Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.
Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.
This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.
Analyze authorization workflows and identify automation opportunities for ATO processes.
Develop automated evidence collection, validation, and reporting using customer-approved technologies.
Integrate with security scanning, SBOM/SCA, vulnerability, workflow, and system-of-record tools.
SkyePoint Decisions is a cybersecurity and IT services provider headquartered in Dulles, Virginia, serving federal government clients. It is an ISO-certified small business appraised at CMMI Level 3 that fosters a collaborative team culture.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
Serve as an information security subject matter expert, including familiarity with cloud implementations.
Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.
KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Automate security evidence generation and map RMF controls to support continuous authorization.
Conduct security audits and risk analyses, and plan and implement remediations.
Coach government teams to sustain security practices after the engagement ends.
Skylight is a digital consultancy that uses design and technology to help government agencies deliver better public services. They are a growing team of public interest technologists committed to civic innovation.
Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
Manage vulnerability scanning, incident response, and remediation tracking through closure.
Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.
Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Design and maintain security architecture patterns for on-premise, cloud, and hybrid environments.
Map architectural designs to NIST, CMMC, and DISA STIG requirements for ATO.
Conduct threat modeling, risk assessments, and oversee IAM, ZTNA, SIEM, and encryption controls.
Odyssey is a technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. They focus on excellent contract execution and a culture of employee care.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.
Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Own and drive the SOC 2 compliance program, including annual audits and certification.
Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
Lead customer security reviews and respond to complex security questionnaires.
Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.