Role Description Koniag IT Systems (KITS), a Koniag Government Services company, is seeking an experienced ICAM ISSO (Identity, Credential, and Access Management Information System Security Officer) to support critical cybersecurity and identity management initiatives. The ideal candidate is a detail-oriented security professional with a strong background in ICAM frameworks, federal security compliance, and risk management. The successful candidate will bring a combination of technical expertise and strong communication skills to ensure the security and integrity of identity and access management systems. Ability to obtain or maintain the required security clearance to support our government customer. The ICAM ISSO will serve as the primary security point of contact responsible for ensuring confidentiality, integrity, and availability of identity, credentials, and access management systems. This individual will work closely with system owners, program managers, and security teams to maintain system authorization, manage risks, and ensure compliance with federal security standards and ICAM policies. - Serve as the Information System Security Officer (ISSO) for one or more ICAM-related information systems, ensuring continuous monitoring and compliance with applicable federal security frameworks. - Develop, maintain, and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other Authorization to Operate (ATO) documentation in accordance with NIST and agency-specific requirements. - Support the Assessment and Authorization (A&A) process, including facilitating security assessments, coordinating with Security Control Assessors (SCAs), and preparing authorization packages. - Monitor and manage the security posture of ICAM systems, including identity proofing, credentialing, authentication, and access control solutions. - Review and analyze audit logs, security alerts, and system events to identify anomalies, potential threats, and compliance gaps. - Coordinate with system administrators, developers, and engineers to ensure security controls are properly implemented and functioning as intended. - Identify and document system vulnerabilities and risks, coordinating remediation efforts and tracking progress through the POA&M process. - Support the implementation and governance of ICAM policies, procedures, and standards in alignment with federal mandates such as FICAM, HSPD-12, EO 14028, and OMB Memoranda. - Participate in security incident response activities, including investigation, containment, and reporting of security events related to identity and access management systems. - Conduct periodic security reviews and assessments to ensure ongoing compliance with security requirements and ICAM best practices. - Provide security guidance and recommendations to program teams regarding identity management, privileged access management (PAM), multi-factor authentication (MFA), and zero trust principles. - Collaborate with cross-functional teams including IT, compliance, and operations staff to align security practices with organizational and mission objectives. - Prepare and deliver security briefings, reports, and documentation for government stakeholders and leadership. Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university. - 5+ years of experience in information security, with at least 2 years of direct experience in an ISSO role or equivalent security capacity. - Demonstrated experience supporting the NIST Risk Management Framework (RMF) and ATO processes. - Experience working with ICAM technologies and frameworks, including identity proofing, PKI, MFA, and access management solutions. - Active or ability to obtain the required security clearance. Requirements - Exceptional communication skills in English – both written and oral – with the ability to communicate effectively with technical and non-technical stakeholders, including government leadership. - Strong working knowledge of the NIST Risk Management Framework (RMF), including NIST SP 800-53, NIST SP 800-37, and FIPS 199/200. - Proficiency in developing and maintaining ATO documentation, including SSPs, POA&Ms, Security Assessment Reports (SARs), and Interconnection Security Agreements (ISAs). - Knowledge of ICAM concepts including identity lifecycle management, credentialing, authentication protocols (MFA, PIV/CAC), privileged access management (PAM), and single sign-on (SSO). - Experience with continuous monitoring programs and security information and event management (SIEM) tools. - Ability to analyze and interpret vulnerability scan results (e.g., Nessus, Tenable) and work with system teams to remediate findings. - Familiarity with federal cybersecurity policies, directives, and mandates, including FISMA, HSPD-12, EO 14028, and OMB Memoranda. - Strong analytical and problem-solving skills with attention to detail in reviewing security controls and documentation. - Ability to manage multiple priorities and deliver quality work products within defined timelines. - Ability to obtain and maintain the required security clearance. Desired Skills and Competencies - Experience working in a federal government IT or cybersecurity environment. - Knowledge of Zero Trust Architecture (ZTA) principles and implementation strategies, particularly as they relate to identity and access management. - Familiarity with Privileged Access Management (PAM) tools such as CyberArk, BeyondTrust, or similar platforms. - Experience with identity governance and administration (IGA) platforms. - Knowledge of SAML, OAuth2, OpenID Connect (OIDC), and other authentication and federation protocols. - Familiarity with cloud-based ICAM solutions and platforms (e.g., Azure Active Directory, Okta, AWS IAM). - One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA Security+, CAP (Certified Authorization Professional), GIAC Security Essentials (GSEC). - Experience with GRC (Governance, Risk, and Compliance) tools such as XACTA, eMASS, or Archer. Benefits - Competitive compensation. - Extraordinary benefits package including health, dental, and vision insurance. - 401K with company matching. - Flexible spending accounts. - Paid holidays. - Three weeks paid time off. - And more.

Title: Information Security Manager Location: Seattle, wa Job Description: Key Responsibilities and Duties: - Guide security policy and participate in broader Information Security governance efforts. - Develop and maintain the Information Security Management System (ISMS) in collaboration with regional information security SMEs and technical consultants. - Oversee and manage the ISMS and recommend appropriate mitigating controls. - Oversees Information Security Risk Management activities, including risk identification, assessment, and communication to relevant interest holders. - Provide valuable expertise and leadership directly to the governing Joint Board executive leadership, including sharing metrics to reflect the performance of the regional security program functions, executive risk score reports, and other guidance on a variety of information security topics. - Facilitate a committee of Information Security SMEs across the Agencies to ensure both regional compliance and concurrence on information security-related matters, recommending solutions, and working from the regional perspective to achieve optimal solutions. - Collaborate with the Systems Integrator, other vendors, and partner Agencies to ensure security best practices, standards, policies, and regulatory requirements are incorporated into core payment system design, implementation, and sustainment, as well as support other future phase projects. - Conduct regular security reviews of both software and processes, advising on information security practices. Reviews and creates threat models and recommends security enhancements consistent with information security strategy and evolving threats. - Support external IT security audits and assessments that focus on operation. - Develop, update, implement, and conduct information security training programs to support the ISMS objectives. - Manage approvals for Identity and Access Management (IAM) and Access Control Administration. - Act as Incident Commander for Security Incident Response activities, whenever the Information Security Incident Response Plan is invoked by the regional program; play an interest holder and oversight role if the plan is invoked by other partners or vendors. - Participate in information security incident investigation and response efforts; perform root-cause analysis when incidents occur and prepare incident reports. - Evaluate change requests to determine potential impacts to Information Security, including IT systems, processes, policies, and provide appropriate input to the Change Management process. - Coach future Regional Operations Team (ROOT) information security personnel as the ISMS becomes complete and mature. - Keep up to date on latest information security trends, "best practices", threats, and countermeasures. Required Skills and Qualifications: - Enterprise-level information security plans, policies, standards, guidelines, methods, and practices based on current industry standards, best practices, tools, and techniques. - Information Security Management Systems, and applicable industry standards (ISO 27001/2). - Pertinent federal, state, and local laws, codes, and regulations; particularly those that affect information security for payment systems. - Environments subject to the Payment Card Industry Data Security Standard (PCI DSS), including compliance-related duties. - Knowledge and understanding of developing and administering information-security standards, practices, audits, risk management, and policy compliance. - Information Security Audit principles and practices. - Knowledge of one or more governance frameworks such as COBIT 5, ISO, NIST, or COSO. - Strong understanding of IT Service Delivery (ITIL) core processes and methodologies. - Principles, methods, and techniques used in the facilitation of managing projects and leading teams. - Relevant experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography. - In-depth knowledge of security software threats and vulnerability mitigation techniques. - Working knowledge of cloud platforms such as Azure/ AWS and relevant security controls. - Establishing and maintaining collaborative working relationships with other department staff, management, vendors, and other interest holders. - Documenting and explaining risks, recommendations, and incident data to technical interest holders. - Interpreting and administering information security policies, standards, and procedures sufficiently to administer, discuss, resolve, and explain them to staff and other constituencies. - Leading or supporting an Information Security Management System. - Generating metrics and preparing reports to facilitate decision-making on security-related activities. - Utilizing personal computer software programs affecting assigned work and in compiling and preparing spreadsheets and reports. - Responding to inquiries with effective oral and written communication. - Researching, analyzing, and evaluating new security processes, products, and techniques. - Excellent time management skills including the ability to prepare, prioritize, and complete work plans. - Working effectively under pressure, meeting deadlines, and adjusting to changing priorities. - Writing of technical documentation and standards, including skill in English usage, spelling, grammar, and punctuation Required Certifications or Licenses: - At least one of the following (in valid status): - Certified Information Systems Security Professional (CISSP). - Certified Information Security Manager (CISM). - Certified Information Security Auditor (CISA). Other industry relevant certifications in the fields of information security, project management, auditing and/ or risk management, such as the Certification in Risk and Information Systems Control (CRISC) Preferred Skills and Qualifications: - Knowledge of Governance, Risk, and Compliance (GRC) tools. - Principles of leadership, supervision, training, and performance evaluation. - Extensive knowledge of risk-based methodologies, and one or more of the following frameworks: ISO 27001/2:2017, 27005:2011, and 31000; PCI-DSS; or NIST 800-53. Duration:11/07/2025 to 2/28/2026 Location: Downtown Seattle (Hybrid) M-F: 8 AM to 5 PM Hybrid: 3 days work onsite Pay: $75 per hour

• Foco em testes de intrusão e segurança de aplicações web, com ênfase em integrações estratégicas e validação de segurança em parceiros de negócio do ecossistema Omie. • Pentest de APIs: Testes de segurança em endpoints, análise de fluxos de autenticação (OAuth, JWT) e integrações de terceiros. • Desenvolvimento Seguro: Revisão de código e integração de ferramentas SAST/DAST em esteiras de CI/CD. • Relatórios de Vulnerabilidade: Redação técnica para desenvolvedores e relatórios executivos de risco para stakeholders.

Security Services Specialist Location: Chicago, IL, USA Work Arrangement: Remote/Hybrid About the Role We are looking for a Security Services Specialist with a passion for shaping, positioning, and winning complex cybersecurity engagements to join our Presales Advisory & Strategic Pursuits practice. This is a strategic, client-facing role at the intersection of cybersecurity expertise, consultative selling, and executive engagement — not a traditional delivery position. You will partner closely with Account Executives, Solution Leads, presales teams, and delivery leadership to lead consultative discovery, define security strategy, and architect services-led solutions aligned to business risk and long-term transformation goals. The mission: help organizations evolve from fragmented, tool-centric security approaches to mature, risk-driven security programs. What You Will Do Shape & Win Strategic Opportunities · Partner with Account Executives to identify, qualify, and shape high-value cybersecurity pursuits from the earliest stages of engagement. · Lead consultative discovery sessions to uncover business drivers, pain points, and transformation opportunities. · Define compelling solution visions that connect security investments to measurable business outcomes. · Drive end-to-end pursuit leadership — from initial engagement through close. Lead Executive Engagement · Establish credibility with CIOs, CTOs, CISOs, and business executives as a trusted security advisor. · Facilitate outcome-driven conversations that move beyond technology to business impact and risk reduction. · Craft and deliver executive-level narratives that differentiate our offerings and win competitive pursuits. Architect Services-Led Solutions · Design integrated solutions that combine Professional Services, Managed Security Services, and partner capabilities into a cohesive offering. · Ensure every solution is technically sound, operationally viable, and commercially compelling. · Align architecture, delivery models, and commercial constructs into scalable, repeatable offerings. Orchestrate Cross-Functional Teams · Lead and align solution architects, engineers, subject matter experts, partners, and delivery teams across complex pursuits. · Drive clarity, accountability, and pace — ensuring every pursuit moves forward with purpose and precision. · Elevate team performance through coaching, structure, and the development of reusable best practices. Influence Strategy & Commercial Outcomes · Shape deal strategy, pricing models, and commercial constructs — including recurring, consumption-based, and outcome-based models. · Balance competitiveness, risk, and profitability in solution design to optimize commercial outcomes. · Contribute to portfolio evolution based on market demand, competitive intelligence, and client needs. Required Qualifications · 5–10+ years of experience in cybersecurity, consulting, or technical sales, with demonstrated success shaping and closing complex security services engagements. · Experience within a managed service provider (MSP), global systems integrator (GSI), or enterprise security environment. · Strong background in managed security services and/or security consulting engagements. · Deep experience in consultative, outcome-based, and value-based selling methodologies. · Ability to translate security risk into business impact, investment rationale, and ROI. · Exceptional executive communication and storytelling skills, with the ability to simplify complexity for senior audiences. Broad technical and domain expertise spanning the following areas: · Risk-based security program development and maturity modeling. · Security frameworks including NIST, CIS, and ISO. · Threat detection and response — SIEM, SOAR, SOC, and MTDR. · Vulnerability management, remediation, and compliance. · Identity and access security — MFA, IAM, and Zero Trust. · Cloud security — CSPM, governance, and workload protection. · Application security — web, mobile, and API protection. · Data security — encryption, governance, and protection. · Network and infrastructure security — firewalls, DDoS, segmentation, and SASE. · Managed security services operations — 24×7 monitoring and incident response. · Awareness of AI-driven threats and automation in security operations. Preferred Qualifications · CISSP, CISM, or equivalent industry-recognized security certifications. · Cloud security certifications across one or more providers (AWS, Azure, GCP). · Vendor-specific certifications such as Cisco, Palo Alto, or Microsoft Security. Success Profile The ideal candidate is a confident, commercially driven security professional who thrives at the intersection of strategy and execution. You are equally at home leading a discovery session with a client's security team and presenting a transformation vision to a CISO or senior business leader. You understand that winning in presales requires more than technical depth — it requires empathy, influence, and the ability to make clients feel understood before they feel sold to. · Executive Presence: Confident engaging and influencing senior stakeholders with authority and authenticity. · Strategic Thinking: Shapes complex opportunities into clear, actionable strategies that drive results. · Storytelling Excellence: Simplifies complexity into compelling narratives that resonate with technical and business audiences alike. · Commercial Acumen: Understands how solution design drives business outcomes — and structures deals accordingly. · Operational Discipline: Drives structure, pace, and execution across pursuits without compromising quality. · Collaborative Leadership: Operates seamlessly across sales, presales, delivery, and partner ecosystems. · Growth Mindset: Continuously elevates self, team, and organizational capability. We are an equal opportunity employer. We welcome applicants from all backgrounds and are committed to building a diverse and inclusive team. Salary $110,000 to $160,000 #LI-PF2 #LI-Remote The compensation range in this posting reflects the Company’s good‑faith estimate at the time of publication. The applicable base pay range for any individual will be determined based on the candidate’s designated primary work location as well as factors including role scope and responsibilities, required qualifications, and the individual’s experience, education, skills, knowledge, and performance. Certain positions may also be eligible for additional compensation such as discretionary merit increases, bonuses, or sales‑based variable compensation in accordance with applicable plans and role requirements. Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.