Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.
Provide SA/OSA expertise and guidance for the security authorization program.
Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
Track authorization renewals and support audits and data collection for FISMA reporting.
SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.
Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.
This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Lead technical federal compliance programs including CMMC, FedRAMP, and NIST 800-171 for government contractors.
Manage a small team of Security Analysts, driving performance through coaching, accountability, and high-quality outcomes.
Build and maintain client security programs, conduct gap/risk assessments, and manage external audits like CMMC and FedRAMP.
Founded in New York City in 2015, Rhymetec specializes in compliance, cybersecurity, and data privacy, helping clients build effective infosec programs. The company operates remotely across the United States and emphasizes professional development and a collaborative culture.
Design and maintain security architecture patterns for on-premise, cloud, and hybrid environments.
Map architectural designs to NIST, CMMC, and DISA STIG requirements for ATO.
Conduct threat modeling, risk assessments, and oversee IAM, ZTNA, SIEM, and encryption controls.
Odyssey is a technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. They focus on excellent contract execution and a culture of employee care.
Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Analyze authorization workflows and identify automation opportunities for ATO processes.
Develop automated evidence collection, validation, and reporting using customer-approved technologies.
Integrate with security scanning, SBOM/SCA, vulnerability, workflow, and system-of-record tools.
SkyePoint Decisions is a cybersecurity and IT services provider headquartered in Dulles, Virginia, serving federal government clients. It is an ISO-certified small business appraised at CMMI Level 3 that fosters a collaborative team culture.
Lead and execute comprehensive penetration testing and red team exercises across networks, applications, APIs, and AWS cloud environments.
Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to deliver high-quality, risk-based security assessments.
Mentor junior penetration testers and collaborate with security and infrastructure teams to remediate vulnerabilities and strengthen security posture.
Peraton is a next-generation national security company that delivers trusted mission-critical solutions to protect the nation and allies. The company supports essential government agencies and every branch of the U.S. armed forces, with employees solving the most daunting challenges facing customers.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Lead and mature the organization's governance, risk management, compliance, and audit programs.
Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX IT General Controls.
Partner with business, technology, and executive stakeholders to align security controls with regulatory and business requirements.
Loenbro is a trusted construction lifecycle partner serving thousands of customers across the U.S. with services including electrical, mechanical, structural, inspection, and fabrication. The company has a national presence with a local approach and fosters a culture of integrity, teamwork, and purpose.
Develop and maintain automated security compliance, testing, and continuous monitoring capabilities.
Automate DISA STIG and SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus.
Integrate security gates into CI/CD pipelines with GitLab, SonarQube, Fortify, and AWS services.
CSCI Consulting is an award-winning information technology and financial management consulting firm focused on delivering world-class services. The company values each associate's drive to excel and fosters an energizing, diverse culture where work and fun coexist.
Apply systems security engineering principles to secure mission-critical systems throughout their lifecycle.
Support Risk Management Framework activities, including ATO submissions and continuous monitoring.
Collaborate with stakeholders to conduct risk assessments, vulnerability remediation, and Zero Trust maturity.
A partner company specializing in information systems security engineering for Department of Defense environments. The organization emphasizes accountability, collaboration, excellence, and continuous development within a fully remote work environment.
Develop and maintain IT contingency, business continuity, and disaster recovery plans in accordance with NIST SP 800-34.
Conduct risk assessments and business impact analyses to identify vulnerabilities and establish mitigation strategies.
Coordinate with IT operations and cybersecurity teams to integrate recovery strategies and support federal compliance requirements.
The company provides IT security and service recovery solutions for federal government environments. It offers a remote work culture focused on cybersecurity, compliance, and collaboration with cross-functional teams.
You will conduct security control testing and evaluations across SOC 2, ISO 27001, and PCI DSS frameworks.
You will coordinate evidence collection and technical walkthroughs with Engineering, DevOps, IT, and system owners.
You will identify control gaps, assess risks, and support remediation plans in the GRC platform.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies through objective, skills-based reviews. It operates with a remote-first approach and uses technology to streamline recruitment and improve hiring outcomes.