Onsite cATO Lead — Cybersecurity Integration & RMF

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 165,000 - 225,000; Full time

Job summary

TechSur Solutions is seeking a Cybersecurity / cATO Lead to operationalize continuous authorization to operate on the EXIM Online modernization program in Washington, DC, onsite. The role focuses on embedding security into engineering workflows and sustaining readiness.

Responsibilities include developing cATO roadmaps, mapping controls to automated evidence, and supporting SDLC aligned to NIST SP 800-218 SSDF and EO 14028.

Qualifications

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Experience with Export-Import Bank cyber program is required.
• Familiarity with NIST 800-53, RMF, ATO, POA&M management, and continuous monitoring.
• Experience coordinating with ISSO and security assessors, engineering teams, and Government stakeholders.

Responsibilities

• Develop and maintain cATO roadmap materials, including control mappings and authorization artifacts.
• Map NIST SP 800-53 Rev.5 controls to automated controls and pipeline evidence.
• Support secure SDLC aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM.
• Assist with ATO deliverables including SSP, SAR, POA&M, and security assessment responses.
• Coordinate with EXIM cybersecurity stakeholders to sustain readiness.
• Help implement continuous monitoring dashboards and vulnerability remediation workflows.

Skills

5+ years cybersecurity

Export-Import Bank cybersecurity

DevSecOps familiarity

CI/CD security gates

Translate security to engineering

Tools

NIST SP 800-53 Rev.5

RMF

ATO

POA&M management

SSP/SAR documentation

SBOM

Job description

TechSur Solutions is seeking a Cybersecurity / cATO Lead to operationalize continuous authorization to operate on the EXIM Online modernization program in Washington, DC, onsite. The role focuses on embedding security into engineering workflows and sustaining readiness.

Responsibilities include developing cATO roadmaps, mapping controls to automated evidence, and supporting SDLC aligned to NIST SP 800-218 SSDF and EO 14028.