Jobs at Workstreet

Own end-to-end recruiting for go-to-market roles, including sales leaders, account executives, SDRs, BDRs, solutions engineers, and channel positions. Build targeted pipelines, assess consultative sales talent, manage hiring forecasts, close candidates, and improve recruiting processes using structured interviews, data, AI, and automation. Partner closely with Sales leadership to define role requirements, improve hiring quality, and connect recruiting outcomes to new-hire performance.

Conduct penetration tests across web, mobile, network, cloud, and system environments; exploit and validate vulnerabilities; produce detailed technical reports; guide client remediation; develop offensive automation and social engineering simulations; support incident response; and track emerging threats.

Execute penetration tests across web, mobile, network, cloud, and system environments; identify and validate vulnerabilities; produce detailed technical reports and remediation guidance; support client remediation and incident response; develop custom offensive tools and automation; conduct social engineering simulations; and maintain client communications while tracking evolving threats.

Support federal cybersecurity compliance initiatives across NIST 800-53, FedRAMP, and RMF lifecycles. Responsibilities include control mapping, authoring SSPs and POA&Ms, conducting readiness and gap assessments, supporting continuous monitoring, coordinating 3PAO assessments, assisting remediation, documenting cloud authorization boundaries, and tracking regulatory updates. The role requires direct client communication, management of multiple projects, and familiarity with AWS GovCloud or Azure Government.

Guide SaaS providers, federal organizations, and defense contractors through FedRAMP, CMMC, and NIST compliance initiatives. Responsibilities include analyzing controls, authoring SSPs and POA&Ms, conducting readiness assessments and gap analyses, defining authorization boundaries, managing continuous monitoring, coordinating CSPs and assessment teams, and advising clients on CUI, DFARS, and federal authorization requirements.

Execute FedRAMP 20x control validation, create OSCAL-based machine-readable security artifacts, and build automated evidence pipelines. Conduct readiness and gap assessments, support continuous monitoring, coordinate 3PAO assessments, and assist with remediation across cloud environments. The role also tracks federal regulatory changes and collaborates directly with client engineering, compliance, and assessment teams under senior guidance.

Leads complex client security and compliance engagements across SOC 2, ISO 27001, HIPAA, and NIST CSF. Owns client relationships, develops compliance policies and audit evidence, manages risk remediation, resolves escalations, improves delivery processes, and mentors junior analysts. Provides bilingual English-Spanish guidance to international clients while managing multiple concurrent projects and serving as a strategic compliance advisor.

Own complex client relationships and lead end-to-end cybersecurity compliance engagements across SOC 2, ISO 27001, NIST CSF, HIPAA, and related frameworks. Manage audits, risk assessments, evidence collection, policy development, escalations, and process optimization. Lead and mentor analyst pods while serving as the primary client contact and ensuring successful compliance outcomes.

Leads high-complexity client GRC engagements, owning relationships, compliance milestones, escalations, and audit readiness. Maps environments to SOC 2, ISO 27001, HIPAA, and NIST frameworks; develops policies and control documentation; advises executives on cybersecurity risk; and supervises and mentors junior analysts. The role also drives process improvements, manages multiple client portfolios, and coordinates third-party assessments.

As a Senior GRC Engineer, you will manage client relationships, oversee compliance projects, lead a team of analysts, and enhance cybersecurity policies and procedures.

Lead operational delivery for Special Programs, managing 30–40 consultants via 4–5 managers. Own program health, timelines, quality standards, capacity planning, escalations, and executive client relationships. Coach first-line managers, perform performance management, review deliverables for technical rigor, and mitigate delivery risks to ensure client satisfaction across multiple compliance frameworks.

The role involves overseeing cybersecurity compliance projects, managing teams, ensuring quality standards, and engaging with clients on compliance matters.

Lead federal compliance engagements for clients pursuing FedRAMP and NIST certifications. Own strategic advisory, gap assessments, FedRAMP 20x readiness, OSCAL/JSON/YAML machine-readable artifacts, CCM continuous monitoring integrations, and third-party assessment orchestration while mentoring a small compliance team and maintaining executive client relationships.

As a GRC Engineer I, support cybersecurity compliance initiatives, maintain documentation, assist in risk mitigation, coordinate project tasks, and communicate with clients.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

As an Account Executive, you'll manage the full sales cycle, engaging with prospects in cybersecurity and compliance, and building relationships with key stakeholders.

Lead end-to-end GRC client engagements, manage a pod of analysts, advise on SOC 2/ISO/NIST frameworks, develop policies, guide audits and evidence collection, and maintain client relationships to drive compliance outcomes.

Serve as a virtual CISO for a client portfolio: build executive relationships, lead security program and compliance roadmaps (SOC 2, ISO 27001, NIST, HIPAA, CMMC), guide risk assessments and remediation, represent clients in high-stakes calls, manage 3–5 analysts, leverage GRC platforms (Vanta/Drata/SecureFrame), and support practice development and pre-sales.