Cybersecurity Integration Lead - EXIM
Core
Lead cybersecurity integration and continuous authorization (cATO) for the EXIM Online modernization program, embedding security controls into DevSecOps pipelines and supporting federal authorization stakeholders.
Role type
Senior IC cybersecurity integration lead (cATO)
Builds
Continuous authorization roadmaps, control mappings, security evidence packages, and secure SDLC implementations for federal cloud systems.
Domain
Federal government cybersecurity / compliance / risk management
Required skills
NIST SP 800-53, Risk Management Framework (RMF), ATO/POA&M management, continuous monitoring, SSP/SAR documentation, security evidence collection, DevSecOps, CI/CD security gates, SBOMs, vulnerability scanning, cloud security, secure software development, Zero Trust, EO 14028, SSDF, software supply chain security, automated evidence collection
Preferred skills
cATO program support, ISSO coordination, engineering team collaboration, program manager liaison, government authorization stakeholder management
Technologies
AWS, CI/CD, Cloud, DevSecOps
Responsibilities
Develop and maintain cATO roadmaps, control mappings, system boundary documentation, governance roles, authorization artifacts, and security evidence packages. Map NIST SP 800-53 Rev. 5 controls to automated technical controls, pipeline evidence, runtime telemetry, and continuous monitoring outputs. Support secure SDLC implementation aligned with NIST SP 800-218 SSDF, EO 14028, Zero Trust, SBOM requirements, software supply chain security, and secure-by-design practices. Support ATO documentation, including SSPs, SARs, POA&Ms, SBOM updates, security assessment responses, risk posture summaries, and briefings for Authorizing Officials. Coordinate with EXIM cybersecurity stakeholders, ISSOs, engineering, DevSecOps, O&M, and program leadership to maintain continuous authorization readiness. Help implement continuous monitoring dashboards, vulnerability remediation workflows, evidence repositories, and release-aligned auditability.