;</span></span></p> </li> </ul> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><strong><span style="line-height: 115%;">Must Have&nbsp;</span></strong></span></p> <ul> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="ede46d12269f443d63deb4edb2240e937"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">One to three years of professional experience in IT, systems administration, help desk, network operations, or a comparable hands-on technical role.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e3bddccde5c806c630899a1876625c2cb"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Comfort on the Linux command line. You can read a log, trace a permissions problem, and work out what a service is doing.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e3ef56a34e1f10552603dcd85fd40511e"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Scripting ability in Bash and Python. You do not need to be a software engineer, but you should have automated something real and be able to walk us through it.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e6fe38f3a64ac94684aa3934b9c51abce"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Demonstrated interest in security. Coursework, a home lab, capture the flag competitions, a Security+ in progress, a personal project, or security work inside a broader IT role all count.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e89fd6ca9e1c82cef432d58fa2b7fa625"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Careful, methodical work habits. Much of this job is doing a procedure correctly, recording what happened, and noticing when the result does not match what was expected.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e31e16d9445ae986d41097f61ce7a9f70"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Willingness to ask questions early and to say plainly when you do not know something.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e259dc336c07c799c6e53f32e48b1bb83"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Ability to work independently on assigned tasks and to give regular updates on what is planned, in progress, and finished.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e144d2f75fed9efa82d32c61e3c40bbd0"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Ability to obtain and maintain a Public Trust Security clearance.&nbsp;</span></span></p> </li> </ul> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><strong><span style="line-height: 115%;">Requirements&nbsp;</span></strong></span></p> <ul> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e76469bf6e0ac3994a05976bccf1c307f"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Associate’s or Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field. We will consider equivalent professional experience or a completed technical certification program in place of a degree.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="eed46b8cda41e8a4c0dac7c19f8ee598e"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Working knowledge of Linux system administration, ideally on RHEL based systems such as Rocky Linux, and on Ubuntu.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e0c7ba34ac46ec6bfdb818937b943d316"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Basic understanding of networking, including TCP/IP, DNS, TLS, firewalls, and how a request travels from a browser to a service.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e1e3b0fae0ad9d9c9c83b1db03d38d2bc"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Basic familiarity with containers, and real interest in learning Kubernetes. We will teach it. You should want to learn it.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e5309645646dbe53c812235b8d9a72bb4"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Familiarity with version control and comfort working in a shared Git repository.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e69a489d0e756caccdb1ad3182c3eb260"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Ability to follow a written procedure precisely, and to notice when the procedure itself is wrong.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="ebd34ea6730fb2586a8d58056a276ad27"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Clear written communication. A large part of this role is documenting what was done and why.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="ede68f367749acb197dc1abf8af9b194b"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Interest in learning how federal security authorization actually works, including NIST security controls, continuous monitoring, and how evidence is assembled and reviewed.&nbsp;</span></span></p> </li> </ul> <p style="line-height: 115%; margin: 0in 0in 8pt;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><strong><span style="line-height: 115%;">Desired Skills &amp; Experience&nbsp;</span></strong></span></p> <ul> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="eaa427671e24f890693960dade82e0b5b"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">CompTIA Security+, Network+, or Linux+, a Kubernetes certification, or a cloud certification.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e261158fad3948cc0f0c685c35673ff2a"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Coursework or a degree concentration in cybersecurity or information assurance.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e6bdbe9f2b5959bbd2667b3d9b5cb8c8c"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Any exposure to NIST security standards, security frameworks, or compliance work, including academic exposure.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e192166c6b36debf5cace3b05f0dcd915"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">A home lab, capture the flag participation, open-source contributions, or a personal project you can walk us through.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom: 8pt; margin-right: 0in; margin-top: 0in;" data-list-item-id="e835e26437398db4b70e0edc098d1e734"> <p style="margin: 0;"><span style="font-family: 'Tahoma',sans-serif; font-size: 10.0pt;"><span style="line-height: 115%;">Experience with Ansible, Terraform, or another configuration management tool.&nbsp;</span></span></p> </li> <li class="ck-list-marker-font-size ck-list-marker-font-family" style="line-height: 115%; margin-bottom