Quick overview
Job description
TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs.
Job DescriptionPosition Summary: TechSur is seeking a Cybersecurity / cATO Lead to support secure software development, continuous monitoring, authorization artifacts, and operationalization of Continuous Authorization to Operate for the EXIM Online modernization program. This role will help embed security and compliance into DevSecOps pipelines, engineering workflows, runtime operations, and authorization decision support.
Key Responsibilities
- Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
- Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs.
- Support secure SDLC implementation aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices.
- Support ATO documentation, SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
- Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness.
- Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.
Required Qualifications
- 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
- Export-Import Bank Cyber experience is REQUIRED.
- Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection.
- Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development.
- Ability to translate security and compliance requirements into practical engineering controls, pipeline evidence, and measurable risk reduction.
- Experience coordinating with ISSOs, security assessors, engineering teams, program managers, and Government authorization stakeholders.
- Experience supporting cATO or continuous authorization programs.
- Security+, CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification.
- Experience with federal cloud, Zero Trust, EO 14028, SSDF, software supply chain security, or automated evidence collection.
Additional Information
All your information will be kept confidential according to EEO guidelines.
Similar jobs
- NO

Optical Systems ArchitectRecently posted Auto Apply
Nokia · San Jose · Hybrid 🇺🇸
FiberSystem DesignTechnologySalary not listed - NO

Technical Support EngineerRecently posted Auto Apply
Nokia · Dallas · Hybrid 🇺🇸
Diversity & InclusionTechnical SupportSalesforce+1TechnologySalary not listed - NO

Defense Software Test & AI Co-OpRecently posted Auto Apply
Nokia · Dallas · On-site 🇺🇸
DockerC++Java+4TechnologySalary not listed - EM

RF Hardware Engineer 2Recently posted Auto Apply
Emerson · Austin · Hybrid 🇺🇸
OnboardingComplianceAltium+4TechnologySalary not listed - EM

Software Engineering Intern Auto Apply
Emerson · Austin · Hybrid 🇺🇸
DockerGitAWS+13TechnologySalary not listed - WS

Data Center Electrical Engineer, Senior ConsultantRecently posted Auto Apply
WSP · Houston · Hybrid 🇺🇸
AutoCADElectrical DesignRevitTechnologySalary not listed - WS

Environmental Data Analytics SpecialistRecently posted Auto Apply
WSP · Redmond · Hybrid 🇺🇸
Microsoft ExcelMicrosoft OfficeMicrosoft PowerPoint+4TechnologySalary not listed - ST

Cyber Security ConsultantRecently posted Auto Apply
Stantec · Denver · Hybrid 🇺🇸
RubySQLCompliance+8TechnologySalary not listed - AU
CMMS Operations Coordinator - Data CenterRecently posted Auto Apply
ABM US · Whitney · Hybrid 🇺🇸
Microsoft ExcelMicrosoft OfficeMicrosoft PowerPoint+3TechnologySalary not listed - SA
Network EngineerRecently posted Auto Apply
SAIC · Springfield · On-site 🇺🇸
FiberEncryptionCapacity Planning+4TechnologySalary not listed - SA
Azure Cloud EngineerRecently posted Auto Apply
SAIC · Washington · Hybrid 🇺🇸
DockerGitScrum+11TechnologySalary not listed - SA
Service Desk AgentRecently posted Auto Apply
SAIC · Flexwork · Remote 🇺🇸
TechnologySalary not listed
