Perform and lead penetration tests to assess the security of customer systems while identifying vulnerabilities and recommending remediations. Maintain Red Cell infrastructure and develop or modify tools to automate discovery and exploitation processes.
Support authorized red-team and penetration-testing engagements across FSA systems, applications, networks, APIs, and cloud environments, including vulnerability validation, exploitation, and attack-path analysis. Document evidence and actionable findings, apply MITRE ATT&CK to categorize adversary techniques, recommend remediation, and retest vulnerabilities after fixes.
The Cybersecurity Lead provides senior technical and operational leadership for cybersecurity activities supporting Institutions of Higher Education handling Federal Student Aid data. Responsibilities include coordinating breach response, compliance oversight, risk management, and education-sector outreach.
The Development and Automation Lead provides technical leadership for the design, development, and sustainment of secure software and automated solutions supporting Federal Student Aid. This role drives the implementation of DevSecOps, CI/CD pipelines, and automated testing while coordinating multidisciplinary technical teams and government stakeholders.
The AWS Assessor will conduct cloud security assessments to identify vulnerabilities and risks while ensuring compliance with FedRAMP and other federal standards. They will also prepare security compliance reports and review system artifacts to support authorization to operate requests.
The Security Control Assessor will conduct comprehensive assessments of security controls to ensure compliance with federal regulations and system requirements. They are responsible for developing test plans, analyzing vulnerabilities, and preparing detailed reports to support system authorization and remediation efforts.
The Security Control Assessor will support Security Authorization and Ongoing Security Authorization activities in accordance with the Risk Management Framework. Responsibilities include reviewing security documentation, maintaining ATO packages, and coordinating with stakeholders to ensure compliance and timely renewals.
The engineer will design, develop, and maintain RESTful APIs, interfaces, and data integration services to support secure data exchange and automation. They will collaborate with security and data teams to implement schemas, authentication, and automated testing for enterprise-wide systems.
The engineer will design and implement automation to streamline authorization workflows, evidence collection, and reporting for federal customers. They will collaborate with stakeholders to integrate security scanning and compliance data while maintaining traceability and decision-support capabilities.
Analyze business processes and user requirements to identify and implement workflow automation opportunities. Develop and integrate automated solutions including scripts, services, and forms to replace manual activities and improve operational efficiency.
The Security Control Assessor will provide subject matter expertise for the Information System Security and Authorization program, including reviewing ATO packages and continuous monitoring capabilities. They will also conduct audits, manage security artifacts, and coordinate data collection efforts to ensure compliance with federal standards.
The Development Lead will engineer CI/CD workflows and implement pipeline-as-code using AWS and Atlassian tools. They will also provide technical guidance to stakeholders while ensuring compliance with federal security standards like NIST and STIGs.
Engineer and maintain secure CI/CD workflows, reusable pipeline automation, infrastructure-as-code, cloud deployment patterns, and integrated testing across the customer’s Atlassian, GitLab, and AWS environments. Maintain platform documentation and standards, support security and compliance requirements, and provide troubleshooting and technical guidance to development teams and Government stakeholders.
