Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.
Serve as principal cybersecurity advisor and custodian of the system security authorization package in eMASS.
Author and maintain RMF artifacts including SSP, SAR, and POA&Ms, coordinating remediation with technical teams.
Conduct STIG reviews, vulnerability management, and support DevSecOps workflows in AWS cloud environments.
LMI is a digital solutions provider that accelerates government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, LMI serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Plan, implement, and upgrade security controls and architecture to safeguard systems and sensitive information.
Conduct risk assessments, penetration testing, and vulnerability assessments, then track mitigation plans.
Support compliance with NIST 800-171, develop governance documentation, and deliver security awareness training.
Insitu, a Boeing Company, provides unmanned air systems and software solutions for collecting, processing, and understanding sensor data to support critical decision-making. With over 1 million operational flight hours, the company values integrity, collaboration, and adaptability in a fast-paced, mission-driven environment.
Apply systems security engineering principles to secure mission-critical systems throughout their lifecycle.
Support Risk Management Framework activities, including ATO submissions and continuous monitoring.
Collaborate with stakeholders to conduct risk assessments, vulnerability remediation, and Zero Trust maturity.
A partner company specializing in information systems security engineering for Department of Defense environments. The organization emphasizes accountability, collaboration, excellence, and continuous development within a fully remote work environment.
Provide technical expertise on security control implementations and develop information security procedures for systems and applications.
Perform pre-assessment activities including detailed analysis of vendor technology stacks for NIST and agency compliance.
Support A&A (NIST 800-53) and compliance activities, reviewing third-party security assessment reports and communicating with stakeholders.
Valiant Solutions is a security-focused IT solutions provider serving public clients nationwide. The company is known for its employee-centric culture, has been named a Best Place to Work in the DC area for 12 consecutive years, and offers strong benefits and career development.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Lead security risk assessments across engineering, IT, operations, and business functions.
Maintain a risk register and provide leadership with a clear view of the company's risk posture.
Partner with teams to drive remediation of risks and map controls to compliance frameworks like NIST 800-171.
Muon Space is an end-to-end Space Systems Provider that designs, builds, and operates LEO satellite constellations delivering mission-critical data. Founded in 2021, the company operates a state-of-the-art facility in Silicon Valley and is committed to fostering a diverse and dynamic workforce.
Integrate cybersecurity through the SDLC, focusing on app sec, CI/CD security, and container security.
Conduct vulnerability assessments with DoD tools, DISA STIGs, SRGs, and implement secure OS configs.
Serve as GitLab security reviewer and support RMF artifacts and mitigation strategies.
Millennium is a cybersecurity company delivering Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering for national security missions. It is part of the Markon enterprise with an elite team of over 300 professionals.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Lead cybersecurity governance, assessment, and audit activities supporting a federal customer.
Coordinate evidence, control assessments, and remediation across NIST, RMF, and federal compliance requirements.
Maintain quality control, configuration traceability, and readiness for IV&V, QA, and government surveillance.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. Headquartered in Dulles, Virginia, it is an ISO-certified small business with a collaborative culture focused on mission assurance.
Architect, build, and maintain robust GitLab Pipelines for seamless application deployment.
Design and manage infrastructure across AWS GovCloud, edge, and Navy networks using Terraform, Ansible, and GitLab.
Drive containerization, Kubernetes orchestration, and automated security compliance for mission-critical applications.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, the company serves the defense, space, healthcare, and energy sectors with a focus on agility and collaboration.
Administer and maintain all AWS cloud environments for the WARP permitting platform, ensuring availability, performance, and security.
Manage AWS Marketplace subscriptions, monitor environment health with CloudWatch, and coordinate with AWS support.
Enforce security controls, manage user access, and maintain FedRAMP, FISMA, and NIST compliance.
Peraton is a next-generation national security company delivering mission-critical solutions to protect the nation and allies. It is a large enterprise serving government agencies and the U.S. armed forces, with employees solving the most daunting challenges for customers.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Develop and maintain GitLab CI/CD pipelines, including reusable jobs, parent/child pipelines, and integrated security testing.
Build and maintain AWS GovCloud infrastructure using Terraform and Ansible, focusing on secure, resilient, and maintainable solutions.
Automate security controls, troubleshoot complex infrastructure issues, and provide technical guidance across teams.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, serving federal agencies across defense, space, healthcare, and energy. Headquartered in Tysons, Virginia, LMI focuses on agility and collaboration to deliver impactful results and drive lasting value.
Act as the subject matter expert for Wiz's FedRAMP and DoD IL4/5 offerings, translating product value to internal and external stakeholders.
Engage with federal customers and mission owners to capture requirements, manage expectations, and support compliance processes.
Partner with Product and PMM to maintain the Wiz4Gov roadmap and prioritize features essential for U.S. Public Sector compliance.
Wiz is a cloud security company that connects code, cloud, and runtime into a single context to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and offers a culture that values world-class talent and creative freedom.
Ensure stable operation of computer software systems and network connections supporting the DLA Disposition Integration Web (DIW) Program Office.
Apply advanced technical knowledge of application networking, load balancing, fault tolerance, and vulnerability management.
Automate repeatable administrative tasks using PowerShell, Bash, Python, configuration management, or infrastructure-as-code tools.
Zantech is a dynamic Woman Owned Small Business focused on providing complex, mission-focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. The company strives for excellence, values long-term relationships, and offers a fast-paced and exciting work environment.