Cybersecurity Research Assistant

(ID: 2026-1702)

Axle is a bioscience and information technology company that offers advancements in translational research, biomedical informatics, and data science applications to research centers and healthcare organizations nationally and abroad. With experts in biomedical science, software engineering, and program management, we focus on developing and applying research tools and techniques to empower decision-making and accelerate research discoveries.

We work with some of the top research organizations and facilities in the country including multiple institutes at the National Institutes of Health (NIH).

Responsibilities

• Implement assigned security controls as configuration changes across our Kubernetes, Linux, database, and model-serving environments, working from the control catalog and an assigned task list.
• Build out and operate monitoring and detection coverage, including metrics collection, dashboards, log aggregation, and alert routing.
• Run vulnerability scanning across container images, hosts, and application dependencies on a set schedule, track findings to closure, and keep the plan of action and milestones current.
• Write and maintain the automation that applies hardening baselines and checks them for drift, using Ansible and Python.
• Contribute to secrets management, network policy, and role-based access control work across the cluster environments.
• Build the deterministic collectors that gather control evidence, including cluster API queries, policy engine reports, scan output, access control dumps, and database configuration exports, normalized into a common format and stored with timestamps.
• Help build the internal AI tooling that assists with this work, including retrieval over the control catalog and system documentation, drafting from collected evidence, and triaging scanner output into ranked findings for human review.
• Keep security documentation in agreement with the deployed configuration, and raise discrepancies promptly through your supervisors.
• Test what you build. Restore a backup and confirm it works, break a policy on purpose and confirm the alert fires, and verify that a control you implemented does what the catalog says it does.
• Document what you did in enough detail that an assessor can follow it a year from now.
• Prepare material for security reviews and continuous monitoring reports, working with your supervisors on anything that goes to an assessor or an authorizing official.
• Must Have
• One to three years of professional experience in IT, systems administration, help desk, network operations, or a comparable hands-on technical role.
• Comfort on the Linux command line. You can read a log, trace a permissions problem, and work out what a service is doing.
• Scripting ability in Bash and Python. You do not need to be a software engineer, but you should have automated something real and be able to walk us through it.
• Demonstrated interest in security. Coursework, a home lab, capture the flag competitions, a Security+ in progress, a personal project, or security work inside a broader IT role all count.
• Careful, methodical work habits. Much of this job is doing a procedure correctly, recording what happened, and noticing when the result does not match what was expected.
• Willingness to ask questions early and to say plainly when you do not know something.
• Ability to work independently on assigned tasks and to give regular updates on what is planned, in progress, and finished.