Maintain Risk Management Framework artifacts for DevSecOps pipeline inheritance of NIST SP 800-53 controls.
Complete and validate STIG/SRG checklists quarterly and provide monthly application STIG status reports.
Evaluate program risks, document mitigation strategies, and recommend courses of action to ensure continuous ATO compliance.
DecisionPoint is a company providing cloud services and DevSecOps solutions, supporting ARTRANS AWS environments. It is a regular full-time employer fostering a culture of security and compliance, with an active Secret clearance required for this role.
Collaborate with cross-functional teams to apply cybersecurity best practices across systems, applications, and cloud environments.
Lead portions of cybersecurity assessments across the technology stack, identifying vulnerabilities and recommending remediation strategies.
Assist in shaping cybersecurity risk management activities, helping prioritize and guide security initiatives to protect critical assets.
Rise8 builds custom, secure software for government organizations, measuring success by impact: lives saved, time returned, and missions advanced. Certified as a Great Place to Work® with 100% of employees saying they love working here, Rise8 offers a culture rooted in kindness, candor, and continuous learning.
Lead Risk Management Framework activities for a federal AI platform deployment in AWS GovCloud.
Own authorization artifacts and coordinate with ISSOs and Authorizing Officials for ATO.
Partner with platform engineers on cloud and container security, vulnerability management, and hardening.
LMI is a digital solutions provider dedicated to accelerating government impact with innovation and speed, bringing commercial-grade platforms and mission-ready AI to federal agencies. Headquartered in Tysons, Virginia, it serves the defense, space, healthcare, and energy sectors, with a culture more startup than traditional government contractor.
Design and implement enterprise security controls aligned with NIST SP 800-53 and Zero Trust Architecture principles.
Conduct continuous security monitoring, incident response, and vulnerability management across cloud, network, and endpoint environments.
Develop and maintain cybersecurity SOPs, security baselines, and asset inventories to support audit readiness.
DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA, supporting public sector agencies and commercial enterprises globally. Recognized as a Top Workplace, the company delivers secure, efficient, and cost-effective solutions through a culture guided by five core values.
Lead and execute RMF compliance activities in accordance with DoD and NIST requirements, supporting system accreditation and ATO efforts.
Conduct STIG and SRG assessments across Windows, Linux, database, cloud, and application environments using tools such as SCC and STIG Viewer.
Analyze vulnerability scan results, develop and maintain POA&Ms, and track remediation activities to closure.
Peraton is a next-generation national security company that drives missions of consequence across land, sea, space, air, and cyberspace. As a leading mission capability integrator and enterprise IT provider, we deliver trusted solutions to protect our nation and allies, supporting essential government agencies and every branch of the U.S. armed forces.
Lead end-to-end vulnerability management and cloud security posture management lifecycle.
Administer and optimize security tooling, including configuration, automation, and reporting.
Monitor AWS cloud infrastructure to detect misconfigurations and compliance drift.
US Security & IT is a partner company focused on security and IT services. The company fosters an inclusive and collaborative work environment centered on security innovation and impact.
Conduct IT and cybersecurity risk assessments across systems, applications, and business processes.
Lead audit readiness activities for frameworks like SOC 2, HIPAA, and NYDFS.
Manage security policies, third-party vendor assessments, and develop risk dashboards.
Jobgether uses an AI-powered matching process to connect candidates with hiring companies. They focus on efficient, objective application review and are a remote-first organization.
Lead design and implementation of secure, scalable cloud architectures for a large federal civilian agency.
Direct all aspects of program performance including scope, schedule, cost, quality, and risk management.
Oversee compliance with federal cybersecurity frameworks such as FISMA, FedRAMP, NIST SP 800 53, and Zero Trust.
Peraton is a next-generation national security company that drives missions of consequence and serves as the world's leading mission capability integrator and transformative IT provider. It delivers trusted solutions to protect the nation and allies, supporting essential government agencies and all branches of the U.S. armed forces.
Lead the design of secure, scalable, multi-tenant architectures for federal cloud and enterprise programs.
Align system architecture with federal security frameworks and translate policy into implementable design.
Serve as a technical authority on security architecture, guiding engineering teams and government stakeholders.
Aquia is a Veteran-founded digital services firm that helps the government modernize and secure its systems and processes. It is a certified Great Place to Work and a small business recognized as HHS Service-Disabled Veteran-Owned Small Business of the Year in 2024.
Serves as a cybersecurity SME for Assessment and Authorization (A&A) of information systems, applying NIST 800-53 security controls and the Risk Management Framework (RMF) process.
Possesses five years of relevant RMF, NIST, and A&A experience, including assessing security controls for large, complex organizations like DLA.
Briefs senior management on authorization progress and understands cybersecurity in emerging technology areas such as Cloud and Industrial Control Systems.
Horizon Industries Limited is a dynamic IT and Management Consulting firm based in the Washington, DC area, providing full-cycle IT consulting and management support to both private and public sectors. Founded in 1996, the company prides itself on a diverse, employee- and family-centric culture with a focus on professional growth.
Design, deploy, and maintain secure cloud environments in AWS and Azure with compliance to DoD frameworks.
Configure IAM, RBAC, and cloud networking like VPC peering and VPNs for secure operations.
Support Infrastructure-as-Code using Terraform, CloudFormation, and optimize cloud resources for cost and security.
Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. They deliver tailored solutions and trusted results to enable national security missions worldwide.
Design, deploy, and manage cloud infrastructure on FedRAMP-authorized platforms (AWS GovCloud, Azure Government, Google Cloud for Government) supporting Army workloads.
Lead technical execution of cloud migration efforts including workload assessment, lift-and-shift, re-platforming, and cloud-native refactoring.
Implement Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, Azure Bicep, or equivalent tools to automate provisioning and configuration management.
Empower AI provides AI solutions for government agencies, helping federal leaders enhance workforce potential through practical transformation. Headquartered in Reston, VA, the company leverages over 30 years of experience in Health, Defense, and Civilian missions, and is recognized as a 2024 Military Friendly Employer.
Perform project tasks independently while contributing to cybersecurity assessment engagements and client deliverables.
Collect, organize, and analyze documentation, evidence, and technical artifacts required for security reviews.
Support assessments related to cybersecurity, compliance, and information security programs.
Our partner is a company focused on helping organizations strengthen their security posture and maintain compliance with industry standards. They offer a dynamic and collaborative work environment with career growth opportunities in cybersecurity.
Ensures stable operation of in-house computer software systems and network connections, including planning, developing, installing, configuring, maintaining, and optimizing all network software and communication links.
organizes and directs configuration and operation of information management systems, analyzes end user software and connectivity issues, and conducts capacity and performance analysis.
Directs the work of other system administrators and provides remote maintenance support to operational systems at multiple locations.
Horizon Industries Limited is a dynamic IT and Management Consulting firm based in the Washington, DC area, providing full-cycle IT consulting and Management support in both private and public sectors. Founded in 1996, the company prides itself on a diverse, employee- and family-centric culture and supports employees with training and certification in the latest technologies.
Design and guide Identity, Credential, and Access Management (ICAM) solutions for secure, mission-driven environments.
Collaborate with engineering teams and federal customers to define scalable, compliant architecture solutions.
Evaluate technologies, shape system design decisions, and ensure alignment with enterprise security standards.
Our partner is a technology firm focused on identity and access management solutions for secure, mission-driven environments. They are a mid-sized organization that fosters a fast-paced, Agile culture with a focus on cybersecurity and government projects.
Configure, deploy, and maintain security tools across cloud-native environments.
Integrate security tooling into existing software development and deployment workflows.
Partner with engineering teams to implement security best practices throughout the software development lifecycle.
Sphinx builds modern, scalable software to solve complex national security problems in Space. Founded by engineers and technologists with deep experience across commercial and defense technology, they emphasize collaboration, transparency, and individual responsibility in a growing team.
Monitor security alerts, vulnerabilities, and incidents across enterprise systems and assist in incident response.
Maintain compliance with standards such as NIST CSF, ISO 27001, and SOC 2 through audits and policy development.
Conduct security risk assessments, evaluate controls, and track remediation plans.
Mission Critical Group is an end-to-end power solutions and services provider that accelerates time-to-power for mission critical environments. With over 1.5 million square feet of U.S. manufacturing capacity, they support data centers, healthcare, and industrial facilities.
Design and implement security solutions across AWS, Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
Manage cloud security automation, IAM, compliance frameworks, and vulnerability remediation.
Collaborate with DevOps and engineering teams to integrate security into CI/CD pipelines.
This partner company manages applications and next steps for hiring clients. It is a mission-driven technology organization offering collaborative opportunities with AI-powered learning tools and internal development resources.
Define, implement, and evolve cybersecurity strategy aligned with business priorities.
Establish security policies and frameworks such as ISO 27001, NIST, and LGPD, and conduct risk assessments.
Lead incident response, optimize security tools, and promote security awareness across teams.
Jobgether is an AI-powered job matching platform connecting candidates with hiring companies. They use technology to ensure fair and efficient application reviews, processing personal data in compliance with GDPR.
Implement and maintain OCI infrastructure across Non-Classified, IL5, and IL6 environments using approved architectures.
Build and secure OCI services including compute, networking, storage, IAM, logging, and monitoring for federal compliance.
Develop Infrastructure-as-Code with Terraform or Ansible and support DevSecOps pipelines for automated cloud deployments.
Mythics is an award-winning Oracle systems integrator and elite Oracle platinum resale partner focusing on deep knowledge of Oracle technologies and business processes. Founded in 2000, the company has been named one of Virginia's Best Places to Work for 8 consecutive years and values a culture of Respect, Empathy, Excellence, and Fun.