Security Engineer

• Drive Rise8’s cybersecurity posture and practice across delivery and client engagements. You’ll own CMMC readiness and compliance, SCG/CUI governance, and act as our cATO SME while building and scaling a high-trust Cyber Practice that supports both internal operations and customer missions. This is a hands-on leadership role that blends technical depth (architecture, DevSecOps, secure cloud operations) with program-level responsibility (SSP/POA&amp;M ownership, audit readiness, customer briefings, staffing and capability delivery).
• Own CMMC (2.0) program delivery end-to-end — policy, System Security Plans (SSPs), POA&Ms, evidence collection, assessor engagements, and audit readiness.
• Lead SCG / CUI governance: define handling policies, training, marking/labeling guidance, and cross-contract controls.
• Serve as the company cATO SME: design and operationalize continuous Authorization-to-Operate approaches, advise customers on sustainment, and integrate continuous monitoring tooling and processes.
• Build and lead the Cyber Practice: define service offerings (advisory, readiness, implementation, managed services), craft go-to-market materials, scope engagements, and own delivery quality.
• Provide technical leadership on secure architecture, cloud security (AWS/Azure/GCP), identity &amp; access management, DevSecOps integration, vulnerability management, SIEM/SOAR operations, and incident response.
• Drive evidence collection and tooling integration to make compliance repeatable and auditable (automation of evidence, drift detection, configuration baselines).
• Support proposals, SOWs, pricing, and technical capture; brief executives and DoD/federal customers on security strategy and risk posture.
• Hire, mentor, and grow cybersecurity staff and contractors; establish OKRs, career bands, and practice playbooks.
• Partner closely with IT, Delivery, Legal, and People Ops to ensure contract-level security obligations are satisfied and sustained.
• Maintain relationships with assessors, auditors, third-party vendors, and MSSPs; select and manage partners as needed.
• Run tabletop exercises, incident post-mortems, and continuous improvement cycles to reduce risk and harden operations.
• Measure and report on cyber KPIs (POA&amp;M closure rate, time-to-remediate, control maturity, audit status) for leadership and customers.

Director of Cybersecurity

Project Coordinator – Autotask MSP Dispatcher, Microsoft Focused CyberSecurity

Senior Manager, Security Risk & Compliance

Lead Security Engineer

Security Consultant II

Senior Network Security Engineer