Cybersecurity & cATO Integration Lead

TechSur Solutions, LLC; Washington (District of Columbia); On-site; USD 165,000 - 225,000; Full time

Job summary

TechSurSolutions, LLC in Washington, DC seeks a Cybersecurity/cATO Lead to support secure software development and continuous authorization for the EXIM Online modernization program. You will embed security into DevSecOps, runtime operations, and decision support.

Responsibilities include mapping controls to automation, maintaining authorization artifacts, and coordinating with ISSOs, engineers, and program leadership to sustain readiness for authorization decisions.

Qualifications

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Export-Import Bank Cyber experience is REQUIRED.
• Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection.
• Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development.
• Ability to translate security and compliance requirements into practical engineering controls, pipeline evidence, and measurable risk reduction.
• Experience coordinating with ISSOs, security assessors, engineering teams, program managers, and Government authorization stakeholders.
• Experience supporting cATO or continuous authorization programs.
• Security-related certifications listed above.
• Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection.

Responsibilities

• Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
• Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs.
• Support secure SDLC implementation aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices.
• Support ATO documentation, SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
• Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness.
• Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.

Skills

Cybersecurity

Compliance

Risk management

Federal authorization

DevSecOps

NIST SP 800-53

Cloud security

SBOM

Security governance

Education

Security+

CISSP

CISM

CAP

CGRC

AWS Security Specialty

Job description

TechSurSolutions, LLC in Washington, DC seeks a Cybersecurity/cATO Lead to support secure software development and continuous authorization for the EXIM Online modernization program. You will embed security into DevSecOps, runtime operations, and decision support.

Responsibilities include mapping controls to automation, maintaining authorization artifacts, and coordinating with ISSOs, engineers, and program leadership to sustain readiness for authorization decisions.