5+ years of experience in cybersecurity, compliance, risk management, or federal authorization.
Mandatory experience with the Export-Import Bank Cyber.
Proficient in NIST 800-53, RMF, ATO, and POA&M management.
Familiar with DevSecOps practices, CI/CD security, and cloud security.
Ability to convert security requirements into actionable engineering controls.
Experience collaborating with ISSOs and government stakeholders.
Relevant certifications such as Security+, CISSP, or AWS Security Specialty.
Responsibilities
Develop and maintain cATO roadmap and governance documentation.
Map NIST SP 800-53 controls to automated technical controls and monitoring outputs.
Support secure SDLC implementation aligned with NIST and Zero Trust principles.
Assist in ATO documentation and security assessment responses.
Coordinate with cybersecurity stakeholders to ensure continuous authorization readiness.
Implement continuous monitoring dashboards and vulnerability remediation workflows.
Benefits
Opportunities for professional development and certifications.
Collaborative work environment with cross-functional teams.
Engagement in cutting-edge cybersecurity practices.
Impactful role in enhancing national security through secure software development.
Full Job Description
Job Description
Position Summary: TechSur is seeking a Cybersecurity / cATO Lead to support secure software development, continuous monitoring, authorization artifacts, and operationalization of Continuous Authorization to Operate for the EXIM Online modernization program. This role will help embed security and compliance into DevSecOps pipelines, engineering workflows, runtime operations, and authorization decision support.
Key Responsibilities
Develop and maintain cATO roadmap materials, control mapping, system boundary documentation, governance roles, authorization artifacts, and security evidence packages.
Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs.
Support secure SDLC implementation aligned to NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices.
Support ATO documentation, SSP, SAR, POA&M, SBOM updates, security assessment responses, risk posture summaries, and Authorizing Official decision briefings.
Coordinate with EXIM cybersecurity stakeholders, ISSO, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness.
Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.
Qualifications
Required Qualifications
5+ years of cybersecurity, compliance, risk management, or federal authorization experience.
Export-Import Bank Cyber experience is REQUIRED.
Experience with NIST 800-53, RMF, ATO, POA&M management, continuous monitoring, SSP/SAR documentation, and security evidence collection.
Familiarity with DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, and secure software development.
Ability to translate security and compliance requirements into practical engineering controls, pipeline evidence, and measurable risk reduction.
Experience coordinating with ISSOs, security assessors, engineering teams, program managers, and Government authorization stakeholders.
Experience supporting cATO or continuous authorization programs.
