Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.
Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.
Lead the design and delivery of high-availability cryptographic services for certificate management.
Define long-term technical strategy and translate regulatory requirements into robust engineering solutions.
Mentor senior engineers, drive engineering excellence, and collaborate across Security, Product, and Policy teams.
The company focuses on building secure, reliable, and scalable infrastructure for digital finance, with a strong emphasis on cryptographic systems and zero-trust environments. They foster a remote-first culture with quarterly in-person team sessions and value engineering excellence, collaboration, and innovation.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Lead planning, analysis, design, and troubleshooting of network and operational systems.
Provide comprehensive technical support and leadership for complex processes and telecommunications infrastructure.
Ensure compliance with cyber security standards and develop implementation plans and required documentation.
TekSynap is a fast-growing high-tech company that provides information technology and management solutions to Federal Government customers. The company emphasizes agility, comprehensive planning, and a competitive benefits package for its full-time employees.
Serve as the primary customer-facing lead for CMMC Level 1 and Level 2 engagements from scoping through assessment.
Author System Security Plans, policies, and evidence libraries; implement technical controls in customer tenants.
Assess finished environments against the CMMC Level 2 Assessment Guide and support customers during C3PAO assessments.
Defense Unicorns delivers mission value by streamlining software delivery so customers can focus on the most important challenges. Their team is composed of innovators, software engineers, and veterans with decades of experience in federal technology.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Develop and maintain Go-based REST microservices that issue X.509 certificates for hardware manufacturing and field deployment.
Collaborate with software architects and leads to define requirements, refine specifications, and deliver new features and bug fixes.
Implement automated testing, integrate cryptographic technologies and HSMs, and maintain CI/CD pipelines and containerized Linux deployments.
HPE is a global edge-to-cloud company that helps organizations accelerate outcomes by turning data into insights. This engineering team focuses on cybersecurity, device identity, and post-quantum cryptography, offering a collaborative and inclusive remote work culture.
Design and execute comprehensive testing strategies aligned with CIS Benchmarks and NIST Frameworks to ensure security and compliance.
Develop and optimize automation scripts using Python and Bash for streamlined testing and validation.
Evaluate multi-cloud network configurations, firewall rules, and security posture across AWS, Azure, and GCP environments.
We are an IT services company specializing in network security and cloud infrastructure, providing solutions for complex multi-cloud environments. Our culture is collaborative and senior-led, with a focus on technical excellence and cross-functional teamwork.
Provide support for DHHS information security including firewalls and security infrastructure design and implementation.
Analyze information systems to ensure appropriate security functions are included in system design and architecture.
Manage responses and remediation of POAMs related to government investment supported systems.
GDIT is a global technology and professional services company delivering technology solutions and mission services to U.S. government agencies. With 26,000 experts worldwide, it fosters a culture of ownership and creativity to solve complex problems.
Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Own and strengthen security across the product stack, partnering with engineering throughout development.
Build security systems including secrets management, certificate infrastructure, audit logging, and vulnerability management.
Lead security reviews, threat modeling, and drive security compliance programs and incident response.
Early-stage B2B identity and access management company focused on building secure product systems. Small, collaborative team seeking its first dedicated security engineer to help grow the security function.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Design, harden, and defend containerized application infrastructure across edge and cloud environments.
Lead threat modeling, vulnerability management, and security reviews to support mission-critical systems.
Own provisioning, secrets management, and security controls for systems operating in denied or disconnected environments.
CX2 is a next-generation defense technology company building AI-enabled hardware and software platforms to detect, disrupt, and defend the electromagnetic spectrum. Backed by leading defense investors and led by founders from Meta, SpaceX, Epirus, and the DoD, the company values high responsibility and autonomy.
Act as the subject matter expert for Wiz's FedRAMP and DoD IL4/5 offerings, translating product value to internal and external stakeholders.
Engage with federal customers and mission owners to capture requirements, manage expectations, and support compliance processes.
Partner with Product and PMM to maintain the Wiz4Gov roadmap and prioritize features essential for U.S. Public Sector compliance.
Wiz is a cloud security company that connects code, cloud, and runtime into a single context to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and offers a culture that values world-class talent and creative freedom.
Design and implement enterprise-grade secrets management solutions using HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault.
Develop and maintain PKI systems, including certificate lifecycle management and cryptographic key management.
Collaborate with security, infrastructure, and application teams to integrate and secure systems across the organization.
Mirantis is a Kubernetes-native AI infrastructure company enabling secure, scalable infrastructure for modern AI and data workloads. They are a distributed, world-class team committed to open standards and a leader in container management.
Plan, implement, and upgrade security controls and architecture to safeguard systems and sensitive information.
Conduct risk assessments, penetration testing, and vulnerability assessments, then track mitigation plans.
Support compliance with NIST 800-171, develop governance documentation, and deliver security awareness training.
Insitu, a Boeing Company, provides unmanned air systems and software solutions for collecting, processing, and understanding sensor data to support critical decision-making. With over 1 million operational flight hours, the company values integrity, collaboration, and adaptability in a fast-paced, mission-driven environment.
Collaborate with U.S. government agencies and public sector customers to resolve complex GitLab issues in secure, air-gapped environments.
Perform deep technical investigations using Linux tooling and GitLab internals, tracing issues across infrastructure, application, and code paths.
Create clear documentation, build internal support tools, and participate in on-call rotations for compliance-focused deployments.
GitLab is the intelligent orchestration platform for DevSecOps, helping organizations increase developer productivity and accelerate digital transformation. Trusted by more than 50 million users and over 50% of the Fortune 100, GitLab fosters a high-performance, inclusive culture driven by values and continuous knowledge exchange.
Support day-to-day execution of IT risk, compliance, privacy, and governance programs.
Review client agreements and security questionnaires, coordinating redlines with legal.
Manage control evidence, vendor risk, data retention, and compliance policies.
Our partner provides IT risk, compliance, privacy, and governance services for clients. They have a small, collaborative team and value diverse perspectives and authentic contributions.