GROWTH Cybersecurity Integration Lead- EXIM Washington, DC

TechSur Solutions, LLC; Washington (District of Columbia); Vor Ort; USD 165.000 - 225.000; Vollzeit

Zusammenfassung

TechSurSolutions is seeking a Cybersecurity / cATO Lead to support secure software development and continuous authorization for the EXIM Online modernization program.

You will embed security into DevSecOps pipelines, runtime operations, and authorization decision support, coordinating with ISSOs, engineers, and program leadership to maintain readiness.

Qualifikationen

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Export-Import Bank Cyber experience is REQUIRED.
• Familiarity with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR, and evidence collection.
• Experience with DevSecOps, CI/CD security gates, SBOMs, cloud security, and secure software development.
• Ability to translate security requirements into practical engineering controls and measurable risk reduction.
• Experience coordinating with ISSOs, security assessors, and government authorization stakeholders.
• Experience supporting cATO or continuous authorization programs.
• Certifications such as Security+, CISSP, CISM, CAP, CGRC, AWS Security Specialty or equivalent.

Aufgaben

• Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, artifacts, and security evidence.
• Map NIST SP 800-53 Rev. 5 controls to automated controls, pipeline evidence, and monitoring outputs.
• Support secure SDLC aligned to SSDF, EO 14028, Zero Trust, SBOM requirements, and software supply chain security.
• Support ATO documentation, SSP, SAR, POA&M, SBOM updates, and risk posture summaries.
• Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and leadership on readiness.
• Help implement continuous monitoring dashboards, remediation workflows, and auditable releases.

Kenntnisse

Cybersecurity

RMF

NIST 800-53

ATO/POA&M

DevSecOps

SBOM

Zero Trust

Cloud security

CISSP

Jobbeschreibung

• Active Government Security Clearance: No
• Compensation: USD 165,000 - USD 225,000 - yearly

Company Description

TechSurSolutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency.Based in the DC metropolitan area,TechSurspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.Since we were formed inAugust of2016,we have supported multiple impactful and excitinggovernment programs.

Job Description

Position Summary: TechSur is seeking a Cybersecurity / cATO Lead to support secure software development, continuous monitoring, authorization artifacts, and operationalization of Continuous Authorization to Operate for the EXIM Online modernization program. This role will help embed security and compliance into DevSecOps pipelines, engineering workflows, runtime operations, and authorization decision support.

Key Responsibilities

• Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
• Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs.
• Support secure SDLC implementation aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices.
• Support ATO documentation, SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
• Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness.
• Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.

Qualifications

Required Qualifications

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Export-Import Bank Cyber experience is REQUIRED.
• Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection.
• Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development.
• Ability to translate security and compliance requirements into practical engineering controls, pipeline evidence, and measurable risk reduction.
• Experience coordinating with ISSOs, security assessors, engineering teams, program managers, and Government authorization stakeholders.
• Experience supporting cATO or continuous authorization programs.
• Security+, CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification.
• Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection.

Additional Information

All your information will be kept confidential according to EEO guidelines.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply