Analyze authorization workflows and identify automation opportunities for ATO processes.
Develop automated evidence collection, validation, and reporting using customer-approved technologies.
Integrate with security scanning, SBOM/SCA, vulnerability, workflow, and system-of-record tools.
SkyePoint Decisions is a cybersecurity and IT services provider headquartered in Dulles, Virginia, serving federal government clients. It is an ISO-certified small business appraised at CMMI Level 3 that fosters a collaborative team culture.
Automate security evidence generation and map RMF controls to support continuous authorization.
Conduct security audits and risk analyses, and plan and implement remediations.
Coach government teams to sustain security practices after the engagement ends.
Skylight is a digital consultancy that uses design and technology to help government agencies deliver better public services. They are a growing team of public interest technologists committed to civic innovation.
Analyze current processes and user needs to identify workflow automation opportunities.
Design and develop workflow applications, services, scripts, and integrations using customer-approved technologies.
Integrate workflows with APIs, data sources, and security tools, and support automated testing and documentation.
SkyePoint Decisions is a cybersecurity architecture and IT service provider delivering enterprise solutions to federal government clients. The company is a small, collaborative business certified at CMMI Level 3 that values accountability, professional development, and work-life balance.
Provide SA/OSA expertise and guidance for the security authorization program.
Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
Track authorization renewals and support audits and data collection for FISMA reporting.
SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.
Improve automated security assurance workflows to reduce manual effort and increase consistency.
Streamline collection and analysis of security evidence to improve audit readiness and visibility.
Enhance efficiency of access reviews, control testing, and risk assessments through technical automation.
Chainlink is the industry-standard oracle platform bringing capital markets onchain and powering decentralized finance. It has enabled tens of trillions in transaction value and is adopted by major financial institutions and protocols, with a remote-first culture.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Lead and mature Affirm's Security Third Party Program, designing and implementing scalable processes and controls.
Own pre-launch security due diligence for third parties supporting international expansion and M&A.
Drive automation with Python and agentic coding tools to replace manual GRC work with code-defined workflows.
Affirm provides clear, predictable buy now, pay later financial products with no hidden fees. It is a remote-first company that values security, transparency, and care, offering flexible benefits and an inclusive culture.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.
Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
Build automation and infrastructure-as-code that streamlines security operations, reporting, and remediation.
Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
ServiceNow provides an AI platform for business reinvention, helping 85% of the Fortune 500 work smarter. It is a large global company with a culture centered on innovation and automation, aiming to free people from busywork.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.
Develop and maintain automated security compliance, testing, and continuous monitoring capabilities.
Automate DISA STIG and SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus.
Integrate security gates into CI/CD pipelines with GitLab, SonarQube, Fortify, and AWS services.
CSCI Consulting is an award-winning information technology and financial management consulting firm focused on delivering world-class services. The company values each associate's drive to excel and fosters an energizing, diverse culture where work and fun coexist.
Design, develop, and optimize automated CI/CD pipelines for enterprise applications, microservices, and infrastructure workflows.
Integrate DevSecOps practices including automated security testing, compliance controls, and vulnerability remediation.
Collaborate with cloud, development, and security teams to support containerized workloads on AWS and Kubernetes.
They are a mission-driven technology partner focused on modernizing critical government systems and strengthening secure, reliable digital services. They hire through Jobgether and work with multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.
Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.
Develop and maintain GitLab CI/CD pipelines, including reusable jobs, parent/child pipelines, and integrated security testing.
Build and maintain AWS GovCloud infrastructure using Terraform and Ansible, focusing on secure, resilient, and maintainable solutions.
Automate security controls, troubleshoot complex infrastructure issues, and provide technical guidance across teams.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, serving federal agencies across defense, space, healthcare, and energy. Headquartered in Tysons, Virginia, LMI focuses on agility and collaboration to deliver impactful results and drive lasting value.
Lead security architecture across cloud, platform, and AI systems.
Drive threat modeling, vulnerability management, and incident response.
Embed automated security testing into CI/CD and infrastructure-as-code.
Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.
Design guardrails for AI-powered products and build automated security tooling for an AI-first workforce.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code.
Manage identity and access controls for AI systems and non-human agents, and integrate security tooling with LLM layers.
Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum, representing over $50 billion in annual GMV, and the culture is remote-first, collaborative, and focused on AI-driven innovation.
Design and develop Python-driven security tools, including vulnerability scanners and API security validators.
Build Kubernetes security automation, including RBAC policies and runtime threat detection.
Create self-service security tools that empower engineering teams with infrastructure-as-code validators.
Vultr provides global cloud infrastructure with data centers worldwide. It is a privately-held company valued at $3.5 billion, serving hundreds of thousands of customers across 185 countries.