Senior Security Risk Management Engineer

Tharros; Washington (District of Columbia); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Referral bonuses

Education reimbursement up to $5,250/​

Descripción de la vacante

Tharros, based in Washington, DC, is seeking a Senior Security Risk Management Engineer to support a DHS cybersecurity program in the National Capital Region. You will organize enterprise risk management, A&A activities, continuous monitoring, FISMA compliance, and secure cloud/hybrid engineering to drive risk-informed remediation.

The candidate translates security, compliance, and technical data into clear risk insights for leadership, collaborates with system owners, ISSOs, and engineers to

Formación

• 10+ years in cybersecurity risk management.
• Experience in A&A, FISMA, RMF and continuous monitoring.
• Strong communication of risk to leadership.

Responsabilidades

• Support enterprise cybersecurity risk management for DHS program.
• Lead or support A&A activities for Federal information systems.
• Review security artifacts and POA&Ms and provide remediation guidance.
• Translate data into leadership-ready risk insights and dashboards.

Conocimientos

Risk management

A&A

FISMA

RMF

NIST SP 800

Security policy

Communication

Cloud security

Educación

CISM/CAP/GRC certification

Herramientas

AWS

Azure

GCPS RMF tooling

Descripción del empleo

Tharros is looking for courageous team members that enable government missions to move forward with confidence.

Who We Are

At Tharros, expertise, confidence and continuous advancement are at the foundation of what we do. With us, you work with the world’s preeminent vulnerability experts to not only advance government missions, but also your own career path. We’re looking for confident leaders to grow and evolve as we do, protecting our nation’s protectors with cutting‑edge cybersecurity tools.

Seeing everything includes seeing everyone. Tharros moves missions forward with a courageous team of experts and a variety of perspectives.

Outperform

Lead with Growth

Dare to Secure

At Tharros, we have exceptional benefits because our employees’ success is our success. We support our team members’ growth with training opportunities, tools and resources.

Outperform the Expected

Tharros sets high standards because we know our team can meet and exceed them. We anticipate success, expect exceptional results and ensure impact for everyone.

Lead with Continuous Growth

When our employees grow, everyone thrives. As the leaders in vulnerability research, we grow capability for our clients and our employees.

Dare to Secure Anything

At the cutting‑edge of cybersecurity technology, Tharros dares to create tools that will have maximum mission impact. Our company culture reflects this confidence.

Benefits of Working with Tharros

Moving boldly forward requires a strong foundation. Tharros provides foundational benefits that help our employees grow and thrive.

To be the best, you join the best. Tharros offers competitive compensation and comprehensive benefits including medical, dental, vision and disability coverage, savings & retirement and paid leave.

At Tharros, leaders develop leaders. Working at Tharros gives our employees access to resources and expertise found nowhere else, and we nurture the future leaders in cybersecurity from within our ranks.

We’re not afraid to show our commitment to growing our Tharros team. We offer generous referral bonuses to employees who help us reach hiring goals.

Training & Certification Reimbursement

Tharros is always advancing. We offer an education reimbursement benefit of up to $5,250 per year to help our employees thrive.

Breaking Barriers to Cybersecurity Success

Our people‑first culture enables more flexibility for our employees to find success in cyber fields. At Tharros, there are no barriers between you, the world’s leading cybersecurity experts, and our customers.

Senior Security Risk Management Engineer

Tharros is seeking a Senior Security Risk Management Engineer to support a DHS cybersecurity program in the National Capital Region. This role will support enterprise cybersecurity risk management, Assessment and Authorization, continuous monitoring, FISMA compliance, secure cloud and hybrid engineering, and risk‑based decision support across a complex mission environment. The ideal candidate can help translate security data, authorization evidence, vulnerabilities, POA&M status, and compliance requirements into clear risk insights and actionable remediation priorities.

Responsibilities:

• Support enterprise cybersecurity risk management across classified and unclassified mission environments.
• Lead or support Assessment and Authorization activities for Federal information systems.
• Support security control assessments aligned to NIST, CNSSI, Intelligence Community, and Federal cybersecurity requirements.
• Review and validate security artifacts, including System Security Plans, Security Assessment Plans, Security Assessment Reports, POA&Ms, and authorization evidence.
• Support POA&M development, validation, remediation tracking, closure, and reporting.
• Collaborate with system owners, ISSOs, developers, engineers, assessors, and other stakeholders to address findings and strengthen security posture.
• Provide risk mitigation recommendations for assigned systems, networks, applications, and environments.
• Support continuous monitoring activities that maintain system security posture over time.
• Help improve and automate A&A, continuous monitoring, evidence management, and risk reporting processes.
• Support quality reviews and process improvements for authorization documentation and security control implementation.
• Translate complex security, compliance, and technical data into leadership‑ready risk insights, dashboards, briefings, and remediation recommendations.
• Support risk management activities across cloud, hybrid, cross‑domain, and secure mission environments.

Requirements:

• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• 10+ years of related cybersecurity risk management experience.
• At least 2 years of recent experience in each of the following areas: A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
• Experience with emerging and evolving security risk management practices, including automation of A&A and continuous monitoring activities.
• Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
• CISM, CAP, or GRC certification, or comparable demonstrable experience.
• Experience developing, reviewing, or supporting authorization artifacts such as SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation evidence, and continuous monitoring reports.
• Strong written and verbal communication skills, including the ability to explain risk, compliance status, and remediation needs clearly.
• Ability to work onsite at a Government‑approved location as required.

Preferred Qualifications:

• Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security cybersecurity risk management experience.
• Experience with enterprise RMF/A&A portfolios, ConMon automation, ATO/ATC readiness, POA&M quality, risk dashboards, GRC workflows, and evidence automation.
• Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
• Experience supporting classified, hybrid cloud, cross‑domain, TS/SCI, or secure mission environments.
• Experience turning vulnerability, threat, audit, compliance, system criticality, and continuous monitoring data into decision‑ready risk insights.

Equal Opportunity Employment

Tharros is committed to implementing employment programs and policies dedicated to equal employment opportunity and nondiscrimination. Learn more today.

Be Bold with Tharros

Want to learn more about what it means to work with the world’s preeminent cyber vulnerability experts? Contact us to learn more about who we are and how you can join us.