We believe in the evolution of knowledge and the progression of people - it is so core to our business, it's the meaning of our name: EVO - to evolve, ONA - people. 

EVONA Group brings together pioneering talent solutions for today’s most ambitious companies, with a suite of services designed to meet the unique demands of space, defense, and deep tech.
 
FRACTION - www.evonafraction.com - connects VCs, PEs, and founders with fractional executives, bringing high-impact expertise exactly when it’s needed. 

GRAM PARTNERS - www.grampartners.com -  is our white-glove executive search and consulting service, led by former SpaceX and Apple executives, delivering unmatched precision in high-level talent acquisition. 

EVONA - www.evona.com -  is the original, award-winning subscription and direct hire service for VP, director, management, and individual contributor roles, trusted by top companies for a seamless recruitment experience.
 
Our platforms empower you to source talent independently or access curated executive search expertise – and we’ve built a following you can leverage to drive your mission forward.

Call on: +1 202-381-9944 (US) or +44117 2034444 (UK)

Industry: Staffing and Recruiting
Company Size: 51-200 employees

EVONA

Savvy Admin PROD

**Senior Cloud Security Engineer (AWS & Compliance)**

**Location: ** United States (Mid-Atlantic preferred)

**Employment Type: ** Full-Time

**About The Role**

We’re hiring a **Senior Cloud Security Engineer ** to help secure and scale a highly distributed, cloud-native platform operating in a **mission-critical and regulated environment **. This role blends **hands-on AWS security engineering ** with **governance, compliance, and secure architecture design **.

You’ll work closely with platform, DevOps, and engineering teams to implement **secure-by-design practices **, strengthen cloud security posture, and ensure systems meet rigorous compliance standards.

**Key Responsibilities**

- Design and enhance AWS cloud security architecture, with a focus on IAM, least privilege, and secrets management

- Implement and enforce network security controls (VPC segmentation, security groups, NACLs, private connectivity)

- Partner with DevOps and engineering teams to secure Infrastructure-as-Code (Terraform) and CI/CD pipelines

- Define and maintain security standards, policies, and control frameworks (e.g., NIST, SOC2)

- Build and streamline audit readiness and evidence collection processes

- Configure and optimize logging, monitoring, and alerting for detection and response

- Conduct threat modeling, risk assessments, and security reviews

- Support and improve incident response processes and playbooks

- Document security architectures, patterns, and exceptions

**Required Experience**

- 7+ years in cybersecurity, cloud security, or platform security engineering

- Strong hands-on experience securing AWS environments

- Deep knowledge of:

- IAM and identity security

- VPC/network security architecture

- Logging, monitoring, and incident response

- Experience with Infrastructure-as-Code (e.g., Terraform)

- Scripting or programming experience (Python, Go, or Bash)

**Preferred Experience**

- Experience in regulated or compliance-driven environments

- Familiarity with frameworks such as NIST or SOC2

- Experience implementing policy-as-code and security guardrails

- Background in high-reliability or safety-critical industries (e.g., aerospace, defense, robotics, industrial systems)

- Exposure to cloud-native logging and detection systems

- Relevant certifications (e.g., AWS Security Specialty, CISSP)

**Technology Environment**

- AWS (core cloud platform)

- Terraform, CI/CD pipelines

- Python / Go / Bash

- Docker & cloud-native infrastructure

- Centralized logging platforms (e.g., ELK stack)

**What We’re Looking For**

- Strong collaboration skills across engineering and security teams

- Ability to balance security rigor with delivery speed

- A risk-based mindset with strong analytical skills

- Clear communicator with experience documenting technical decisions

Cyber Security Engineer

Haystack combines AI & expert vetting to deliver world-class tech candidates who are engaged, aligned, and ready to interview.

We're trusted by over 100,000+ UK-based techies, working in Software Engineering, Data, Design, DevOps, Cloud, Tech Management, Testing, Product & Delivery, Architecture and more. 

100s of employers from startups and scale-ups like Atom Bank, DuckDuckGo and Goodlord to established enterprises like American Express, Dunelm and AWS use Haystack to connect with qualified tech talent that they can't find anywhere else.

Industry: Technology, Information and Internet
Company Size: 51-200 employees

Haystack

Junior Cybersecurity Engineer | Hybrid

We're hiring for a leading professional services firm that provides critical support to government defense and intelligence agencies. This is an opportunity to apply cybersecurity expertise to enhance the security of warfighter communications and protect against advanced cyber threats, joining a dedicated team focused on innovation and making a significant impact on national security.

The Role

• Collaborate with operational teams to address evolving security requirements.

• Recommend and implement new security policies to harden systems.

• Review metrics to assess policy effectiveness and resolve complex tickets.

• Test and integrate new email security components and solutions.

• Investigate new techniques and explore industry best practices for network design and customization.

• Contribute to the integration of secure practices like zero-day threat detection and anti-spoofing protocols.

What You'll Need

• Solid understanding of networking and cybersecurity concepts.

• Ability to obtain a Secret clearance.

• Bachelor's degree.

• Ability to obtain a DoD 8140 IAT Level II Certification within 6 months of start date.

• Experience with email security appliances, Microsoft Azure environments, or F5 load balancers is a plus.

• Knowledge of email network protocols (SMTP, DNS) and secure email protocols (TLS, SPF, DKIM, DMARC).

What's On Offer

• Opportunity to work on critical national security projects.

• Professional development and continuous learning opportunities.

• Hybrid work model supporting work-life balance.

• Comprehensive benefits package including health, retirement, and paid leave.

Apply via Haystack today!

Junior Cybersecurity Engineer

**Cybersecurity Engineer | Hybrid | $193,000 - $213,000 **

We're hiring for a dynamic organization committed to transforming government IT through innovative solutions and a people-first culture. This employer is making a positive impact by modernizing how government agencies operate and serve citizens.

**The Role **

• Embed security-by-design principles into system architecture, cloud infrastructure, and software configuration.

• Define cybersecurity controls and secure configuration requirements for new developments.

• Support Risk Management Framework (RMF) and authorization planning activities.

• Address access controls, data protection, and segmentation to reduce authorization risks.

• Ensure secure handling of autonomous assessment data and alignment with DoD cybersecurity requirements.

• Contribute to the responsible deployment of autonomous pentesting capabilities.

**What You'll Need **

• High School diploma with 10+ years of commensurate experience.

• Active TS/SCI CI Poly clearance.

• 10+ years of experience with DoD cybersecurity frameworks and RMF.

• Background in cloud and data security.

• Experience conducting penetration testing, risk assessments, and vulnerability scans.

• DoD 8570.01-M IAT Level II certification (e.g., Sec+CE, SSCP, CND, CCNA Security).

**What's On Offer **

• A flexible work environment to support personal and professional well-being.

• Access to a Learning & Development platform with certification preparation content.

• Opportunities for training, education, and certification assistance.

• A collaborative team environment focused on meaningful work.

Apply via Haystack today!

In more than 100 years of practice, Steptoe* has earned an international reputation for vigorous representation of clients before governmental agencies, successful advocacy in litigation and arbitration, and creative and practical advice in structuring business transactions. Steptoe has more than 500 lawyers and other professional staff across offices in Beijing, Brussels, Chicago, Hong Kong, Houston, London, Los Angeles, New York, San Francisco, and Washington. For more information, visit www.steptoe.com. (*Steptoe LLP, Steptoe International (UK) LLP, and affiliated entities.)

Content may include attorney advertising.

Industry: Law Practice
Company Size: 1,001-5,000 employees

Steptoe LLP

Steptoe LLP, a Washington, DC-based Am Law 100 law firm, is seeking a Security Engineer to manage the firm’s security systems as well as collaborating in the design, implementation, and support of secure system architectures in a large ever-changing environment. Monitor, analyze, and optimize security alerts and events for all enterprise security infrastructure technologies. Act as a focal point of the firm’s Computer Security Incident Response Team (CSIRT) process. Position is both technical and non-technical and requires working across multiple information security domains.

The position is both technical and non-technical and requires working across multiple information security domains.

**Essential Functions**

- Support CISO in response to security reviews and questionnaires from clients and third parties.

- Responsible for providing tier II and III support on security requests (e.g. privi-leged access, website reviews & approvals, etc.) and products including NG-SEIM, firewalls, VPNs, IDS/IPS, encryption, malware detection, anti-spam and anti-spyware security products.

- Perform analysis of events and drive problems to resolution with minimal su-pervision. Deploy host-based and network security equipment and software including, but not limited to, firewalls, intrusion detection systems, proxies, and MFA

- Participate in incident response and work with IT stakeholders to build defini-tions in response to new threats

- Act as a subject matter expert for projects by identifying risks and proposing secure solutions to ensure security & privacy by design are integrated.

- Review support tickets for trends or repetitive incidents and repair the root cause of the problem.

- Support investigation and resolution of security incidents.

- Provides security input into engineering, architectural, IT infrastructure, and application design reviews.

- Prepare and deliver reports, recommendations, and alternatives that address existing and potential trouble areas in the systems across the organization.

- Understanding of current Data Privacy (e.g., GDPR, CCPA) and regulations (i.e. HIPAA) and implementing processes and/or technology to ensure compliance and data protection against industry standards such as ISO 27001, NIST, etc.

- Support the firm’s efforts in maintaining ISO 27001 and ISO 22301 certifica-tions by working with third party auditors, gathering and providing evidence, and working to address audit findings.

- Perform network vulnerability scan for internal and external network to proac-tively identify, evaluate, and report security weaknesses.

- Conduct and participate in annual Security Tabletop Exercise

- Support the firm’s Security Awareness program.

- Participate and review bi-annual Penetration Testing.

**Non-Essential Functions**

- Additional duties as required.

**Minimum Qualification **

- Solid knowledge of Microsoft/Linux platforms.

- Bachelor’s degree in computer science/MIS/IT or equivalent certification from an accredited technical training school or equivalent (4 years) experience in general MIS/computer support.

- CISSP preferred, other IT/security certifications (i.e. GSEC, CEH, CCNA) are a plus.

- 7+ years of experience with security systems and tools design and troubleshooting.

- 5-7 years of experience in security solutions using current monitoring technologies such as: CrowdStrike, Zscaler, Proofpoint, Aruba Central.

- Must be experienced with Microsoft Based Server and Desktop Networks, Office 365, Azure AD, Security, Firewalls, Network and host-based IDS/IPS, SSO, MFA (both RSA and Azure), Web Security, Network Traffic Analysis, BGP, DNS, 802.1x, DHCP, RADIUS, TACACS, VPNs.

- Strong documentation, analytical, and presentation skills required.

**Success Factors**

- Attention to Detail: Avoid common and frequent mistakes; complete complex projects and tasks with minimal to no error.

- Innovative: Identify ways to create and design new solutions to help solve complex problems and drive innovation across the IT department on existing solutions.

- Initiative & Creativity: Identify areas for improvement within personal areas of responsibility, group, department and firm; develop unique and new approaches to address existing challenges and/or positively affect lawyer productivity, client service, and overall fiscal health of the firm

- Critical Thinking & Problem Solving: Recognize problems or situations that are new or without clear precedent; evaluate alternatives and find solutions using a systematic, multi-step approach; develop improvements and innovations to enhance performance.

- Communication: Convey goals and objectives clearly and in a compelling manner; listen effectively and clarify information as needed; ensure that project status, issues and successes are communicated to project team, stakeholders, sponsors, steering committee and all levels of management and documented appropriately; ensure open communications within project team.

- Responsibility & Accountability: Prioritize work; anticipate consequences of actions, potential problems, or opportunities for change; sets and meets realistic deadlines.

- Exceptional Interpersonal Skills: Interact professionally with partners and staff at all levels of the organization, clients, and other third parties.

**Work Environment **

- Must be able to comply with all safety requirements in our workplace which may include provision of proof of full vaccination for COVID-19 and adherence to other safety.

- Non-Smoking Environment.

- Position may be hybrid or fully remote; required to be in primary office if/as needed.

- Available to work from 9:00 – 5:30pm Monday through Friday.

- Must be available to work extended hours and weekends as required.

- Must be able to work under tight deadlines and stressful situations

- Must be willing to travel as required.

~~The anticipated base salary range for this position is $120,000 - $130,000. The actual base salary offered will be dependent upon the applicant’s experience and qualifications, as well as other job-related factors, including but not limited to, relevant skills, education, certifications or other professional licenses held, and if applicable, geographic location.~~

~~Steptoe offers a full range of benefits for you and your eligible dependents. Benefits currently include: medical, dental, vision, life, disability, dependent care, health care flexible spending accounts, 401K Plan, Profit-Sharing, Paid Time-Off and a robust Wellness Program.~~

~~Steptoe LLP is an equal opportunity employer EOE/Disability/Veteran. All qualified applicants will receive consideration without regard to race, color, religion, gender, national origin, sexual orientation, gender identity and expression, marital status, mental or physical disability, genetic information, or any basis proscribed by applicable statutes. ~~

Security Engineer

Security Engineer | Hybrid | $77,600.00 - $176,000.00

We're hiring on behalf of a Haystack partner!

The Role

• Advise clients on building reliable networks aligned with strategic goals and operational needs.

• Lead the planning, acquisition, installation, configuration, and maintenance of network and security components.

• Resolve interoperability issues and support the acquisition of necessary hardware and software.

• Troubleshoot connectivity and policy issues using packet captures, traffic logs, and CLI tooling.

• Mentor junior engineers and take ownership of project workstreams.

• Participate in on-call rotations and triage network security events under pressure.

What You'll Need

• 6+ years of experience configuring, managing, and troubleshooting Next-Generation Firewalls (NGFW).

• Experience deploying and operating SASE solutions, including SD-WAN integration and remote access.

• Experience managing multi-device firewall environments via centralized management systems.

• Knowledge of cloud networking and deploying cloud firewalls.

• Understanding of routing protocols (BGP, OSPF) and VPN technologies (IPsec/SSL).

What's On Offer

• Competitive salary range and comprehensive benefits package.

• Opportunities for professional development, including tuition assistance.

• A collaborative work environment with a focus on supporting employee well-being.

• Chance to contribute to significant missions and protect critical infrastructure.

Apply via Haystack today!

Foxhole Technology is a thought-leading technology firm offering a robust suite of cybersecurity, software development, systems engineering, and test & evaluation solutions for the Defense and Federal Civilian markets. A Service-Disabled Veteran Owner Small Business (SDVOSB) founded in 2007, Foxhole helps agencies navigate technology and security challenges, delivering mission-focused innovations that answer evolving and complex needs. Our core capabilities consist of Full-Scope Cyber Services, Cloud and System Modernization, Application Development (Agile / DevSecOps), and Innovation as a Service. Foxhole’s talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise – across the organization and around the world.

Industry: Information Technology & Services
Company Size: 51-200 employees

Foxhole Technology

**Title Quality Assurance Engineer and Tester (Journeyman)**

**Location Arlington, VA (Hybrid)**

**Clearance Secret**

**Start Upon Contract Award**

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise - across the organization and around the world.

Foxhole is seeking a Quality Assurance Engineer and Tester (Journeyman) to support DoD modernization program. This position focuses on using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security engineering activities are maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.

- Conduct Section 508 / WCAG 2.x level accessibility compliance testing using approved technologies for all user-facing components and portals

- As part of the Agile sprint process, perform accessibility validation against user interface changes introduced by development and testing group

- Perform checkpoint reviews at each milestone and release gates, validating usability, navigation, and that content meets compliance requirements

- Conduct peer reviews, quality audits, and deliverable inspections to validate compliance with contract standards and internal policies

- Support the monitoring of continuous improvement plans

- Collaborate with technical teams to define and maintain quality metrics, including defect rates, rework trends, and process performance indicators

- Review deliverables prior to submission, ensuring completeness, accuracy, and alignment with program objectives and formatting requirements

- Support risk-based process assessments to enhance efficiency and standardization across all task areas

- Triage test failures and security findings, distinguishing defects from false positives, tracking remediations, and ensuring pass rates meet performance targets

- At least 3+ years of experience in quality management, quality assurance, or process improvement on large-scale federal or defense programs

- Experience utilizing compliance scanning technologies

- Requirements knowledge related to Quality Management Plans (QMP) and Continuous Improvement frameworks.

- Familiarity with CMMI, ISO 9001, and ITIL quality standards

- Experience conducting peer reviews, audit readiness activities, and deliverable compliance checks

- Active DoD Secret Clearance

- Continental travel may be required

- Bachelor’s (BS) degree in relevant field - strongly preferred but not required

Requirements of position Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.

Quality Assurance Engineer and Tester (Journeyman)

**Title Senior Quality Assurance Engineer and Tester**

**Location Arlington, VA (Hybrid)**

**Clearance Secret**

**Start Upon Contract Award**

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise - across the organization and around the world.

Foxhole is seeking a Senior Quality Assurance Engineer and Tester to support DoD modernization program. This position focuses on using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security engineering activities are maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.

- Implement and maintain the Quality Management Plan, aligning program processes with ISO 9001, CMMI, and DoD quality frameworks

- Conduct peer reviews, quality audits, and deliverable inspections to validate compliance with contract standards and internal policies

- Develop and monitor continuous improvement plans to identify process enhancements, performance gaps, and best practices

- Collaborate with technical teams to define and maintain quality metrics, including defect rates, rework trends, and process performance indicators

- Lead internal Quality Review Boards and provide status updates to program leadership and customer stakeholders

- Review deliverables prior to submission, ensuring completeness, accuracy, and alignment with program objectives and formatting requirements

- Support risk-based process assessments to enhance efficiency and standardization across all task areas

- Execute functional, integration, regression, and UAT for application components, aligned to program two-week sprint cycles.

- Manage and operate automated testing within CI/CD pipeline, including scanning integration, to enforce quality and security gate controls throughout build cycles

- Triage test failures and security findings, distinguishing defects from false positives, tracking remediations, and ensuring pass rates meet performance targets

- Support the program’s dedication to 508-focused commitment and ensuring components meet accessibility standards

- At least 7+ years of experience in quality management, quality assurance, or process improvement on large-scale federal or defense programs

- Demonstrated experience with Quality Management Plans (QMP) and Continuous Improvement) frameworks.

- Familiarity with CMMI, ISO 9001, and ITIL quality standards

- Experience conducting peer reviews, audit readiness activities, and deliverable compliance checks

- Active DoD Secret Clearance

- Continental travel may be required

- Bachelor’s (BS) degree in relevant field - strongly preferred but not required

Requirements of position Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.

Senior Software Quality Assurance Engineer and Tester

Welcome to DataAnnotation! We pay smart folks to train AI. We offer a remote, flexible work model- you choose your own hours and get to work when you want, whenever you want. Apply now through our open Job Listings.

Industry: Software Development
Company Size: 5,001-10,000 employees

DataAnnotation

**Join the DataAnnotation team ** and contribute to developing cutting-edge AI systems, while enjoying the flexibility of remote work and setting your own schedule.

We are looking for experienced **cybersecurity professionals ** to help advance AI development. Cybersecurity platforms are increasingly powered by AI — but these systems still need practitioners with real-world experience to validate whether the outputs actually hold up in practice. That's where you come in.

As a member of DataAnnotation's team, you'll work closely with state-of-the-art AI models on tasks like evaluating AI-generated security content, solving technical security problems, and providing feedback that directly shapes how these systems reason about real-world threats and defenses. Some team members fit this work alongside a full-time role, while others treat it as their primary focus.

To get started, once you sign up for an account, you'll take a short assessment (this serves as our version of an interview). If you pass, you'll receive an email confirmation and paid work will become available to you through our platform.

**Benefits**

- Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.

- Flexible schedule: choose which projects you take on and when you work.

- Competitive pay: projects are paid hourly up to $60 USD/hour, with bonuses for high-quality and high-volume work.

- Impact: help shape the future of AI technologies built for cybersecurity.

**Responsibilities**

- Evaluate AI-generated cybersecurity content — including threat analysis, vulnerability assessments, and offensive security techniques — for real-world accuracy and validity.

- Design and solve security-focused technical problems used to train AI systems.

- Write clear technical explanations and security-relevant code.

- Provide feedback that directly shapes the next generation of AI security models.

**Qualifications**

- 2+ years of hands-on experience in a cybersecurity role — such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.

- Some coding experience required; comfort navigating and patching a codebase is key.

- Fluency in English (native or bilingual level) with strong writing skills.

- A bachelor's degree is preferred.

- Cybersecurity certifications are a plus (e.g., OSCP, CRTO, GREM, GCFA, CEH, and similar).

**Note: ** Payment is made via PayPal. We will never ask for any money from you. This job is only available to those in the US, Canada, UK, Ireland, Australia, and New Zealand.

#cybersecurity

**Title-Senior Information Security Analyst**

**Location Arlington, VA (Remote)**

**Clearance Secret**

**Start Upon Contract Award**

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise - across the organization and around the world.

Foxhole is seeking a Cybersecurity Team Lead (Senior Information Security Analyst). This position will manage and enforce cybersecurity posture, assessments, compliance, and monitoring activities. Using relevant experience, strong problem solving, and customer service skills to ensure the appropriate operational security posture is maintained for information system, integration points, and program by implementing and maintaining security controls in close coordination with the Government.

- Lead the design, implementation, and continuous improvement of enterprise cybersecurity frameworks across GovCloud environments, ensuring alignment with DoD security requirements

- Manage the full Risk Management Framework (RMF) lifecycle, including control selection, tailoring, inheritance, and mapping

- Architect and sustain automated compliance and continuous monitoring pipelines, enabling real-time RMF evidence generation, vulnerability scanning, AWS security, or equivalent platforms

- Maintain and govern cybersecurity architecture artifacts, including system security plans, system diagrams, and data flow mappings to support audit readiness and system authorization

- Direct vulnerability management and remediation programs, including coordination of scanning and POA&M tracking to ensure timely risk mitigation

- Ensure compliance with DISA STIGs, SRGs, and PPSM requirements through continuous validation, audits, and control assessments

- Collaborate with Authorizing Officials (AOs), Security Control Assessors (SCAs), and engineering teams to obtain and sustain Authorization to Operate (ATO)

- Lead the security integration into DevSecOps pipelines, ensuring automated security testing, compliance enforcement, and secure code deployment practices

- Oversee development and maintenance of key security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Incident Response Plans (IRPs), and Contingency Plans

- Lead incident response efforts, including detection, analysis, containment, and reporting, ensuring alignment with organizational and regulatory requirements

- Mentor and guide junior analysts, while communicating security posture, risk metrics, and compliance status effectively to senior leadership and stakeholders

- At least 7 years of experience in cybersecurity, compliance, or RMF program management

- Hands-on experience managing assessment and authorization activities within eMASS (or similar tool) and implementing RMF controls in GovCloud environment

- Strong understanding of RMF, DISA STIGs/SRGs, and Cloud Computing SRG

- Knowledge of FedRAMP, NIST SP 800-53, and CMMC frameworks

- Experience with vulnerability scanning and compliance validation technologies

- Strong understanding of cloud security (AWS, OCI, etc.)

- Ability to work independently, and part of team, in a high-intensity fast=paced environment

- Familiarity with security best practices and compliance requirements.

- Excellent troubleshooting and problem-solving skills

- Active DoD Secret Clearance

- Continental travel may be required

- Bachelor’s (BS) degree in relevant field - strongly preferred but not required

- Certifications such as CISSP, CISM, or similar cert is preferred

- Familiarity with security tools and frameworks such as ACAS, Nessus, cloud-based scanning technologies, etc.

- Experience supporting FedRAMP accreditations is a plus

- Knowledge of computer network defense process and procedures

Requirements of position Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. May be exposed to dust/dirt, humidity, and noise

Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.

Senior Information Security Analyst

Find Security Engineer jobs in Washington, DC with Savvy's AI Recruiter. Browse opportunities from top companies and get matched with roles that match your skills using our intelligent recruitment system.