Jobs at Fortreum

Provide high-touch executive support to five C-suite leaders including complex calendar and inbox management, drafting executive correspondence, travel coordination, expense processing, meeting preparation, and special projects. Protect executives' focus time, maintain confidential board/executive files, and produce regular priority summaries. Hybrid role based in Lansdowne, VA (2 days/week).

Lead and perform SOC 1/2 and ISO/IEC 27001-series security assessments for cloud-based systems: define system boundaries, develop testing plans, complete AICPA/ISO audit documentation, conduct stakeholder and technical interviews, produce final reports and certification deliverables, manage project delivery and utilization, and mentor junior staff. Occasional travel to client sites may be required.

Conduct network, web (API/mobile), and social engineering penetration tests; advise customers on vulnerabilities and remediation; prepare deliverables; coordinate engagements; mentor juniors; meet FedRAMP certification requirements; and support cloud-focused security assessments.

Lead and perform penetration tests of networks, web/mobile/API applications and cloud environments; develop testing methodologies and tools; advise on remediation and compliance; produce deliverables and client readouts; mentor junior staff; support Red Team operations and coordinate project readiness with internal teams and customers.

Conduct network, web (API and mobile) and social engineering penetration tests for clients, advise on vulnerabilities and remediation, produce deliverables, coordinate engagements, train junior staff, and meet FedRAMP/A2LA certification requirements. Must support customer-facing activities and occasional onsite travel.

Deploy, integrate, and operationalize the Kovr AI Platform in cloud, hybrid, and classified environments. Build DevSecOps integrations, automation for evidence collection and RMF/ATO workflows, and infrastructure-as-code. Troubleshoot deployments, translate customer needs to engineering, lead onboarding, and produce documentation and runbooks to support scalable, compliant implementations across FedRAMP/CMMC/RMF frameworks.