Senior Cloud Security & ATO Lead (GRC)

TechSur Solutions, LLC; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

TechSur Solutions is seeking a Senior Security Specialist to lead ATO work for a federal cloud project, applying RMF, NIST SP 800-37/53, and FedRAMP requirements across AWS, Azure, GCP, and Oracle Cloud.

You will develop SSPs, coordinate 3PAO assessments, manage POA&Ms, and oversee continuous monitoring while briefing senior government stakeholders on security posture and risk posture monthly.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.
• 9+ years of information security experience including implementing and managing security controls and leading ATO efforts.
• Deep working knowledge of NIST RMF (SP 800-37) and NIST SP 800-53 Rev 5 control families.
• Hands-on experience writing SSPs and managing SAP/SAR/POA&M with 3PAO or agency assessor.
• Experience performing continuous security assessments and monitoring in cloud environments.
• Strong technical writing skills and ability to brief senior government stakeholders.
• Ability to obtain and maintain the background investigation required by a federal customer.

Responsibilities

• Lead ATO preparation for cloud services under RMF, NIST 800-37, Rev 5, and FedRAMP.
• Develop and maintain SSPs, control statements, customer matrices, and CSP inheritance docs.
• Coordinate with 3PAO: support SAP/SAR, gather evidence, interviews, respond to findings.
• Manage POA&Ms: track gaps, owners, remediation dates in ServiceNow.
• Run continuous monitoring with CSP tools and produce monthly compliance reports.
• Prioritize vulnerabilities using CVSS, exploitability, and risk ratings.
• Review architectures, IaC, CI/CD pipelines for Zero Trust alignment with NIST 800-207.
• Help develop incident response playbooks mapped to MITRE ATT&CK.
• Brief customer security leadership and present security posture at monthly reviews.

Skills

GRC

RMF

NIST RMF knowledge

Cloud security

Federal compliance

Stakeholder briefing

Education

Bachelor's degree in Cybersecurity/IT/CS or related field

Tools

AWS Security Hub

Microsoft Defender for Cloud

GCP Security Command Center

OCI Cloud Guard

Prisma Cloud

Job description

TechSur Solutions is seeking a Senior Security Specialist to lead ATO work for a federal cloud project, applying RMF, NIST SP 800-37/53, and FedRAMP requirements across AWS, Azure, GCP, and Oracle Cloud.

You will develop SSPs, coordinate 3PAO assessments, manage POA&Ms, and oversee continuous monitoring while briefing senior government stakeholders on security posture and risk posture monthly.