Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Supports Security Authorization and Ongoing Security Authorization activities under NIST RMF.
Reviews security documentation and artifacts for ATO packages, including SSPs, PIAs, and POA&Ms.
Tracks authorization renewals and supports continuous monitoring, audits, and compliance data calls.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. As an ISO-certified small business, it fosters a collaborative culture focused on individual performance, accountability, and gratitude.
Provide SA/OSA expertise and guidance for the security authorization program.
Review ATO packages, PIAs, SSPs, and artifacts for RMF compliance and continuous monitoring.
Track authorization renewals and support audits and data collection for FISMA reporting.
SkyePoint Decisions is an IT service provider specializing in cybersecurity, critical infrastructure, and applications development for federal clients. It is an ISO-certified small business with a collaborative culture built on accountability and individual performance.
Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.
This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Serve as the primary customer-facing lead for CMMC Level 1 and Level 2 engagements from scoping through assessment.
Author System Security Plans, policies, and evidence libraries; implement technical controls in customer tenants.
Assess finished environments against the CMMC Level 2 Assessment Guide and support customers during C3PAO assessments.
Defense Unicorns delivers mission value by streamlining software delivery so customers can focus on the most important challenges. Their team is composed of innovators, software engineers, and veterans with decades of experience in federal technology.
Manage and administer DLA SecureView infrastructure, including design, implementation, testing, and deployment.
Provide Tier 1 through Tier 3 support for SecureView endpoints, VPN connectivity, and remote access.
Maintain RMF artifacts, STIG compliance, and architecture documentation, and coordinate with security teams.
TekSynap is a fast-growing high-tech company that provides information management solutions for Federal Government customers. It focuses on delivering enterprise IT support with a competitive benefits package and a culture of nimble technology adoption.
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Implement and maintain cybersecurity controls and security configuration baselines using CIS and STIG benchmarks.
Conduct security and compliance assessments, identify risks, and support audits and security reviews.
Collaborate with technical teams to address vulnerabilities and protect critical systems from evolving cyber threats.
Agile Defense provides advanced technology solutions and cybersecurity services to support U.S. national security and critical civilian missions. The company emphasizes a culture of collaboration, adaptability, and employee well-being through its '6Hs' values.
Serve as principal cybersecurity advisor and custodian of the system security authorization package in eMASS.
Author and maintain RMF artifacts including SSP, SAR, and POA&Ms, coordinating remediation with technical teams.
Conduct STIG reviews, vulnerability management, and support DevSecOps workflows in AWS cloud environments.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.
Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.
Develop and maintain automated security compliance, testing, and continuous monitoring capabilities.
Automate DISA STIG and SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus.
Integrate security gates into CI/CD pipelines with GitLab, SonarQube, Fortify, and AWS services.
CSCI Consulting is an award-winning information technology and financial management consulting firm focused on delivering world-class services. The company values each associate's drive to excel and fosters an energizing, diverse culture where work and fun coexist.
Lead technical federal compliance programs including CMMC, FedRAMP, and NIST 800-171 for government contractors.
Manage a small team of Security Analysts, driving performance through coaching, accountability, and high-quality outcomes.
Build and maintain client security programs, conduct gap/risk assessments, and manage external audits like CMMC and FedRAMP.
Founded in New York City in 2015, Rhymetec specializes in compliance, cybersecurity, and data privacy, helping clients build effective infosec programs. The company operates remotely across the United States and emphasizes professional development and a collaborative culture.
Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Prepare, configure, and maintain server infrastructure for training and simulation exercises.
Administer virtualized systems and coordinate with exercise planners using scripting.
Troubleshoot infrastructure issues and provide remote technical assistance during live exercises.
Rackner builds reliable technology systems that support military medical training and readiness. The company offers a range of benefits and employee support programs, focusing on federal missions and remote-work support.
Configure and maintain ServiceNow ITSM capabilities supporting incident management, service requests, and daily service operations.
Maintain incident and request routing, assignment rules, and SLA definitions, including pause handling and service-level tracking.
Build and maintain service catalog items, provisioning workflows, and related operational dependency documentation.
Rackner develops and supports technology that helps federal healthcare organizations deliver reliable, effective services. They are a company focused on building dependable IT solutions, with a culture that values technical ownership, thoughtful problem-solving, and collaboration.