Source Job

• Serve as principal cybersecurity advisor and custodian of the system security authorization package in eMASS.
• Author and maintain RMF artifacts including SSP, SAR, and POA&Ms, coordinating remediation with technical teams.
• Conduct STIG reviews, vulnerability management, and support DevSecOps workflows in AWS cloud environments.

LMI is a digital solutions provider that accelerates government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.

• Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
• Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
• Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.

Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.

• Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
• Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
• Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.

DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.

• Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
• Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
• Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.

This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.

• Design and implement security controls for AWS infrastructure and mission applications, including threat modeling and hardening.
• Apply STIGs and RMF/NIST 800-53 controls, integrate security scanning into CI/CD, and remediate vulnerabilities.
• Collaborate with ISSO/ISSM and engineering teams to document implementations and support ATO and continuous monitoring.

LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.

• Develop and maintain GitLab CI/CD pipelines, including reusable jobs, parent/child pipelines, and integrated security testing.
• Build and maintain AWS GovCloud infrastructure using Terraform and Ansible, focusing on secure, resilient, and maintainable solutions.
• Automate security controls, troubleshoot complex infrastructure issues, and provide technical guidance across teams.

LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, serving federal agencies across defense, space, healthcare, and energy. Headquartered in Tysons, Virginia, LMI focuses on agility and collaboration to deliver impactful results and drive lasting value.

• Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
• Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
• Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.

Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.

• Build and maintain AWS GovCloud infrastructure including ECS/Fargate, DynamoDB, S3, VPC, IAM, and CloudWatch using Terraform.
• Design and run CI/CD pipelines for container builds, vulnerability scanning, and deployment with release versioning.
• Implement tamper-evident storage, monitoring, alerting, and incident response to support ATO and federal security requirements.

Broadway Ventures is a Service-Disabled Veteran-Owned Small Business and HUBZone federal contractor providing program management, technology, and consulting solutions to government and private clients. As a small business, it emphasizes integrity, collaboration, and tailored innovation as a trusted partner.

• Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
• Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
• Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.

TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities.
• Automate DISA STIG and SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus.
• Integrate security gates into CI/CD pipelines with GitLab, SonarQube, Fortify, and AWS services.

CSCI Consulting is an award-winning information technology and financial management consulting firm focused on delivering world-class services. The company values each associate's drive to excel and fosters an energizing, diverse culture where work and fun coexist.

• Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
• Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
• Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.

SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.

• Analyze authorization workflows and identify automation opportunities for ATO processes.
• Develop automated evidence collection, validation, and reporting using customer-approved technologies.
• Integrate with security scanning, SBOM/SCA, vulnerability, workflow, and system-of-record tools.

SkyePoint Decisions is a cybersecurity and IT services provider headquartered in Dulles, Virginia, serving federal government clients. It is an ISO-certified small business appraised at CMMI Level 3 that fosters a collaborative team culture.

• Collaborate with stakeholders to design and operate security controls for the GRC program.
• Use technology to automate compliance activities like evidence gathering and control verification.
• Drive progress on GRC continuous improvement projects and support audits with internal and external stakeholders.

LaunchDarkly provides a feature management platform that enables developers to release software faster and more safely. The company values high trust, transparency, and building diverse, collaborative teams.

• Support federal certification and authorization by coordinating compliance assessments with stakeholders.
• Drive continuous monitoring through remediation and ongoing compliance obligations.
• Develop scalable compliance processes to enable business growth.

Zscaler provides a cloud security platform that protects customers from cyberattacks and data loss. The company has a global presence with 200+ data centers and fosters a collaborative, AI-native culture.

• Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
• Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
• Prepare security compliance reports and execute Security Controls Test plans for ATO requests.

SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.

• Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
• Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
• Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.

SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.

• Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
• Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
• Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.

Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.

• Set and drive the technical roadmap for Platform DevOps and customer deployment engineering, resolving tradeoffs across teams.
• Own technical alignment with customer stakeholders throughout delivery, leading architecture and readiness discussions.
• Define the architecture and standards for repeatable deployment and lifecycle automation across internal and customer environments.

Legion builds secure, reliable AI systems that optimize workflows for government and enterprise, partnered with Palantir, Nvidia, HPE, and Oracle. They are a growing team focused on intelligent infrastructure that enhances human capability at the edge and across enterprises.

• Lead security authorization activities and maintain ATO documentation for federal programs.
• Conduct risk assessments, monitor compliance with NIST SP 800-53 and FISMA, and implement remediation strategies.
• Oversee security posture across multiple information systems while collaborating with federal stakeholders.

Jobgether is a company that uses AI-powered matching to connect candidates with job opportunities. The company partners with hiring employers and manages applications through a remote, inclusive environment that values military experience.

• Provide SA/OSA expertise and guidance for the security authorization program.
• Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
• Track authorization renewals and support audits and data collection for FISMA reporting.

SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.