Qureos Mentor

Evolver Inc

<div>Evolver is a cybersecurity and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments. 
Evolver is seeking a Cybersecurity Reporting Lead to support its Federal client in Springfield VA in managing, maturing and implementing automation in support of the client's FISMA reporting requirements. The Lead is responsible for leading a team in executing data analysis &amp; reporting for Federal Client and across its component organization to meet FISMA requirements. The Lead will also provide input into the design and implementation of future state GRC tools.
The successful candidate will have over 10 years' experience leading teams in support of enterprise level Cybersecurity Risk Management and Compliance Programs for large federal agencies and be a &quot;hands on&quot; leader, actively participating in the work required to support client reporting and data needs. We are seeking a confident professional with a consulting background who has led process improvement initiatives leveraging automation and has experience in data analytics having leveraged Excel, Power BI, Tableau, and/or Splunk to develop and present data visualizations. Previous experience leading teams in executing Assessment and Authorization (A&amp;A) processes, overseeing FISMA compliance, and supporting Federal clients in implementing the NIST Cybersecurity Framework (CSF) and NIST Risk management Framework (RMF) will be instrumental in achieving success.
Responsibilities<ul><li>
Employ agile methodology(ies) to plan, organize, assigned, report on and lead work in support of the client's FISMA Metrics reporting requirements.</li><li>
Oversee the end-to-end lifecycle of FISMA metrics reporting, ensuring accuracy, timeliness, and alignment with OMB and DHS requirements.</li><li>
Lead and execute data extraction, transformation, and analysis tasks.</li><li>
Generate trend reports, scorecards, and executive summaries.</li><li>
Design and implement GRC solutions, including creation and management of supporting workflows.</li><li>
Provide input to client's automation strategy including recommendations on tools, process improvements, and integration projects to facilitate efficiencies.</li><li>
Lead cross-functional teams in the collection, validation, and analysis of cybersecurity performance data.</li><li>
Design and maintain dashboards and visualizations to communicate trends and compliance status to executive leadership.</li><li>
Translate complex cybersecurity data into actionable insights for decision-makers.</li><li>
Ensure alignment of reporting processes with evolving federal mandates.</li><li>
Provide strategic input and recommendations for improving data quality, automation, and reporting efficiencies.</li><li>
Serve as the primary liaison between CISOD and DHS components for FISMA metrics coordination.</li><li>
Conduct training sessions and develop documentation to support consistent reporting practices across teams.</li></ul>
Basic Qualifications<ul><li>
Bachelor's degree in Computer Science or related field
</li><li>10+ years of experience in cybersecurity, including at least four years of specialized experience involving continuous monitoring.
</li><li>10+ years' experience with NIST 800-37, experience that can span across a subset, or all, of the steps within the Risk Management Framework.</li><li>
8+ years' project management experience to include leading cross-functional teams to support mission needs.</li><li>
8 years' experience assessing security controls in accordance with NIST 800-53 in/ in support of the Federal Government to include evaluating and validating security control implementation.</li><li>
5+ years of with NIST SP 800-53, 800-37, DHS 4300A/B</li><li>
5+ years of experience with FISMA metrics and security compliance</li><li>
3 + years' leveraging Agile Methodology in managing projects.</li><li>
3+ years' experience as an Information System Security Office (ISSO) in/ in support of the Federal government, developing and maintaining comprehensive security documentation in support of the Risk Management Framework, including, but not limited to: System Security Plans (SSPs) (Sections 1 &amp; 2), Contingency Plans (CPs), Contingency Plan Tests (CPTs), Privacy Impact Assessments (PIAs), and Privacy Threshold Analyses (PIA), and Business Impact Assessments (BIAs).</li><li>
3+ years' experience designing and implementing GRC solutions with the ability to create and manage workflows.</li><li>
2+ years' of experience with tools such as Excel, Power BI, Tableau, Splunk, or Elastic for dashboarding and visualization.</li><li>
2+ years of experience with FISMA compliance tools and DHS FISMA Scorecard Metrics.</li><li>
2+ years' experience managing POA&amp;Ms from open to closure, including developing realistic mitigation plans aligning to realistic and achievable milestones.</li><li>
2+ years' experience with developing and maintaining cybersecurity policies for Federal Agencies, specifically DHS.</li><li>
2+ years' experience with FedRAMP with knowledge of compliance criteria.</li><li>
2+ years' experience with CSAM.</li><li>
2+ years' experience with SQL and scripting for the purposes of data automation and reporting.</li><li>
Familiarity with DHS Cybersecurity Acquisition Lifecycle Framework (ALF).</li><li>
2 + years' experience in participating in and/or managing responses to external and internal audits sponsored by auditing entities such as OIG, GAO, OMB.</li><li>
2 + years' experience with emerging technologies such as Machine Learning, AI, RPA, IoT/OT, etc. with ability to apply this experience to advise on recommended automation strategies to promote efficiencies in the client environment</li><li>
2 + years' with DHS HQ or Component level</li><li>
Must have one of the following certifications: PMP, GISP, CISM, OR CISSP</li><li>
Must have active Secret Clearance</li></ul>
Preferred Qualifications<ul><li>
Ability to schedule and lead meetings, including Working Groups and formal Governance Groups, with a diverse group of government and contractor stakeholders at various levels within the organization, including developing and maintaining agendas, meeting notes, and meeting records, including maintaining a repository of all meeting records.</li><li>
Ability to communicate clearly and effectively via written and verbal communication in both formal and informal situations.</li><li>
Ability to clearly communicate complex technical concepts to Information Technology Project Managers, ISSOs, Application Developers, and Security Compliance Analysts, as well as non-technical POCs such as Branch Chiefs and Business System Owners.</li><li>
Ability to adapt to frequent changes in priorities, follow project schedules, meet established deadlines, and proactively communicate risks and issues to the Contractor PM and/or Federal Leads.</li><li>
Possess good listening skills and the ability to detect explicit and implicit needs and wants of the client.</li><li>
Demonstrated ability to exercise good judgment, prioritize multiple tasks, and problem solve under pressure of deadlines and resource constraints</li><li>
Strong, self-aware leader with experience in building and maintaining positive, supportive, team cultures leading to the successful delivery and execution of quality deliverables in support of client mission needs.</li><li>
Possess strong analytical and critical thinking skills with the ability to apply them to the client/ contract workspace.</li><li>
Excellent organizational skills and attention to detail.</li><li>
Strong analytical, critical thinking, and problem-solving skills.</li><li>
Must have previous client-engagement experience.</li><li>
Excellent written and verbal communication for interacting with stakeholders, executives, and auditors.</li><li>
Experience with RegScale</li><li>
Previous experience assisting Federal clients in bringing automation into their environment to facilitate efficiencies preferred</li></ul> 
Evolver is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law. 
Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.</div>

Cybersecurity Reporting Lead

<div>Evolver is a cybersecurity and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments. 
Evolver is looking for a Cross Functional ISSO SME to join us in support of our Federal Client located in Camp Springs, MD. This position is hybrid, requiring onsite work in Camp Springs, MD two (2) days per week. 
The Cross Functional ISSO SME will join a team of specialists responsible for providing RMF, Security Authorization, Controls Assessment, Change Management, Continuous Monitoring, Vulnerability Management, and Incident Response. The ISSO SME will support the security activities associated with evaluating, implementing, managing security practices and continued operations of new and existing technologies across the Enterprise. They will provide oversight into all responsibilities as required and will support both Unclassified (SBU) and For Official Use Only (FOUO) systems. They shall perform all duties and responsibilities in accordance with DHS 4300A, DHS ISSO Guide, and other applicable guidance. 
Responsibilities:<ul><li>
Support all Risk Management Framework (RMF) activities as outlined in the NIST SP 800-37, Risk Management Framework for Information Systems and Organizations. This includes the process for managing security and privacy risk that includes information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring.</li><li>
Support all Security Control Assessment activities by responding to interview questions as well as working with the system teams to gather appropriate evidence as directed by the SCA team.</li><li>
Support Configuration/Patch/Vulnerability Management activities. Review scan results for the system assets, identify the respective remediation for misconfigurations and weaknesses, and work with the system team to ensure timely implementation of fix.</li><li>
Develop briefings and presentations for Government PM and Executive Management.</li><li>
Support all Security Authorization Processes, Security Control Assessments and Ongoing Authorization activities as required and as directed by the Federal Government.</li><li>
Produce the following artifacts following our client's two (2) day turnaround policy: FIPS 199, E-Authentication Workbook, PTA, PIA, CP, CPT, and a five (5) day turnaround policy for the review of the Security Plan (SP).</li><li>
Provide Cloud Security support for enterprise infrastructure components (network, database, middleware, security, and open-source code) technology transitions and migrations to cloud services, e.g., Platform as a Service (PaaS), Infrastructure as a Service (IaaS), etc.</li><li>
Ensure systems are properly patched and hardened according to our client's requirements.</li><li>
Conduct research and analysis on abnormalities and provide recommendations.</li><li>
Provide, prepare, and conduct security training, as needed.</li><li>
Apply and analyze privacy laws, administrative laws, regulations, and policies surrounding the Privacy Act of 1974, the E-Government Act of 2002, or the Homeland Security Act of 2002.</li><li>
Support security and privacy requirements for internal and external system connections.</li><li>
Support proposed collection, sharing, and maintenance of PII through privacy compliance documentation.</li><li>
Perform comprehensive document reviews (DR) on all risk management and security operations documentation, in alignment with client and FISMA requirements.</li><li>
Conduct quality assurance checks to ensure that the finished documentation meets client and FISMA requirements.</li><li>
Revise, edit, or update security authorization documentation and presentations.</li><li>
Create, adapt, and follow project schedules and deadlines.</li><li>
Develop a thorough understanding of the audience and the documentation required by meeting with colleagues and working with managers to discuss technical problems.</li><li>
Research and build knowledge about products, services, technology, or concepts.</li><li>
Conduct Risk Analysis on vendors, cloud service providers, etc. as necessary to identify flaws, threats, and risks in emerging IT projects, and develop technical in-depth engineering solutions to address and mitigate these risks.</li><li>
Ensures daily, monthly, and quarterly compliance requirements are met individually and by professional level staff within the timelines provided by Operations executive leadership.</li><li>
Performs other related duties as assigned.</li></ul> 
Basic Qualifications:<ul><li>
Must be a United States (US) Citizen.</li><li>
Must be able to pass a comprehensive background check.</li><li>
Must be able to obtain an agency-specific Public Trust clearance prior to joining.</li><li>
Must reside in the Washington, DC metropolitan area, within a commutable distance to our client's location in Camp Springs, MD in order to work onsite 2 days per week.</li><li>
5 years of working experience in a similar role.</li><li>
5 years of experience in Security Engineering or Security Operations.</li><li>
5 years of experience analyzing, assessing, and implementing corrective actions based on vulnerability management tools.</li><li>
Must have and maintain at least one (1) active certification such as CASP, GSEC, GSLC, CISSP, CEH, CISM, and CISA, or other comparable certification which must be approved in advance by our customer. Proof of certification is required.</li><li>
Bachelor's Degree required. Equivalent years of experience in a related field may be substituted for the degree.</li><li>
3 years of experience with controls standards such as NIST 800-53, 800-37, 800-66, and 800-171, as well as other privacy regulations.</li><li>
3 years of experience in Systems Administration and/or Engineering with some of the following: Linux, Windows, Splunk, Oracle, Active Directory, Solaris, Networking, etc.</li><li>
3 years of experiencewith NIST SP 800-53, RMF, FISMA, DHS and DoD policies.</li><li>
3 years of experience in Cloud Security with one of the following platforms: AWS, Google Cloud, and/or Azure.</li><li>
3 years of experience with Security Regulations, such as the NIST Publications and OMB Security related documents.</li><li>
3 years of experience with security process mapping, security process analysis, security process improvement concepts, models, and best practices.</li><li>
3 years of experience with preparing documentation and materials to support the operations of FedRAMP compliance requirements throughout the organization.</li><li>
3 years of experience working in an Agile environment and provide quality, professional deliverables in a short timeframe with little to no guidance from the Government.</li><li>
3 years of experience providing technical security solutions and control implementation recommendations to the Agile Development teams based on industry best practice and Federal requirements.</li></ul> 
Preferred Qualifications:<ul><li>
Strong analytical and problem-solving skills.</li><li>
Proficient with Microsoft Office Suite; specifically, Excel, Word, and Outlook a must. Advanced Microsoft Excel and Access skills to perform extensive data mining, correlation, and reporting a must.</li><li>
Demonstrated experience conducting interviews and negotiation skills applicable to identifying, defining, and evaluating requirements.</li><li>
Proficiency in vast array of Cyber Security platforms, such as Standard Application Online (SAO), Security Information and Event Management (SIEM), Intrusion Detection System (IDS)/Intrusion Protection System (IPS), Data Loss Prevention (DLP), Web Application Firewalls (WAF), Threat Intel, Endpoint Security.</li><li>
Experience supporting multiple high-volume project assignments.</li><li>
Excellent customer service, analytical, problem solving, critical thinking, team building, interpersonal, negotiation, and conflict resolution skills.</li><li>
Ability to work independently and function as an integral part of the team.</li><li>
Excellent verbal and written communication skills; technical and business focused, with the ability to document and describe security process information collected.</li><li>
Demonstrated ability to exercise good judgment, prioritize multiple tasks, and problem solve under pressure of deadlines and resource constraints.</li><li>
Listening skills, the ability to detect explicit and implicit needs and wants.</li><li>
Ability to work on high priority ad hoc requests such as data calls, Senior Management Initiatives (CIO, CISO, etc.), customer mandates, etc.</li><li>
Hands-on experience with Adobe Pro a must.</li><li>
Must have an impeccable work ethic, the ability to make sound decisions, and a commitment to integrity and accountability.</li><li>
Excellent organizational skills and attention to detail.</li><li>
Strong leadership skills.</li><li>
Ability to function well in a high-paced and at times stressful environment.</li><li>
Ability to prioritize tasks and to delegate them when appropriate.</li></ul> 
Evolver is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law. 
Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.</div>

Cross Functional ISSO SME

<div>Position Overview:
The Program Manager will lead the creation of a centralized Quality Assurance model for all technology projects and products. This individual will coordinate discovery sessions, facilitate stakeholder interviews, oversee QA vendor selection, and define the operational structure for a scalable, metrics-driven QA organization supported by Agile best practices.
Location: On-site San Francisco Bay Area or Boston
Key Responsibilities:<ul><li>
Lead stakeholder outreach, discovery interviews, and process documentation to identify current QA practices, gaps, needs, and priorities.</li><li>
Implement Agile project management processes including sprint planning, retrospectives, and iterative status reporting.</li><li>
Build and manage project plans, timelines, and KPIs to track QA program progress and ensure alignment with organizational objectives.</li><li>
Collaborate with leadership to define success benchmarks, governance structures, and communication plans.</li><li>
Establish vendor evaluation criteria, drive partner selection, and facilitate onboarding of QA service providers.</li><li>
Develop and maintain resourcing models and operational frameworks for cross-team collaboration and accountability.</li><li>
Ensure documentation integrity, institutional knowledge capture, and version control of QA-related assets.</li><li>
Anticipate and remove roadblocks, prioritize tasks to ensure project success within Agile cycles.</li></ul>
Basic Qualifications:<ul><li>
Bachelor's degree in computer science, Business, Engineering, or equivalent experience.</li><li>
7+ years of experience in Program or Project Management within a technology organization, including Agile/Scrum environments with a focus on Testing/Quality Assurance.</li></ul>
Preferred Qualifications:<ul><li>
Familiarity with QA processes, metrics, and vendor management in IT or software contexts.</li><li>
Self-directed, highly organized, and capable of independently managing complex initiatives.</li><li>
Excellent communication and stakeholder management skills.</li><li>
Local to or willing to travel regularly to the San Francisco Bay Area.</li><li>
Agile or Scrum certification (CSM, PMI-ACP, SAFe) preferred.</li></ul>
Evolver is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.
Actual salary will depend on factors such as skills, qualifications, experience, market and work location. The client offers benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. The salary for this position in San Francisco Bay Area is $140,000 - $165,000 USD.</div>

Centralized Quality Assurance Program Manager

Join Evolver Inc and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Evolver Inc

About Company

Cybersecurity Reporting Lead

Cross Functional ISSO SME

Centralized Quality Assurance Program Manager