Conduct code and container vulnerability assessments using DoD scanning tools, DISA STIGs, and SRGs.
Apply SAST and DAST methodologies and integrate security controls into CI/CD pipelines.
Serve as GitLab security reviewer and coordinate remediation of security findings across teams.
This partner company supports cybersecurity and secure software delivery within U.S. Department of Defense and Navy environments. The organization offers a fully remote, mission-focused culture with opportunities to collaborate across engineering and program teams.
Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
Design and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
Drive containerization, Kubernetes orchestration, and automated security compliance for mission-critical applications.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Design and maintain CI/CD pipelines for automated build, test, security scanning, and deployment.
Provision and manage cloud infrastructure across development, test, and production environments.
Deploy and support containerized applications using Docker and Kubernetes, including monitoring, troubleshooting, and incident response.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed. Headquartered in Tysons, Virginia, it serves the defense, space, healthcare, and energy sectors with a collaborative, agile culture.
Design, harden, and defend containerized application infrastructure across edge and cloud environments.
Lead threat modeling, vulnerability management, and security reviews to support mission-critical systems.
Own provisioning, secrets management, and security controls for systems operating in denied or disconnected environments.
CX2 is a next-generation defense technology company building AI-enabled hardware and software platforms to detect, disrupt, and defend the electromagnetic spectrum. Backed by leading defense investors and led by founders from Meta, SpaceX, Epirus, and the DoD, the company values high responsibility and autonomy.
Apply systems security engineering principles to secure mission-critical systems throughout their lifecycle.
Support Risk Management Framework activities, including ATO submissions and continuous monitoring.
Collaborate with stakeholders to conduct risk assessments, vulnerability remediation, and Zero Trust maturity.
A partner company specializing in information systems security engineering for Department of Defense environments. The organization emphasizes accountability, collaboration, excellence, and continuous development within a fully remote work environment.
Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including serverless and Zero Trust patterns.
Own the POAM process end to end, develop plans of action with target dates, track progress, and close findings proactively.
Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO, and maintain a live dashboard for all security findings.
Oddball brings quality software to the federal space, aiming to improve the daily lives of millions. It is a small company that values learning, growth, and making a big impact.
Design and integrate software factory services spanning CI/CD, security scanning, cloud infrastructure, and observability.
Advise programs on factory selection and onboarding, including architecture, security, and release paths.
Architect secure cloud and container environments and embed automated security controls into delivery workflows.
Aether Aerospace is a defense technology platform focused on delivering high-impact technologies and advanced manufacturing solutions to the U.S. Department of Defense. The company operates as a multi-entity aerospace and defense technology enterprise backed by Falfurrias Management Partners, with a focus on scalable growth and operational excellence.
Manage the full vulnerability lifecycle: scan, triage, remediate, and verify across code, containers, and IaC.
Administer SAST, DAST, SCA, and secret scanning tools in CI/CD and investigate alerts.
Monitor logs, SIEM/Wazuh rules, and Cloudflare/WAF configurations for operational security.
Boosta is a holding tech company that creates, develops, and invests in digital businesses with global potential. We collaborate with over 800 specialists worldwide, and TechCore, our service team, includes 50+ professionals handling 300+ projects a year.
Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment.
Strengthen application and cloud-native security across Kubernetes and containerized environments, identifying risks and implementing practical controls.
Manage CVE and vulnerability lifecycles, supporting prioritization and working with application teams on mitigation and remediation.
Redcare Pharmacy is Europe's leading online pharmacy, driven by dedicated teams and cutting-edge innovation. The company fosters an enjoyable and collaborative working environment where every employee feels comfortable and motivated to contribute to the vision: 'Until every human has their health.'
Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.
Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.
Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Secure Kubernetes workloads and enforce security policies throughout the CI/CD lifecycle.
Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security. With 550+ professionals and 210+ edge locations, we build the foundation that connects the world to AI.
Embed security practices into the SDLC, implementing SAST, SCA, and secret scanning controls in CI/CD pipelines.
Harden AWS infrastructure and infrastructure-as-code, including IAM, Terraform, VPCs, and KMS.
Lead a Security Champions program, conduct threat modeling, and define security standards for APIs and critical features.
The company is a fast-growing technology organization focused on application and cloud security. It fosters a collaborative, remote-first culture with technical autonomy and a focus on developer empowerment.
Design and implement cybersecurity controls for satellite software, ground systems, and mission infrastructure.
Develop secure software practices including threat modeling, code reviews, and vulnerability management.
Monitor networks for cyber threats, lead incident response, and support compliance with NIST 800-171 and CMMC.
Muon Space is an end-to-end Space Systems Provider that designs, builds, and operates LEO satellite constellations delivering mission-critical data. Founded in 2021, the company is based in Silicon Valley and offers a comprehensive benefits package including equity, medical, dental, vision, 401k, paid vacation, and parental leave.
Design, implement, and maintain CI/CD pipelines to support application delivery and deployment automation.
Support AWS-based infrastructure and cloud deployment activities while developing automation scripts.
Collaborate with developers, infrastructure, and operations teams to streamline software delivery and resolve pipeline issues.
Sparksoft Corporation is an IT solutions company serving government clients, delivering transformative technologies and innovation. It is recognized as a Great Place to Work® with a collaborative, transparent, and fun culture.
Lead technical discovery and advise on solution design for application security.
Own proof-of-value engagements from defining success criteria through technical validation.
Partner with account executives on complex sales and travel up to 20% for customer meetings.
We are an application security SaaS company at Series C/D stage, helping organizations build effective application security programs. Our collaborative team supports mid-market sales cycles and values engineering depth in customer conversations.
Integrate security controls into CI/CD pipelines, including SAST, SCA, and container scanning.
Lead vulnerability management and governance with risk-based prioritization and remediation.
Design and implement security controls across GCP infrastructure using IaC practices.
The company is a technology firm specializing in cloud-native security solutions. It operates with a globally distributed team and emphasizes a flexible, autonomous working culture.
Perform systems administration, patching, vulnerability scanning, and remediation for AWS and GCP cloud workloads.
Configure and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
Support 24x7 on-call rotation and collaborate with security analysts to deliver secure solutions for FedRAMP and FISMA customers.
Quantum Sky is a technology company that engineers solutions for cyber, networks, software, and quantum for mission-driven clients. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.
Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Collaborate with Development and Architecture teams to build complex, highly available cloud environments.
Provide Level 3 technical support and act as SME for implementing infrastructure for our core product.
Design and maintain secure, scalable infrastructure while documenting best practices and performing root cause analysis.
Smile Digital Health provides a FHIR-based data liberation platform that helps healthcare stakeholders collect and exchange data, impacting patients in over 20 countries. The company ranked #19 on Deloitte's Technology Fast 50 for 2024 and fosters a culture of respect, inclusion, and authenticity.
Integrate and automate application security tools (SAST, DAST, SCA) into CI/CD pipelines.
Conduct threat modeling, secure code reviews, and manage the bug bounty program.
Build a Security Champions network and deliver secure coding training to empower developers.
They are a payment technology platform supporting modern commerce and financial innovation. They operate as a remote-first, globally distributed company with a strong focus on security, collaboration, and developer enablement.