Cybersecurity Integration Lead

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 165,000 - 225,000; Full time

Job summary

TechSur Solutions is seeking a Cybersecurity / cATO Lead to operationalize continuous authorization to operate on the EXIM Online modernization program in Washington, DC, onsite. The role focuses on embedding security into engineering workflows and sustaining readiness.

Responsibilities include developing cATO roadmaps, mapping controls to automated evidence, and supporting SDLC aligned to NIST SP 800-218 SSDF and EO 14028.

Qualifications

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Experience with Export-Import Bank cyber program is required.
• Familiarity with NIST 800-53, RMF, ATO, POA&M management, and continuous monitoring.
• Experience coordinating with ISSO and security assessors, engineering teams, and Government stakeholders.

Responsibilities

• Develop and maintain cATO roadmap materials, including control mappings and authorization artifacts.
• Map NIST SP 800-53 Rev.5 controls to automated controls and pipeline evidence.
• Support secure SDLC aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM.
• Assist with ATO deliverables including SSP, SAR, POA&M, and security assessment responses.
• Coordinate with EXIM cybersecurity stakeholders to sustain readiness.
• Help implement continuous monitoring dashboards and vulnerability remediation workflows.

Skills

5+ years cybersecurity

Export-Import Bank cybersecurity

DevSecOps familiarity

CI/CD security gates

Translate security to engineering

Tools

NIST SP 800-53 Rev.5

RMF

ATO

POA&M management

SSP/SAR documentation

SBOM

Job description

TechSur Solutions is hiring a Cybersecurity / cATO Lead for the EXIM Online modernization program in Washington, DC (onsite) to operationalize Continuous Authorization to Operate and embed security into engineering workflows.

Responsibilities

• Develop and maintain cATO roadmap materials, including control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
• Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and outputs from continuous monitoring.
• Support implementation of secure SDLC aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices.
• Assist with ATO deliverables and updates, including SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
• Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to sustain continuous authorization readiness.
• Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.

Requirements

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Export-Import Bank Cyber experience is required.
• Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection.
• Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development.
• Ability to translate security and compliance requirements into practical engineering controls, measurable risk reduction, and pipeline evidence.
• Experience coordinating with ISSO and security assessors, engineering teams, program managers, and Government authorization stakeholders.
• Experience supporting cATO or continuous authorization programs.
• Security+ , CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification.
• Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection.

Tech Stack / Frameworks

• NIST SP 800-53 Rev. 5
• NIST SP 800-218 SSDF
• EO 14028
• Zero Trust
• SBOM
• RMF
• DevSecOps
• CI/CD and CI/CD security gates
• Continuous monitoring
• SSP, SAR, POA&M
• AWS Security Specialty

Location: Washington, DC (onsite)

Salary: USD 165,000 - 225,000 per year