Description * This position is contingent upon a future opening with Gunnison. Salary: $70,000 - $78,000/year The Technical Writer develops and maintains high-quality documentation to support cybersecurity compliance and reporting for client systems. This role ensures clarity, accuracy, and consistency across technical and non-technical audiences. Duties and responsibilities include: - Prepare, edit, and maintain security documentation including SSPs, POA&Ms, security test plans, and assessment reports. - Support version control, ensuring documentation remains accurate and up-to-date. - Translate technical risk and vulnerability findings into plain-language reports for executive stakeholders. - Develop briefing materials, audit packages, and communications for ISSO staff and Government leaders. - Ensure compliance with Department of State formatting and documentation standards. Requirements - 3+ years of technical writing experience, preferably in cybersecurity or federal IT. - Familiarity with NIST RMF, FISMA, and federal IT security documentation. - Strong ability to interpret technical material and write for diverse audiences. - Proficiency with MS Office Suite and documentation management tools. Clearance Requirement: Active Secret clearance required. The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements. Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include: - 3 weeks of Personal Leave your first year - 11 paid Holidays each year - 5 days of Flexible Time Off each year - 401(k) company match at 50% up to 10% of your salary - Medical, Dental and Vision Insurance - Life and Disability Insurance - Public Transportation Subsidies - Certifications and Training Allowance - $2,500/year! Why Join Gunnison? - Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation. - Quality is our top priority. - Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer. - There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow. - We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding. - We hire for careers at Gunnison, not to fill a position. Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time. In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Job Details Summary: The Engineer - Information Security is responsible for supporting the planning, execution, and managing of multi-faceted projects related to risk management, mitigation and response, compliance, control assurance, and user awareness for all IT systems. This key role will support, monitor, and maintain information security infrastructure to protect the company's computer systems and networks from cyber-attacks, and help execute the information security program in compliance with policy and applicable regulations. They conduct security testing on simple to intermediate assets and support design, development, implementation and troubleshooting of various information system and cybersecurity software. They gather reports, metrics, and key performance indicators to measure and validate the effectiveness of existing security controls for team review. They analyze and report known and emerging threats to determine risks against asset creation, maintenance, and governance. Primary Responsibilities: - Supports information security infrastructure to protect the company's computer systems and networks from cyber-attack and ensures information security compliances to all infrastructure - Provides support to security incidents and assists in forensics investigations - Assists in security assessments and attestations and works on security initiatives/issues for like identity management, access control, security clearance etc. - Provides assistance to ensure the company's infrastructure and information assets are protected and helps in developing security policies and procedures such as user log-on and authentication rules, security breach escalation procedures, security assessment procedures, and use of firewalls and encryption routines - Assist teams in resolving issues that are uncovered by security monitoring tools - Assists in the implementation of enterprise-wide security policies, procedures and standards to meet compliance responsibilities - Supports in creating technical/functional design documents, in building, maintaining, and implementing cybersecurity, data security, and cloud security solutions - Participates in gathering reports, metrics, and key performance indicators to measure and validate the effectiveness of existing security controls for team review - Conducts security testing on simple to intermediate assets as scoped by security assessment engagement - Assists in conducting risk assessments, creating security assessment reports with evidence of findings and discoveries, and escalating data security compromises - Assists in performing dynamic application security testing using both manual and automated testing tools - Gathers metrics, and KPIs of penetration testing program for management review - Documents targets, test plans, scenarios tested, findings, test evidences and recommendations in penetration test report - Conducts security testing validation for incidents as directed by management - Assists in research of vulnerabilities and provides status updates of issues to Lead Engineers - Assists project team in gathering cyber, data, mobile and cloud security business requirements, and aids in documenting project scope - Assists in the evaluation and recommendation for tools and solutions that provides cyber, data, mobile and cloud security functions - Supports in managing the computer security program and applying IT security principles, methods, and security products to protect and maintain the availability, integrity, confidentiality, and accountability of information system resources and information processed - Handles the complex and detailed technical work necessary to establish security systems such as firewalls, monitoring software, encryption technology, cloud security and threat hunting - Assists in planning, implementing, and managing the overall system security strategy, secure network, cloud, platform, and application solutions Education, Experience & Skillset Requirements: Education: - Bachelor's Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience. Preferred Certifications: - Azure Security Engineer Certification - Certified Cloud Security Professional (CCSP) - Certification in Information Security Strategy Management (CISM) - Certified Information Systems Security Professional (CISSP) - CompTIA Security + Certification - Systems Security Certified Practitioner (SSCP) Work Experience & Skillsets: - 0-2 years of directly-related or relevant experience, preferably in information security. - Problem Solving - Creativity & Innovation - Critical Thinking - Impact and Influencing - Multitasking - Prioritization and Organization Technical Skills: - Network Solutions and Systems - Cybersecurity - Data Security - Cloud Security - Programming and Development - Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI) - IT Risk Management Tools Knowledge: - Microsoft Office Suite - Programming and Development Languages - JavaScript, HTML/CSS, Python, SQL - Security Tools - SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc. What Cencora offers We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora Full time Equal Employment Opportunity Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned Affiliated Companies Affiliated Companies: AmerisourceBergen Services Corporation

Role Description The Senior Information Security Manager is a hands-on, high-impact role reporting to the SVP of Technology. You will own Kalkomey’s security posture end-to-end, spanning application security, identity, compliance, incident response, and vendor risk. This role is deeply embedded within engineering. You will partner directly with Product, Engineering, and Platform teams to build security into how software is developed and deployed, reviewing code, influencing architecture, and ensuring security is built into how we ship. When security is done well, it makes delivery faster and more predictable. When something needs to stop, you stop it and own the call. This is a player-coach role with a strong IC focus. We are looking for someone with deep hands-on experience who is ready to step into broader ownership, not someone who has moved away from the work. You should be comfortable shipping code, working closely with engineers, and making pragmatic decisions that balance risk and velocity. You will also play a key role in how we adopt and scale AI across the organization, including evaluating the security implications of AI-assisted development, establishing practical guardrails, and enabling teams to use AI tools effectively without introducing unnecessary risk. This is a builder role in a maturing environment. You will shape how we approach security, design systems that scale through automation and self-service, and create clarity where processes are still evolving. If you are someone who enjoys operating close to the work while building for the future, this role will be a strong fit. You must reside in one of these US states: AZ, CO, FL, GA, IL, IN, KY, MA, MD, MI, MN, NC, NV, OR, PA, RI, TX, VA, VT, WI, or one of these provinces in Canada: Ontario. Qualifications - 5-8 years in information security, application security, or security engineering roles. - Experience owning security operations in a SaaS or cloud-based product company, not just consulting or compliance. - Hands-on experience with EDR, IAM, vulnerability management, incident response, and penetration testing coordination. - Demonstrated experience working embedded with engineering teams: PR reviews, CI/CD security integration, shift-left practices. - You have written production code in a team environment and can read a codebase, trace a vulnerability through it, and explain the fix to the engineer who owns it. - Familiarity with SOC 2, NIST, CIS, or ISO frameworks in a practitioner capacity, not just an auditor capacity. - Current on the modern engineering security toolchain: dependency scanning, SAST/DAST, container security, secrets management. - Hands-on experience using AI coding agents and LLM-powered workflows in your own work. - A clear-eyed perspective on security in a product engineering environment. - Ability to partner effectively across teams without direct authority. - Strong written and verbal communication skills. Requirements - Own endpoint security tooling (EDR, device control, monitoring) and evaluate the current stack for friction-to-value ratio. - Oversee MDM, device compliance, and identity access controls. - Ensure timely vulnerability remediation and patch management. - Own the security posture of onboarding/offboarding processes. - Own SOC 2 program operations, ongoing audit readiness, and remediation tracking. - Lead third-party vendor security reviews and contract security assessments. - Maintain a current risk register with prioritized mitigation plans. - Coordinate annual penetration testing and remediation. - Produce quarterly board-ready security and compliance reporting. - Own incident response plan and execution. - Ensure monitoring coverage across endpoints, identity systems, and cloud infrastructure. - Conduct post-incident reviews with corrective action plans. - Evaluate security implications of AI coding agents, LLM-powered workflows, and agentic tool use across the organization. - Build AI-powered self-service tools that resolve common IT requests without human intervention. - Maintain concise documentation and runbooks. Benefits - We are a fully distributed company – unless specifically indicated in the job description, this is a work from home position. - Employer matched 401(k). - Medical/Dental/Vision insurance with generous employer contributions (including HSA). - Maternity and Paternity leave and benefits. - Three weeks of paid vacation, 12 paid holidays, a paid community service day, and a flexible work schedule. - Annual wellness allowance, as well as a paid mental health day once a year. - Automatic WFH contribution to each paycheck. - Employee Assistance Program (EAP).

• Oversee multiple projects simultaneously; Strategic partner to align solutions to customers expectations • Communicate to various levels of business partners; Collaborate with stakeholders, business partners, colleagues, developers and others to deliver high quality solutions; • Partner cross-functionally to define assess, communicate, implement, train and change management of projects; • Lead, mentor and provide guidance to team members and partners; • Serve as SME and perform research/analysis within assigned projects