Cybersecurity Integration Lead

TechSur Solutions is hiring a Cybersecurity / cATO Lead for the EXIM Online modernization program in Washington, DC (onsite) to operationalize Continuous Authorization to Operate and embed security into engineering workflows.

Responsibilities

• Develop and maintain cATO roadmap materials, including control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
• Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and outputs from continuous monitoring.
• Support implementation of secure SDLC aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices.
• Assist with ATO deliverables and updates, including SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
• Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to sustain continuous authorization readiness.
• Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.

Requirements

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Export-Import Bank Cyber experience is required.
• Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection.
• Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development.
• Ability to translate security and compliance requirements into practical engineering controls, measurable risk reduction, and pipeline evidence.
• Experience coordinating with ISSO and security assessors, engineering teams, program managers, and Government authorization stakeholders.
• Experience supporting cATO or continuous authorization programs.
• Security+ , CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification.
• Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection.

Tech Stack / Frameworks

• NIST SP 800-53 Rev. 5
• NIST SP 800-218 SSDF
• EO 14028
• Zero Trust
• SBOM
• RMF
• DevSecOps
• CI/CD and CI/CD security gates
• Continuous monitoring
• SSP, SAR, POA&M
• AWS Security Specialty

Location: Washington, DC (onsite)

Salary: USD 165,000 - 225,000 per year