{"id":2579633,"url":"https://alion.io/job/techsur-senior-security-specialist-grc","title":"Senior Security Specialist (GRC)","company":{"id":694353,"name":"TechSur","domain":"techsur.solutions","url":"https://alion.io/company/techsur","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Reston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":139000,"max":155000,"currency":"USD","period":"year","gross":null,"usd_annual":155000},"salary_estimate":null,"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CVSS","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"ServiceNow","optional":false},{"name":"Zero Trust","optional":false},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-14T22:16:52Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-21T16:32:46Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs.\n TechSur is seeking a Senior Security Specialist with governance, risk, and compliance (GRC) expertise to lead Authority to Operate (ATO) work for a federal customer's new cloud services. You will guide customer cloud environments on AWS, Azure, Google Cloud, and Oracle Cloud through the NIST Risk Management Framework, from control mapping and System Security Plans to third-party assessment and continuous monitoring.\nYou will work with cloud engineers, customer security teams, and Authorizing Officials. You will make sure every landing zone, pipeline, and shared service is built to meet NIST SP 800-53 Rev 5, FedRAMP, and customer security requirements, and that it stays compliant once in production.\nKey Responsibilities\nLead ATO preparation for cloud services under NIST SP 800-37 (RMF), NIST SP 800-53 Rev 5, and FedRAMP Moderate/High processes.\nDevelop and maintain System Security Plans, control implementation statements, Customer Responsibility Matrices, and CSP control-inheritance documentation.\nCoordinate with a Third-Party Assessment Organization (3PAO): support Security Assessment Plans and Reports (SAP/SAR), gather evidence, facilitate interviews, and respond to findings.\nManage Plans of Action and Milestones (POA&Ms): track gaps, owners, and remediation dates in ServiceNow and help engineering teams close findings.\nRun continuous monitoring with CSP-native and third-party tools (AWS Security Hub, Microsoft Defender for Cloud, GCP Security Command Center, OCI Cloud Guard, Prisma Cloud) and produce monthly compliance reports.\nPrioritize vulnerabilities using CVSS, exploitability, and customer risk ratings.\nReview architectures, IaC templates, and CI/CD pipelines for alignment with Zero Trust (NIST SP 800-207), CIS Benchmarks, and customer security standards.\nHelp develop incident response playbooks mapped to MITRE ATT&CK and take part in tabletop exercises.\nBrief customer security leadership and present security posture at monthly Security & Compliance reviews.\n Required Qualifications\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.\nAt least 9 years of information security experience, including implementing and managing security controls and leading ATO efforts.\nDeep working knowledge of the NIST RMF (SP 800-37) and NIST SP 800-53 Rev 5 control families.\nHands-on experience writing SSPs and managing SAP/SAR and POA&M processes with a 3PAO or agency assessor.\nExperience performing continuous security assessments and monitoring in cloud environments.\nStrong technical writing skills and the ability to brief senior government stakeholders.\nAbility to obtain and maintain the background investigation required by the federal customer.\nPreferred Qualifications\nCISSP, CISM, CGRC (formerly CAP), CRISC, or CCSP certification.\nExperience with FedRAMP Moderate or High authorizations for multi-cloud environments.\nExperience with OSCAL-based security documentation and GRC platforms (e.g., ServiceNow IRM/GRC, Xacta, eMASS).\nFamiliarity with agency-specific security frameworks built on NIST SP 800-53.\nExperience with CSPM tools and Splunk-based security monitoring.\nPrior support of a civilian federal agency.\n All your information will be kept confidential according to EEO guidelines.","description_format":"text","description_chars":3730,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-15T01:24:43Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":147500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":37,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":155000,"is_top_pay":false},"html_url":"https://alion.io/job/techsur-senior-security-specialist-grc","json_url":"https://alion.io/job/techsur-senior-security-specialist-grc.json","meta":{"generated_at":"2026-10-21T17:41:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24947,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":694353},"rest":"https://alion.io/mcp/rest/get_company?id=694353"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftechsur-senior-security-specialist-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftechsur-senior-security-specialist-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftechsur-senior-security-specialist-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/techsur-senior-security-specialist-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftechsur-senior-security-specialist-grc"}]}