Support the development, maintenance, and execution of Authority to Operate (ATO) packages, including SSPs, POAMs, SARs, and supporting RMF artifacts. - Assist with implementation and enforcement of security controls aligned to NIST 800-171, NIST 800-53, CMMC 2.0, FedRAMP, and DoD RMF requirements. - Maintain system security documentation, accreditation records, and configuration management artifacts. - Work closely with government ISSMs, customers, subcontractors, and prime contractors to support accreditation posture and operational readiness. #### Continuous Monitoring & Risk Management
Monitor systems for compliance with security policies, classification handling requirements, access controls, and boundary protections. - Conduct periodic security assessments, control reviews, and continuous monitoring activities. - Identify compliance risks, security gaps, and operational concerns, providing leadership with actionable mitigation recommendations. - Support incident response activities, root cause investigations, and corrective action tracking. #### Vulnerability Management & Secure Operations
Coordinate vulnerability management efforts, including STIG reviews, remediation tracking, patch validation, and audit evidence collection. - Support secure enclave operations and ensure classified systems remain compliant with customer and government requirements. - Assist with supply chain and vendor security reviews, including SBOM tracking and compliance validation. - Support secure operations across mission-critical systems within defense and intelligence environments. #### Cross-Functional Partnership
Partner with Engineering teams to embed secure-by-design principles throughout system development and deployment lifecycles. - Collaborate with IT and Cybersecurity teams to ensure program controls align with enterprise security controls and policies. - Support internal and external audits, inspections, assessments, and security reviews. - Contribute to cybersecurity awareness and compliance training for users and technical teams. ### Pre-Flight Checklist
Active Secret clearance required; TS/SCI preferred.
U.S. Citizenship required. - 5+ years of experience supporting cybersecurity, information assurance, or compliance programs within DoD, Intelligence Community, or federal contractor environments. - Experience supporting RMF accreditation activities and maintaining ATO packages in regulated or classified environments. - Working knowledge of NIST 800-171, NIST 800-53, CMMC 2.0, and DoD RMF requirements. - Experience performing vulnerability management, audit support, and continuous monitoring activities. - Familiarity with DISA STIGs, security control implementation, and enclave operations. - Strong communication skills with the ability to collaborate across engineering teams, government stakeholders, and external partners. - Ability to manage multiple priorities in fast-paced, mission-focused environments. - Security certification such as Security+, CISSP, CAP, or equivalent. ### Bonus Cargo
Active TS/SCI clearance. - Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related discipline. - Experience with Governance, Risk, and Compliance (GRC) and ATO management tools. - Experience supporting classified environments and secure enclave operations. - Familiarity with FedRAMP, Zero Trust architectures, and Executive Order 14028 compliance initiatives. - Knowledge of CNSSI 1253 requirements. - Experience supporting audits, incident response, and cyber risk management programs. - Hands-on experience with vulnerability scanning and compliance tooling. - Advanced certifications such as CISSP, CISM, CAP, GSLC, or equivalent. - Experience supporting aerospace, defense, or intelligence community programs. We're building a constellation here, not looking for identical satellites. Every member of the team brings different capabilities to the same mission. If your orbit intersects with ours and you're mission-ready, send it. Location: DC Metro, Los Angeles, or Colorado Springs
Compensation: $110,000-$175,000
US-based Candidates: we are currently only able to hire residents of the following U.S. states: AL, AZ, CA, CO, DC, FL, GA, HI, IL, IN, KS, MA, MD, MI, MN, MO, MT, NC, NJ, NM, NV, NY, OH, OK, OR, RI, TN, TX, UT, VA, WA, WI, WV We are unable to consider candidates residing in other U.S. states at this time.
Internationally-based Candidates: we are currently only able to hire residents of the following locations: United Kingdom. We are unable to consider candidates residing in other countries at this time.
Equity, Diversity & Inclusion are key to our success. Diversity not only includes race and gender identity, but also national origin, citizenship, sex, color, veteran status, disability, genetic information, or any other protected characteristic that is part of one’s identity. All of our employees’ points of view are key to our success, and we embrace individuality.
