• Lead customer security reviews, RFPs, RFIs, and questionnaires, turning around accurate, complete responses fast enough to keep deals moving • Stand up and maintain a customer-facing trust portal (SafeBase / Vanta / Drata or equivalent), including a dedicated AI/ML section • Own SOC 2 Type II program management, driving audits across portfolio companies (including Sparkrock's Type II conversion and CXT scoping), coordinating evidence with the Senior Group Security Engineer, and managing auditor relationships • Author and maintain security policies and documentation, including DPAs, sub-processor lists, and incident-communication templates • Own AI compliance and trust, including AI questionnaire responses, AI sub-processor management, framework tracking (EU AI Act, ISO 42001, NIST AI RMF), AI use disclosure, AI acceptable-use policy, and AI incident-comms playbooks • Run third-party vendor security reviews and renewals • Build and deliver internal security awareness training, and onboard customers through the required security setup • Draft and coordinate customer-facing incident communications, including breach/incident notifications with legal and engineering

Role Description We are seeking a Cybersecurity Assessment and Authorization SME to join our team. You will lead Assessment and Authorization (A&A) activities for information systems, serving as a cybersecurity Subject Matter Expert throughout the Risk Management Framework (RMF) lifecycle. You will guide system owners, assess risks, and ensure compliance with DoD/DLA cybersecurity requirements. This is a fully remote position. - Cybersecurity Assessment & Authorization (A&A) Leadership: - Serve as the SME for RMF and A&A processes for new and existing information systems. - Execute DoD/DLA cybersecurity procedures to obtain and maintain system authorizations. - Security Control Evaluation & Compliance: - Apply NIST 800‑53 security controls to diverse IT environments, including cloud services, operational technology, enclaves, and applications. - Review control implementations and identify vulnerabilities or non‑compliance. - Risk Analysis & Decision Support: - Determine residual risk associated with security control deficiencies. - Assess the impact of identified risks on current or future system authorization decisions. - Stakeholder Communication & Guidance: - Provide clear updates and brief senior management on RMF progress, findings, and risk posture. - Advise system owners and teams on cybersecurity requirements, remediation steps, and authorization strategies. Qualifications - An IAM Level III certification - A minimum of five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience - Experience in assessing security controls and conducting authorization reviews for large, complex organizations Preferred Qualifications - A bachelor’s degree in a related field of study Clearance Requirements - Must be a U.S. citizen - Must possess a DoD Secret clearance Company Description UnityTec is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

• Manage the network and security infrastructure • Ensure configuration, maintenance, and automation of connectivity and protection environments • Configure VIPs and Pools on F5 LTM • Renew SSL certificates on load balancers • Manage firewall rules on Check Point and Fortinet • Perform firewall audits • Block malicious IPs • Create and propagate VLANs • Manage switch ports via API • Manage Site-to-Site VPN tunnels • Manage IP addressing

• Threat monitoring • Proactively monitor and analyze security data to detect advanced threats and vulnerabilities. • Produce key indicators (risk and performance) and actionable intelligence to strengthen the organization’s security posture. • Manage security incidents, from initial analysis through full resolution. • Conduct post-incident reviews and recommend preventive measures. • Independently perform in-depth security assessments to identify vulnerabilities and recommend remediation strategies. • Maintain the information security risk register, oversee audits, and assess vendor security practices. • Develop information security awareness materials. • Act as a subject-matter advisor to support cybersecurity program objectives and compliance initiatives. • Draft, update, and maintain information security policies, procedures, and standards (access management, passwords, network security, PAP, etc.). • Ensure documentation aligns with best practices (NIST, ISO 27001, etc.). • Coordinate SOC 2 (Type 1 and Type 2) compliance activities, including audit readiness. • Document and implement required security controls. • Respond to security questionnaires from clients or partners (cybersecurity, privacy, business continuity, etc.). • Collaborate with internal teams to obtain relevant technical or organizational responses. • Participate in defining and implementing technical and organizational controls (access management, logging, backups, etc.). • Develop security response procedures (incident response, vulnerability management, SIEM alert handling, etc.). • Establish repeatable and well-documented processes.