Top Tech Jobs & Startup Jobs

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.

Serve as the on-site security and compliance authority for government production systems. Lead RMF/DIACAP accreditation activities, produce SSPs/POA&Ms, validate security controls, run vulnerability scans, maintain audit evidence, and coordinate with engineering and customer security teams across AWS, Azure, and on-prem environments. Requires TS/SCI or eligibility.

Manage full lifecycle RMF/DIACAP Assessment and Authorization (A&A) activities to achieve ATOs for Department of Commerce systems. Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patching (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and provide security guidance, configuration management recommendations, and mitigation strategies.

Serve as the on-site security and compliance authority for government production systems. Lead accreditation (RMF/DIACAP), build and maintain SSPs/POA&Ms, validate controls, produce compliance evidence, support audits, and coordinate with engineers across cloud and on-prem environments.

Support Dept. of Commerce ATO efforts by performing full lifecycle RMF/DIACAP assessment and authorization activities, security assessments per NIST 800-53, vulnerability scanning and patch management oversight, risk identification and reporting, configuration management recommendations, technical writing of A&A artifacts, and providing SME guidance for mitigation strategies and security engineering.

Manage full lifecycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems' Authorization to Operate (ATO). Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patch management (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and advise on mitigation strategies and configuration management.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems achieving ATO. Conduct security assessments per NIST SP 800-53, manage risk registries, provide configuration and vulnerability management guidance (HBSS/ACAS, IAVM), produce A&A documentation (STIG/IAVA, eMASS), and recommend mitigations to leadership.

Support mission-critical federal operations by overseeing cybersecurity and system security compliance, collaborating with stakeholders, analyzing operational challenges, producing documentation and reports, and driving continuous improvement to maintain operational efficiency and compliance.

Serve as an ISSO supporting RMF/DIACAP A&A lifecycle and ATO attainment for Dept. of Commerce systems. Conduct security assessments per NIST 800-53, manage risk registries, coordinate CM, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce ATO documentation (A&As, STIG/IAVA compliance), and provide mitigation guidance and security engineering expertise.

Serve as the on-site authority for system security and compliance for government customers: support RMF/DIACAP accreditation, implement and validate security controls, produce SSPs/POA&Ms and evidence, run vulnerability scans, collaborate with engineers across cloud and on-prem platforms, and support audits throughout the system lifecycle.