CAREERS — JOIN THE MISSION
Your cybersecurity career path starts here
We’re building a talent pipeline to navigate cybersecurity and defend the most critical systems — for the government and defense missions that can’t afford to go dark.
Who We're Looking For
Let's build an award-winning future together
SEMAIS is looking for top-notch IT professionals who want to advance cybersecurity. In return, we offer a diverse workforce and a culture built for people to grow their skillsets and take on harder problems.
We’ve got an ambitious road ahead. Join our team and help shape the next stage of cybersecurity across federal, defense, and maritime missions.
Credentials
The credentials that matter here
On federal contracts, certifications are how a mission verifies that the people doing the work can actually do it. At SEMAIS, credentials map directly to the roles we staff and to DoD 8140/8570 baselines — they’re the signal that an engineer can carry an RMF package to ATO, stand up Zero Trust controls, or run an exposure-management program without on-the-job ramp time.
We hire people who hold these, and we invest in helping our team earn the next one. Below are the six we look for most. Hold a few — or working toward them? We want to talk.
- CISSP
Certified Information Systems Security Professional
- CISM
Certified Information Security Manager
- CISA
Certified Information Systems Auditor
- CASP+
CompTIA Advanced Security Practitioner
- CEH
Certified Ethical Hacker
- CRISC
Certified in Risk and Information Systems Control
Aligned to DoD 8140 and the NICE Framework
DoD Directive 8140 (Cyberspace Workforce Management, with DoD Manual 8140.03) is how the Department of Defense identifies, qualifies, and tracks its cyber workforce. It replaced the old 8570 single-certification checkbox with a work-role qualification model: you qualify for a specific role through a blend of education, training, certifications, and demonstrated experience — not one exam.
Those work roles come from the NICE Framework (NIST SP 800-181), the national standard that describes cyber work as tasks and the knowledge and skills behind them. Because SEMAIS maps every role we staff to its 8140 work role and NICE category, the work you do here lines up with the exact language our government customers use to write requirements and measure readiness — and we’ll show you which credentials and experience qualify you, then help you close any gap.
Labor Categories (LCAT)
Roles we hire for
The core labor categories across our cybersecurity engagements. Open requisitions for each are posted and managed in our applicant portal.
Security Analyst
Be the first line of defense on public and private programs. Hunt vulnerabilities with Tenable, Qualys, and Rapid7, test controls against security policy, and turn findings into clear recommendations that harden mission systems.
Security Engineer
Spot the threat others miss on government and commercial programs. Lead monitoring, log analysis, and forensic investigations with Splunk, Microsoft Sentinel, CrowdStrike Falcon, and Wireshark to expose incidents early and sharpen security capabilities.
Security Architect
Design the blueprint for resilience across public and private programs. Build secure systems on AWS and Azure, apply zero trust with Zscaler and Palo Alto Networks, and deliver solutions that align security with mission goals.
Cyber Exposure Management
Shrink the attack surface for government and commercial clients. Correlate data from Tenable One, Qualys VMDR, Axonius, and Wiz into a single prioritized view, then drive remediation through ServiceNow to close the gap between exposure and fix.
AI Governance
Shape how public and private organizations adopt AI with confidence. Build model inventories, risk policies, and controls aligned to the NIST AI RMF using Microsoft Purview and Credo AI, so programs automate safely without unmanaged risk.
Security Consultant & Specialist
Guard critical assets for public and private programs. Protect networks, endpoints, and data with CrowdStrike, Microsoft Defender, Palo Alto Networks, and Proofpoint against malware, intrusion, and denial of service attacks.