Build and run the security compliance program for Gallatin’s AI platforms to operate within DoD environments.
Compensation
Compensation: Gallatin offers competitive compensation commensurate with experience. Actual compensation may vary based on experience, skills, and location. In addition to base salary, we offer a generous equity grant, full healthcare coverage, 401k, unlimited PTO, and the perks of working in a high-caliber, mission-driven environment.
Responsibilities
Drive RMF authorization packages for Gallatin products deployed across DoD environments
Own the System Security Plan (SSP), Plans of Action & Milestones (POA&Ms)
Serve as Gallatin's day‑to‑day counterpart to customer ISSMs, ISSOs, and assessors
Coordinate data sharing agreements and interconnection documentation with government partners
Build and maintain compliance posture against NIST SP 800‑171, CMMC Level 2, and NIST SP 800‑53
Seeking a capable ISSO to support Risk Management Framework (RMF) activities, security documentation, control validation, and ongoing compliance efforts across assigned systems in a federal environment.
Responsibilities
Support the development and maintenance of system security plans, risk assessments and related authorization artifacts.
Assist with continuous monitoring activities and day-to-day validation of implemented security controls.
Update POA&Ms and track remediation activities with technical and operational stakeholders to ensure timely deficiency resolution.
Support system self-assessments and the collection of evidence required for compliance and authorization reviews.
Enter and manage required asset, vulnerability or compliance information in designated governance and risk tools.
Experienced ISSO role to prepare, submit, and monitor accreditation packages through the RMF process for the NAVSUP OIS program within an AWS GovCloud environment.
Responsibilities
Prepare, submit, and monitor accreditation packages through the RMF process
Ensure receipt of IATT or ATO
Maintain current operating cybersecurity environment within AWS GovCloud
Apply knowledge of DOD Cybersecurity processes and best practices to secure technical solutions, applications, systems, and infrastructures
Meet and maintain DOD RMF CYBER certification and accreditation requirements
Requirements
Bachelor’s degree in Engineering, IT, Computer Science, or related field
Nice to have: CISSP
Nice to have: AWS Certified Security certification
Manage classified and unclassified systems through the Assessment & Authorization (A&A) process, performing the steps of Risk Management Framework in accordance with NIST SP 800-37r2.
Responsibilities
Produce eMASS documentation
Auditing and reporting of FISMA and NIST 800-53 compliance
Prepare documentation from information obtained from customer using accepted guidelines such as RMF
RMF package development and review
Risk and vulnerability self-assessments and corrective actions
Integrates security practices throughout the software development lifecycle to enhance and maintain the security posture of software.
Compensation
The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD).
Responsibilities
Lead RMF execution, including security control attribution, documentation, assessment, and authorization.
Implement and validate NIST SP 800‑53 security controls across enterprise systems.
Maintain continuous monitoring activities for system compliance and risk visibility.
Perform vulnerability assessments and risk analysis using DoW security tools such as ACAS, VRAM, and eMASS.
Apply and verify DoW Security Technical Implementation Guidelines (STIGs) and Security Readiness Guidelines (SRGs) across software, database, and network environments.
Requirements
HS diploma or GED
Bachelor’s degree in a technical field preferred
Master’s degree in a technical field plus
Nice to have: Information Systems Security Officer (ISSO)
Nice to have: Information Systems Security Manager (ISSM)
Design, implement, and maintain cloud security architectures for Intelligence Community clients, ensuring compliance with Information Assurance and security requirements.
Compensation
The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).
Responsibilities
Evaluate and support documentation, validation, assessment, and accreditation processes for IT systems
Assist in defining desired state and risk thresholds and analyze compliance
Advise on codifying strategic objectives into doctrine and procedures
Evaluate software and utility programs for security assurance
Recommend tools and capabilities based on current environment
Requirements
HS diploma or GED
Associate’s degree
Bachelor’s degree
Master’s degree
Nice to have: software development life cycle (SDLC)
Governance, Risk & Compliance (GRC) AnalystNewGallatin · Washington, US
Information System Security Officer (ISSO)NewShorePoint · Albuquerque, US
Information Systems Security OfficerNewEntarian
Information Systems Security Officer (ISSO) (Journeyman)NewInteractive Process Technology LLC · Huntsville, US
Cybersecurity Architect VGeneral Atomics · Englewood, US
Cloud Security EngineerBooz Allen Hamilton · McLean, US