Apply systems security engineering principles to secure mission-critical systems throughout their lifecycle.
Support Risk Management Framework activities, including ATO submissions and continuous monitoring.
Collaborate with stakeholders to conduct risk assessments, vulnerability remediation, and Zero Trust maturity.
A partner company specializing in information systems security engineering for Department of Defense environments. The organization emphasizes accountability, collaboration, excellence, and continuous development within a fully remote work environment.
Serve as principal cybersecurity advisor and custodian of the system security authorization package in eMASS.
Author and maintain RMF artifacts including SSP, SAR, and POA&Ms, coordinating remediation with technical teams.
Conduct STIG reviews, vulnerability management, and support DevSecOps workflows in AWS cloud environments.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Lead cloud architecture engagements from discovery through delivery for Azure, AWS, and Google Cloud.
Design secure landing zones, hybrid solutions, and compliance-aligned architecture for regulated clients.
Mentor a team of architects and engineers while supporting pre-sales and technical strategy.
Aprio is a Top 20 CPA and advisory firm that brings together proven expertise, deep understanding, and strategic foresight for fast-growing industries. With 40 U.S. offices and over 3,200 team members speaking 60+ languages, it offers a top-rated culture and vast growth opportunities.
Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.
This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.
Producing security architecture designs and threat models for internal and customer-facing systems.
Conducting risk assessments and assurance documentation to support governance and accreditation.
Collaborating with architects, engineering, and cyber security teams to embed security by design.
NEC Software Solutions, part of NEC Corporation, builds software supporting critical public services like ambulance dispatch and rail operations. With 3,000+ employees, it values pragmatism, collaboration, and continuous improvement.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.
Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Provide SA/OSA expertise and guidance for the security authorization program.
Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
Track authorization renewals and support audits and data collection for FISMA reporting.
SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Design and implement security controls for AWS infrastructure and mission applications, including threat modeling and hardening.
Apply STIGs and RMF/NIST 800-53 controls, integrate security scanning into CI/CD, and remediate vulnerabilities.
Collaborate with ISSO/ISSM and engineering teams to document implementations and support ATO and continuous monitoring.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Assist in designing end-to-end architectures and technical specifications for federal IT programs.
Collaborate with technical leads to decompose mission requirements into structured solution designs.
Support integration of cloud, data pipelines, and AI/ML workflows while ensuring security compliance.
Redhorse Corporation is a solution-driven company delivering data insights and technology solutions to support U.S. national interests. It seeks thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions for critical missions.
Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.