Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Lead the development and implementation of comprehensive security programs for a large-scale multi-tenant cloud ecosystem.
Oversee risk assessments, incident response, and compliance with frameworks like FedRAMP, FISMA, and NIST SP 800-53.
Collaborate with cross-functional teams and serve as the primary point of contact for government leadership.
Peraton is a next-generation national security company that drives missions of consequence globally. As the world's leading mission capability integrator, they deliver trusted solutions to protect the nation and allies, employing a large workforce dedicated to solving daunting challenges.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Serve as Information System Security Officer for the GovCloud system, managing compliance and audits.
Lead the transition to new FedRAMP requirements, including VDR/VER adoption and SCN rules.
Coordinate with agency sponsors, FedRAMP PMO, and 3PAO to maintain certifications and respond to inquiries.
CoLab helps mechanical engineering teams bring life-changing products to market faster by providing an AI-powered platform for design reviews. They are a team of 250+, raised a $72M Series C, and named the 57th fastest growing company in North America by Deloitte.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Design and maintain security architecture patterns for on-premise, cloud, and hybrid environments.
Map architectural designs to NIST, CMMC, and DISA STIG requirements for ATO.
Conduct threat modeling, risk assessments, and oversee IAM, ZTNA, SIEM, and encryption controls.
Odyssey is a technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. They focus on excellent contract execution and a culture of employee care.
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.
Conduct security architecture reviews and risk assessments for proposed IT solutions.
Evaluate designs to identify security risks, threats, and gaps in controls.
Act as a trusted security advisor to technical teams and leadership.
Kyndryl runs and reimagines mission-critical technology systems for the world's leading businesses. It has a global workforce and a culture focused on flexibility, support, and well-being.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Lead security authorization activities and maintain ATO documentation for federal programs.
Conduct risk assessments, monitor compliance with NIST SP 800-53 and FISMA, and implement remediation strategies.
Oversee security posture across multiple information systems while collaborating with federal stakeholders.
Jobgether is a company that uses AI-powered matching to connect candidates with job opportunities. The company partners with hiring employers and manages applications through a remote, inclusive environment that values military experience.
Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.
This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.
Support federal certification and authorization by coordinating compliance assessments with stakeholders.
Drive continuous monitoring through remediation and ongoing compliance obligations.
Develop scalable compliance processes to enable business growth.
Zscaler provides a cloud security platform that protects customers from cyberattacks and data loss. The company has a global presence with 200+ data centers and fosters a collaborative, AI-native culture.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Provide SA/OSA expertise and guidance for the security authorization program.
Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
Track authorization renewals and support audits and data collection for FISMA reporting.
SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Lead technical federal compliance programs including CMMC, FedRAMP, and NIST 800-171 for government contractors.
Manage a small team of Security Analysts, driving performance through coaching, accountability, and high-quality outcomes.
Build and maintain client security programs, conduct gap/risk assessments, and manage external audits like CMMC and FedRAMP.
Founded in New York City in 2015, Rhymetec specializes in compliance, cybersecurity, and data privacy, helping clients build effective infosec programs. The company operates remotely across the United States and emphasizes professional development and a collaborative culture.
Implement and maintain cybersecurity controls and security configuration baselines using CIS and STIG benchmarks.
Conduct security and compliance assessments, identify risks, and support audits and security reviews.
Collaborate with technical teams to address vulnerabilities and protect critical systems from evolving cyber threats.
Agile Defense provides advanced technology solutions and cybersecurity services to support U.S. national security and critical civilian missions. The company emphasizes a culture of collaboration, adaptability, and employee well-being through its '6Hs' values.