Home
/
Companies
/
SkyePoint Decisions
SkyePoint Decisions
11 open remote positions
SkyePoint Decisions provides cybersecurity, infrastructure, and application development services to federal government clients. It is an ISO 9001:2015 certified small business with a collaborative team culture and CMMI Level 3 rating.
Benefits Overview
11 of 11 jobs
(11)
(11)
(11)
(10)
(10)
(9)
(8)
(5)
(4)
(4)
(3)
(1)
(1)
(1)
(1)
(1)
(1)
(1)
(1)
(1)
Open Positions
Support authorized red team and penetration testing engagements across FSA systems, networks, and cloud environments. Conduct vulnerability validation, exploitation, and documentation of attack paths under established rules of engagement. Apply the MITRE ATT&CK framework to categorize adversary techniques and retest vulnerabilities after remediation.
Penetration Testing
Network Security
Web Application Security
MITRE ATT&CK
Vulnerability Assessment
Support the Red Cell Team by performing and leading penetration tests to assess the security of customer systems. Identify vulnerabilities and develop recommended remediations to satisfy mandated NIST 800-53 security controls. Report and demonstrate findings to system owners and engineers.
Penetration Testing
Kali Linux
Nmap
Burp Suite
Metasploit
Analyze current processes and user needs to identify workflow automation opportunities. Design and develop workflow applications, services, scripts, and integrations using customer-approved technologies. Integrate workflows with APIs, data sources, and security tools, and support automated testing and documentation.
Python
JavaScript
APIs
CI/CD
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure. Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure. Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
AWS
Cloud Security
FedRAMP
NIST
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements. Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards. Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
Security Assessment
NIST SP 800-53
RMF
FISMA
Penetration Testing
Design, develop, test, document, and maintain RESTful APIs, services, connectors, and integration components. Implement secure data exchange, transformation, validation, orchestration, and event-driven integration patterns. Collaborate with security and data engineers on authentication, schemas, data quality, and operational requirements.
Python
Java
AWS
SQL
GitLab CI/CD
Provide SA/OSA expertise and guidance for the security authorization program. Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring. Track authorization renewals and support audits and data collection for FISMA reporting.
CISSP
RMF
Incident Response
Active Directory
Engineer CI/CD workflows using Atlassian Cloud, FSA GitLab, and NGDC AWS environments. Implement pipeline-as-code, reusable templates, automated quality gates, and release controls. Support compliance with NIST SP 800-218, OMB/CISA guidance, STIGs, and CIS standards.
GitLab CI/CD
AWS
Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF. Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms. Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
NIST SP 800-53
GRC Tools
Analyze authorization workflows and identify automation opportunities for ATO processes. Develop automated evidence collection, validation, and reporting using customer-approved technologies. Integrate with security scanning, SBOM/SCA, vulnerability, workflow, and system-of-record tools.
Python
REST APIs
Security Automation
AWS
Support project planning, tracking, and reporting for Federal Student Aid cybersecurity and IT initiatives. Coordinate activities across cybersecurity, technical, and business teams to manage milestones, risks, and deliverables. Develop status reports, dashboards, and metrics to support program decision-making.
Project Management
Microsoft Excel
Cybersecurity
Data Analysis
Reporting