Security Assessment & Authorization

Security Assessment & Authorization Cybersecurity Jobs

2 jobs found

Today

Lead Penetration Tester

Revolutional, LLC Fort Collins, CO

Fort Collins, CO

Today

$110k - $150k/yr Full time Manager Application Security Data Security

Apply Now

Job Description

Lead operational security assessment and penetration testing efforts for a federal agency portfolio, delivering evidentiary results to CIO and CISO-level stakeholders.

Responsibilities

Lead operational security assessments across federal agencies using the ISC Security Assessment Methodology and applicable rules of engagement; manage approximately 6–7 agency assessments per year
Perform web application security assessments using OWASP methodology; assess approximately 3–4 applications per year across a range of agency environments
Create end-to-end test plans for each engagement, including scope definition, objectives, methodology selection, rules of engagement, and timeline
Develop criticality matrices that prioritize findings by risk, asset value, and mission impact to support remediation planning
Author security assessment reports with findings, evidence, risk ratings, and actionable remediation guidance aligned to federal evidentiary and reporting expectations
Develop and deliver executive out-briefs to agency CIO/CISO and senior leadership audiences, explaining complex technical results clearly
Conduct FedRAMP-qualified penetration testing in support of cloud service authorization, following FedRAMP pen testing requirements and documentation standards
Apply NIST SP 800 series guidance and DISA STIG methodology across assessment planning, execution, and reporting
Coordinate with agency stakeholders before, during, and after assessments to manage expectations and ensure findings are understood and acted upon
Maintain currency on vulnerability research, offensive techniques, and emerging attack surfaces relevant to federal civilian environments

Requirements

Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
5+ years of hands-on penetration testing experience, including demonstrated experience leading assessments in federal environments
CISA AES (Authorized External Security) certification required, or actively in process of obtaining
FedRAMP penetration testing experience required
Active Secret clearance
Ability and willingness to travel to agency sites as required
Deep experience conducting operational security assessments aligned to ISC Security Assessment Methodology and federal rules of engagement
Proficiency applying OWASP methodology to web application assessments in federal environments
Working knowledge of NIST SP 800 series for security assessment planning, execution, and reporting
Experience applying DISA STIG methodology to assessment scope and findings documentation
Experience producing test plans, criticality matrices, and security assessment reports meeting federal evidentiary and leadership reporting standards
Demonstrated ability presenting technical security findings to CIO, CISO, and senior agency leadership audiences
FedRAMP-qualified penetration testing experience, including familiarity with FedRAMP pen test requirements, documentation, and cloud authorization processes
Proficiency with industry-standard penetration testing toolsets for network, application, and infrastructure assessments

Strongly Preferred / Additional Credentials

GPEN (GIAC Penetration Tester), GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), OSCP (Offensive Security Certified Professional), or equivalent offensive security credential
GWAPT (GIAC Web Application Penetration Tester) or equivalent web application security certification

Nice to Have

Experience conducting CISA AES assessments as Assessment Lead across multiple federal civilian agencies
Familiarity with FedRAMP High, Moderate, and Low authorization boundaries and associated penetration testing implications
Background in Red Team operations or adversary emulation alongside structured assessment methodology
Experience with cloud-native application security assessments (AWS, Azure, GCP, or GovCloud)
Active TS/SCI clearance

Benefits

Traditional and HSA-eligible medical insurance plans
100% employer-paid dental and vision insurance options
100% employer-sponsored STD, LTD, and life insurance
5% 401(k) company matching
Flexible schedules and teleworking options
Paid holidays and PTO accrual plans
Paid Parental Leave
Professional development and career growth opportunities

Location / Terms

Onsite in Fort Collins, CO (project-based; onsite)
Also listed: Washington, DC, Ft. Collins, CO, or Kansas City, MO
Full-time position

Compensation / Clearance

$110,000 - $150,000 per year (DOE)
Active Secret clearance required

Travel

Yes – travel to agency sites required

View full job page →

Today

Cybersecurity Specialist

E Logic Atlanta, GA

Atlanta, GA

Today

$125k+/yr Full time Authorization To Operate Fedramp Fisma

Apply Now

Job Description

E Logic seeks a Cybersecurity Specialist based in Atlanta, GA (onsite) to support a Secure HIV-TRACE program from the CDC. The role focuses on information security compliance, continuous monitoring, and the Authorization to Operate (ATO) workflow, aligned to federal security requirements.

Role Summary

The position is responsible for ensuring the program’s security posture meets federal compliance obligations, including NIST SP 800-53, FISMA, and FedRAMP guidance. Work includes security assessment and authorization documentation, ongoing vulnerability visibility, and coordination of remediation planning through POA&M tracking.

Key Responsibilities

Oversee compliance with federal cybersecurity frameworks, including NIST SP 800-53, FISMA, and FedRAMP guidelines.
Lead the Security Assessment & Authorization (SA&A) processes and develop or compile required security artifact documentation.
Conduct continuous vulnerability monitoring, perform assessments, and support remediation planning.
Manage Plan of Action and Milestones (POA&M) tracking and coordinate activities with federal cybersecurity officers.

Requirements

Comprehensive knowledge of NIST SP 800-53 controls, FISMA, and FedRAMP compliance requirements.
Demonstrated experience executing the full SA&A and ATO lifecycles for federal IT systems.
Hands-on experience with vulnerability scanning tools, security hardening, and POA&M management.
Relevant security certifications (e.g., CISSP, CISM, CAP) are strongly preferred.

Relevant Technologies

NIST SP 800-53
FISMA
FedRAMP
Security Assessment & Authorization (SA&A)
Authorization to Operate (ATO)
Plan of Action and Milestones (POA&M)
Vulnerability scanning tools

Compensation and Location

Salary: USD 125,000 per year.
Location: Atlanta, GA (onsite).

Important Notice

This role is part of a proposal for the Centers for Disease and Prevention (CDC). Hiring is contingent upon the selection of the consultant.
Selected candidates will be included in the proposal and must authorize the use of their resume for submission.

View full job page →

Security Assessment & Authorization Cybersecurity Jobs

Lead Penetration Tester

Cybersecurity Specialist

Get Security Assessment & Authorization Cybersecurity Jobs alerts