Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Plan, implement, and upgrade security controls and architecture to safeguard systems and sensitive information.
Conduct risk assessments, penetration testing, and vulnerability assessments, then track mitigation plans.
Support compliance with NIST 800-171, develop governance documentation, and deliver security awareness training.
Insitu, a Boeing Company, provides unmanned air systems and software solutions for collecting, processing, and understanding sensor data to support critical decision-making. With over 1 million operational flight hours, the company values integrity, collaboration, and adaptability in a fast-paced, mission-driven environment.
Serve as principal cybersecurity advisor and custodian of the system security authorization package in eMASS.
Author and maintain RMF artifacts including SSP, SAR, and POA&Ms, coordinating remediation with technical teams.
Conduct STIG reviews, vulnerability management, and support DevSecOps workflows in AWS cloud environments.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Act as the subject matter expert for Wiz's FedRAMP and DoD IL4/5 offerings, translating product value to internal and external stakeholders.
Engage with federal customers and mission owners to capture requirements, manage expectations, and support compliance processes.
Partner with Product and PMM to maintain the Wiz4Gov roadmap and prioritize features essential for U.S. Public Sector compliance.
Wiz is a cloud security company that connects code, cloud, and runtime into a single context to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and offers a culture that values world-class talent and creative freedom.
Apply systems security engineering principles to secure mission-critical systems throughout their lifecycle.
Support Risk Management Framework activities, including ATO submissions and continuous monitoring.
Collaborate with stakeholders to conduct risk assessments, vulnerability remediation, and Zero Trust maturity.
A partner company specializing in information systems security engineering for Department of Defense environments. The organization emphasizes accountability, collaboration, excellence, and continuous development within a fully remote work environment.
Provide technical expertise on security control implementations and develop information security procedures for systems and applications.
Perform pre-assessment activities including detailed analysis of vendor technology stacks for NIST and agency compliance.
Support A&A (NIST 800-53) and compliance activities, reviewing third-party security assessment reports and communicating with stakeholders.
Valiant Solutions is a security-focused IT solutions provider serving public clients nationwide. The company is known for its employee-centric culture, has been named a Best Place to Work in the DC area for 12 consecutive years, and offers strong benefits and career development.
Design and implement security controls for AWS infrastructure and mission applications, including threat modeling and hardening.
Apply STIGs and RMF/NIST 800-53 controls, integrate security scanning into CI/CD, and remediate vulnerabilities.
Collaborate with ISSO/ISSM and engineering teams to document implementations and support ATO and continuous monitoring.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Design and implement security architecture for AWS workloads aligned with FedRAMP Moderate baseline controls.
Build and maintain security guardrails using AWS-native services (IAM, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF, Macie, Inspector).
Support ATO activities, continuous monitoring, vulnerability scanning, and incident response.
Peraton is a next-generation national security company providing mission capability integration and IT solutions to protect the nation and allies. It serves as a valued partner to government agencies and every branch of the U.S. armed forces, with a culture focused on solving daunting customer challenges.
Administer and maintain all AWS cloud environments for the WARP permitting platform, ensuring availability, performance, and security.
Manage AWS Marketplace subscriptions, monitor environment health with CloudWatch, and coordinate with AWS support.
Enforce security controls, manage user access, and maintain FedRAMP, FISMA, and NIST compliance.
Peraton is a next-generation national security company delivering mission-critical solutions to protect the nation and allies. It is a large enterprise serving government agencies and the U.S. armed forces, with employees solving the most daunting challenges for customers.
Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.
symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Lead cybersecurity governance, assessment, and audit activities supporting a federal customer.
Coordinate evidence, control assessments, and remediation across NIST, RMF, and federal compliance requirements.
Maintain quality control, configuration traceability, and readiness for IV&V, QA, and government surveillance.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. Headquartered in Dulles, Virginia, it is an ISO-certified small business with a collaborative culture focused on mission assurance.
Maintain and enhance Anovia's ISO/IEC 27001 ISMS, including policies, controls, risks, and audit coordination.
Support SOC 2, HIPAA, and other compliance programs, including vendor assessments, vulnerability management, and incident response.
Lead ambiguous technical and operational initiatives from planning through implementation, coordinating stakeholders and driving completion.
Anovia is an industry-leading technology outsourcing support provider specializing in workflow and knowledge processes, technical support, helpdesk, and multilingual services. With over 200 experts globally, we serve Fortune 500 companies and value growth, learning, and work-life balance.
Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
Manage vulnerability scanning, incident response, and remediation tracking through closure.
Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.
Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.
Lead or support systems engineering activities for a cloud-based enterprise system across planning, design, integration, testing, deployment, and modernization.
Coordinate technical integration among cloud infrastructure, networking, identity services, cybersecurity tools, applications, and data services.
Support Risk Management Framework activities, develop Splunk dashboards, execute server scans, and implement STIGs to maintain security compliance.
Empower AI provides AI-powered solutions for government, helping federal agencies modernize and improve workforce productivity. The company is headquartered in Reston, Va., and is recognized as a 2024 Military Friendly Employer.