Source Job

• Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
• Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
• Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.

This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.

• Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
• Manage vulnerability scanning, incident response, and remediation tracking through closure.
• Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.

Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.

• Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
• Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
• Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.

Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.

• Provide SA/OSA expertise and guidance for the security authorization program.
• Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
• Track authorization renewals and support audits and data collection for FISMA reporting.

SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.

• Implement and maintain cybersecurity controls and security configuration baselines using CIS and STIG benchmarks.
• Conduct security and compliance assessments, identify risks, and support audits and security reviews.
• Collaborate with technical teams to address vulnerabilities and protect critical systems from evolving cyber threats.

Agile Defense provides advanced technology solutions and cybersecurity services to support U.S. national security and critical civilian missions. The company emphasizes a culture of collaboration, adaptability, and employee well-being through its '6Hs' values.

• Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
• Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
• Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.

SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.

• Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
• Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
• Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.

DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.

• Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
• Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
• Perform technical tests, document results, and maintain work papers.

Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.

• Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
• Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
• Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.

Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.

• Maintain DoD cyber workforce qualification records, monitor certification expirations, and support ongoing compliance.
• Conduct periodic access reviews and coordinate account and credential lifecycle activities with security stakeholders.
• Maintain security-control documentation and STIG/ACAS evidence, reporting incidents and advising engineering teams on compliance.

Rackner strengthens security and operational readiness across mission-critical federal healthcare technology. They are a team that values practical problem-solving, collaboration, professional growth, and people who take ownership of their work.

• Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
• Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
• Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.

SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.

• Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
• Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
• Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.

Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.

• Own physical construction and accreditation requirements for defense Galleons, including SCIFs and SAPFs under ICD 705, DoDM 5205.07, and NISPOM.
• Translate security standards into repeatable design criteria, drawing notes, BOM constraints, and factory work instructions for cross-functional teams.
• Serve as the company authority on physical security for secure builds, liaising with Accrediting Officials and DCSA representatives through accreditation.

Armada is the hyperscaler for the edge, delivering modular AI infrastructure from first deployment to AI factory with speed, scale, and sovereignty. With nearly $500 million in funding and deployments in over 60 countries, Armada is backed by leading investors and builds a culture of ownership, autonomy, and impact.

• Lead as the SME for security tools including CASB, vulnerability scanning suite, and EPP, improving tool functionality.
• Lead the vulnerability management program, working with the patching team to minimize the attack surface.
• Provide security engineering expertise on projects, implement standards, and research advanced security technologies.

First Quality is a family-owned group of companies that produces high-quality personal care and household products for large retailers and healthcare organizations. It employs over 5,000 team members across 8 manufacturing campuses in the U.S. and Canada, maintaining a collaborative culture rooted in humility, unity, and integrity.

• Lead or support systems engineering activities for a cloud-based enterprise system across planning, design, integration, testing, deployment, and modernization.
• Coordinate technical integration among cloud infrastructure, networking, identity services, cybersecurity tools, applications, and data services.
• Support Risk Management Framework activities, develop Splunk dashboards, execute server scans, and implement STIGs to maintain security compliance.

Empower AI provides AI-powered solutions for government, helping federal agencies modernize and improve workforce productivity. The company is headquartered in Reston, Va., and is recognized as a 2024 Military Friendly Employer.

• Act as the engineering voice of security and compliance, turning regulatory standards into practical controls you ship to production.
• Own certifications, audits and attestations like ISO 27001, SWIFT and SOC 2, driving findings to closure.
• Improve release, change, post-incident and operational resilience processes with automation and clear documentation.

Griffin is a fully regulated UK bank providing banking infrastructure and payments for fintechs and platforms. They are a remote-first, high-trust company with a small, cross-functional engineering culture and a mission-driven approach.

• Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
• Build automation and infrastructure-as-code that streamlines security operations, reporting, and remediation.
• Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.

ServiceNow provides an AI platform for business reinvention, helping 85% of the Fortune 500 work smarter. It is a large global company with a culture centered on innovation and automation, aiming to free people from busywork.

• Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
• Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
• Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.

TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.

• Manage certification activities for Common Criteria, FIPS, and DoDIN across networking product lines.
• Coordinate with accredited labs and guide engineering teams on compliance gaps and remediation.
• Develop technical documentation and maintain FIPS-compliant cryptographic modules.

The company is a technology engineering team focused on advancing secure networking solutions through government certification and compliance processes. It fosters a collaborative, inclusive, remote-first culture that values diverse perspectives and innovation.

• Provide senior incident response and breach management for institutions of higher education handling federal data.
• Conduct cybersecurity compliance assessments and evaluate safeguards against NIST SP 800-61 Rev. 3.
• Coordinate remediation, track cases through closure, and deliver actionable recommendations to stakeholders.

Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers. It is a multi-year Washington Business Journal Best Places to Work winner with an employee-centric culture and a distributed workforce.