Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.
Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.
Implement and maintain cybersecurity controls and security configuration baselines using CIS and STIG benchmarks.
Conduct security and compliance assessments, identify risks, and support audits and security reviews.
Collaborate with technical teams to address vulnerabilities and protect critical systems from evolving cyber threats.
Agile Defense provides advanced technology solutions and cybersecurity services to support U.S. national security and critical civilian missions. The company emphasizes a culture of collaboration, adaptability, and employee well-being through its '6Hs' values.
Provide SA/OSA expertise and guidance for the security authorization program.
Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
Track authorization renewals and support audits and data collection for FISMA reporting.
SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.
Perform certification and accreditation of computer networks and standalone systems in accordance with government security standards.
Develop, maintain, and implement System Security Plans (SSPs) aligned with customer contractual and regulatory requirements.
Oversee daily security operations for classified and unclassified information systems and conduct vulnerability assessments using tools like Nessus and MBSA.
Aether Aerospace is a defense technology platform delivering high-impact technologies, technology-enabled services and advanced manufacturing solutions to the U.S. Department of Defense and national security customers. The multi-entity enterprise, backed by Falfurrias Management Partners, focuses on scalable growth, operational excellence, and long-term value creation.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Act as the engineering voice of security and compliance, turning regulatory standards into practical controls you ship to production.
Own certifications, audits and attestations like ISO 27001, SWIFT and SOC 2, driving findings to closure.
Improve release, change, post-incident and operational resilience processes with automation and clear documentation.
Griffin is a fully regulated UK bank providing banking infrastructure and payments for fintechs and platforms. They are a remote-first, high-trust company with a small, cross-functional engineering culture and a mission-driven approach.
Coordinate inspection portfolios and review complex assurance documentation for applicant onboarding, major change, and project assurance.
Prepare progress updates and management reports for senior colleagues, regulators, and stakeholders.
Coach Bureau and BASS Inspectors through feedback and training plans while developing inspection materials and assurance frameworks.
Pay.UK is the recognized operator and standards body for the UK's interbank retail payment systems, providing infrastructure and services like Bacs, Faster Payments, and the Current Account Switch Service. With over 12.5 billion transactions processed in 2025 and a team of dedicated professionals, they foster an inclusive culture focused on safety, security, and collaboration.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion.
Test security controls and conduct risk assessments to identify meaningful gaps and drive realistic remediation plans.
Translate compliance requirements into clear actions, support audits, vendor reviews, and customer questionnaires.
YipitData is a market research and analytics firm that analyzes billions of alternative data points to provide actionable insights across software, AI, cloud, e-commerce, ridesharing, and payments. The company recently raised $475M from The Carlyle Group, operates globally with offices in the US, APAC, and India, and has an award-winning, people-centric culture recognized by Inc. as a Best Workplace for three consecutive years.
Lead first line control testing, plan, design, and execute control testing in accordance with enterprise standards.
Manage training and outreach programs for Compliance and ERM, coordinating content and delivery across 15 internal training requirements.
Oversee enterprise responses to GSE Vendor Assessments, government surveys, and PwC financial audit requests.
U.S. Financial Technology built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac. The company supports 70% of mortgage-backed securities and provides best-in-class single-family issuance, bond administration, disclosure, and tax services with a team of talented professionals.
Lead the global risk management process, including risk assessments, treatment plans, and policy exceptions.
Own risk reporting for key areas and collaborate across GRC, security, and business teams.
Build automations and shape tooling to keep the risk register accurate and proactive.
DoorDash is a technology and logistics company that connects local businesses with consumers through on-demand delivery. The company is growing rapidly and emphasizes a culture of empathy, diversity, and employee well-being.
Perform and lead penetration tests of customer systems to identify exploitable vulnerabilities.
Apply assessment methodologies including NIST SP 800-115, PTES, and OWASP WSTG.
Report and demonstrate findings directly to system owners and engineers.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The company is a multi-year Washington Business Journal Best Places to Work winner with an employee-centric culture and a distributed workforce.
Lead and execute comprehensive penetration testing and red team exercises across networks, applications, APIs, and AWS cloud environments.
Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to deliver high-quality, risk-based security assessments.
Mentor junior penetration testers and collaborate with security and infrastructure teams to remediate vulnerabilities and strengthen security posture.
Peraton is a next-generation national security company that delivers trusted mission-critical solutions to protect the nation and allies. The company supports essential government agencies and every branch of the U.S. armed forces, with employees solving the most daunting challenges facing customers.