• Oversee AI platforms across development, testing, and production environments • Implement best practices for AI lifecycle management (MLOps) including deployment, monitoring, and retirement • Review AI applications for compliance with organizational policies and ethical AI principles • Conduct risk assessments and define mitigation strategies for AI/ML systems • Establish and maintain data lineage tracking for AI models • Design and implement automated workflows using Microsoft Purview DSPM and Azure tools • Monitor and optimize Azure security services (Defender for Cloud, Sentinel, Key Vault)

• Collaborating with cross-disciplinary teams to understand customer use cases and tuning solutions to meet client needs • Partnering with sales teams internally to fully understand customer business needs in order to ensure their success • Participating on internal projects to contribute to best practices, improving our methodology and quality of solution delivery • Participating in training and projects contributing to best practices, maximizing efficiency, and improving methodology and service quality

Role Description We are hiring an Information System Security Engineer (ISSE) to serve as the technical implementer of cybersecurity within our platform. This is not a policy or compliance role. You will take security requirements (RMF, NIST, customer constraints) and directly apply them to system architecture, infrastructure, and the software development lifecycle. - Implement NIST 800-53 / 800-171 security controls directly into system design and platform architecture - Lead system hardening and secure configuration across platform components - Embed security into the engineering workflow (DevSecOps) - Perform: - System Patching - STIG implementation and validation - Vulnerability scanning (ACAS/Nessus) - POA&M management and remediation tracking - Partner with engineering teams to: - Secure APIs, services, and data pipelines - Enforce least privilege, identity, and access controls - Support deployment into SIPR / JWICS / SAP environments - Identify and remediate security gaps before they reach customer environments Qualifications - Active TS clearance with SCI eligibility - DoD 8570/8140 certification (Security+ minimum; CISSP/CASP+/CISM preferred) - 5+ years in cybersecurity with hands-on implementation experience - Direct experience with: - NIST 800-53 / 800-171 - DISA STIGs - ACAS/Nessus - Background in: - Systems Administration, Network Engineering, or SOC → transitioned into security - Experience working in classified environments (SIPR, JWICS, SAP) Requirements - You’ve actually hardened systems—not just documented controls - You can move between: - Low-level system configuration - High-level security architecture decisions - You are comfortable doing manual, in-the-weeds work when needed to hit deadlines - Track record of stability (2+ years per role preferred) - Comfortable in a startup environment - Willing to own problems end-to-end, not just your lane Benefits - $116,000 - $174,000 a year (may be additionally eligible for stipend, one-time incentive, or % differential for clearance)

• Owns and manages the organization’s enterprise certification frameworks, ensuring ongoing readiness, audit success, and contractual alignment for ISO, CMMI, and CMMC requirements • Own and manage compliance with ISO standards (e.g., ISO 9001, ISO 27001), CMMI maturity levels, and CMMC / NIST SP 800-171 requirements • Act as the primary coordinator for certification audits, surveillance reviews, appraisals, and assessments • Develop and maintain policies and procedures supporting certification frameworks • Track certification timelines, renewals, and readiness milestones • Work with IT and security teams, HR and training, contracts and compliance, program management • Support proposal teams by validating and documenting certification compliance • Advise leadership on certification-related risks, costs, and contractual impacts