Cybersecurity Integration Lead

Tech Sur Solutions is hiring a Cybersecurity / cATO Lead for the EXIM Online modernization program in Washington, DC (onsite) to operationalize Continuous Authorization to Operate and embed security into engineering workflows.

• Develop and maintain cATO roadmap materials, including control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
• Map NIST SP 800-53 Rev. 5 controls to automated technical controls,
  pipeline evidence
  , runtime telemetry, and outputs from continuous monitoring.
• Support implementation of secure SDLC aligned to NIST SP 800-218 SSDF
  , EO 14028
  , Zero Trust
  , SBOM requirements, software supply chain security, and secure-by-design practices.
• Assist with ATO deliverables and updates, including SSP
  , SAR
  , POA&M,
  SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
• Coordinate with EXIM cybersecurity stakeholders,
  ISSO
  , engineering,
  Dev Sec Ops , O&M, and program leadership to sustain continuous authorization readiness.
• Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.

• 5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
• Export-Import Bank Cyber experience is required
  .
• Experience with NIST 800-53
  , RMF
  , ATO
  , POA&M management,
  continuous monitoring
  , SSP/SAR documentation, and security evidence collection.
• Familiarity with Dev Sec Ops ,
  CI/CD security gates
  , SBOMs
  , vulnerability scanning, cloud security, and secure software development.
• Ability to translate security and compliance requirements into practical engineering controls, measurable risk reduction, and pipeline evidence.
• Experience coordinating with ISSO and security assessors, engineering teams, program managers, and Government authorization stakeholders.
• Experience supporting cATO or continuous authorization programs.
• Security+ , CISSP, CISM, CAP, CGRC, AWS Security Specialty, or equivalent certification.
• Experience with federal cloud,
  Zero Trust
  , EO 14028
  , SSDF
  , software supply chain security, or automated evidence collection.

• NIST SP 800-53 Rev. 5
• NIST SP 800-218 SSDF
• EO 14028
• Zero Trust
• SBOM
• RMF
• Dev Sec Ops
• CI/CD and CI/CD security gates
• Continuous monitoring
• SSP, SAR, POA&M
• AWS Security Specialty

Location: Washington, DC (onsite)

Salary: USD 165, per year