Teams at Fortreum

Leads FedRAMP 20X advisory engagements, performing gap analyses, designing cloud security solutions mapped to Key Security Indicators, and developing client compliance documentation. Builds automated, code-based validation using scripts, APIs, and Infrastructure-as-Code; advises on vulnerability response, encryption, authorization boundaries, SIEM, and continuous compliance monitoring. Tracks regulatory changes, manages client relationships, leads project activities, mentors team members, and delivers high-quality services on schedule.

Conduct network, web, API, mobile, cloud, and social engineering penetration tests for customer engagements. Advise clients on vulnerabilities, remediation, and compliance; coordinate project readiness; prepare reports and deliver readouts. Maintain customer relationships, pursue required certifications, and mentor junior testers. The role is based in a Seattle SCIF with limited periodic travel to client locations.

Deploys and operationalizes the Kovr AI Platform for enterprise and federal customers across cloud, hybrid, and classified environments. Designs secure CI/CD pipelines, AWS infrastructure with Terraform, and Kubernetes platforms using EKS, Helm, and ArgoCD. Implements NIST and OSCAL-aligned controls, observability, automated compliance evidence collection, security scanning, and continuous monitoring. Integrates DevOps tools, troubleshoots production issues, maintains technical documentation, and supports customer-facing infrastructure and security discussions.