Jobs at Fortreum

Own end-to-end delivery of technical initiatives for an AI-native compliance platform. Translate product roadmaps into schedules and milestones, coordinate Engineering, Sales, Delivery, and PMO teams, manage risks and dependencies, report project health, and support customer onboarding and deployments. Establish agile project-management processes, communicate technical concepts to diverse stakeholders, and drive continuous improvement across cloud, AI/ML, and compliance workstreams.

Leads FedRAMP 20X advisory engagements, performing gap analyses, designing cloud security solutions mapped to Key Security Indicators, and developing client compliance documentation. Builds automated, code-based validation using scripts, APIs, and Infrastructure-as-Code; advises on vulnerability response, encryption, authorization boundaries, SIEM, and continuous compliance monitoring. Tracks regulatory changes, manages client relationships, leads project activities, mentors team members, and delivers high-quality services on schedule.

Conduct network, web, API, mobile, cloud, and social engineering penetration tests for customer engagements. Advise clients on vulnerabilities, remediation, and compliance; coordinate project readiness; prepare reports and deliver readouts. Maintain customer relationships, pursue required certifications, and mentor junior testers. The role is based in a Seattle SCIF with limited periodic travel to client locations.

Conduct network, web (API and mobile) and social engineering penetration tests for clients, advise on vulnerabilities and remediation, produce deliverables, coordinate engagements, train junior staff, and meet FedRAMP/A2LA certification requirements. Must support customer-facing activities and occasional onsite travel.

Embed with federal and enterprise customers to deploy, integrate, and operationalize the Kovr AI Platform across cloud, hybrid, and classified environments. Build DevSecOps integrations, automate evidence collection and RMF/ATO processes, write IaC and scripts, troubleshoot complex deployments, enable customer engineering teams, and produce documentation and runbooks to support compliant, repeatable implementations.

Conduct network, web (API/mobile), and social engineering penetration tests; advise customers on vulnerabilities and remediation; prepare deliverables; coordinate engagements; mentor juniors; meet FedRAMP certification requirements; and support cloud-focused security assessments.