TestPros, Inc.

Security Engineer

• Conduct independent security control compliance assessments using guidelines from NIST (800-53, 800-171) and assessment automation via OSCAL
• Utilize FedRAMP experience
• Collaborate with U.S. Government and Commercial environments
• Produce assessments related to security controls and prepare reports
• Coordinate with multi-agency or cross-organizational IT teams

Security Controls Assessor – OSCAL, Part Time

Compliance

• Conduct independent privacy assessments of digital systems (web/mobile)
• Review how user data is collected, used, stored, and shared
• Perform privacy reviews (PIA/DPIA) and document findings
• Analyze data flows and data handling practices
• Evaluate consent mechanisms, age verification, and data minimization practices
• Identify privacy risks and compliance gaps
• Provide clear audit-style reports with recommendations

Privacy Compliance Consultant – Children’s Data Compliance

• Identify Electronic Protected Health Information (ePHI): Locate all systems holding sensitive data
• Identify Threats and Vulnerabilities: Determine potential, reasonably anticipated threats
• Assess Security Measures: Evaluate current safeguards
• Determine Likelihood and Impact: Evaluate the probability and impact of potential breaches
• Document and Prioritize Findings: Create the formal report and risk mitigation plan

HIPAA Compliance Assessor/Consultant

• Evaluate closed captions for accuracy, synchronicity, completeness, and placement.
• Test live, linear, and on-demand content as applicable.
• Identify caption timing, truncation, speaker attribution, and placement issues.
• Capture test evidence and document defects with clear reproduction steps and severity ratings.
• Assess accessibility and usability of caption display settings, including discoverability, customization options, consistency across apps and inputs, preview functionality, and interaction via standard remote controls.
• Develop and execute test plans mapped to FCC requirements, produce compliance assessment reports with remediation recommendations, validate fixes, and collaborate with QA, engineering, product, and compliance teams.

Assessment Specialist – Closed Captioning, FCC Compliance

Content Marketing Manager

• Perform hands-on remediation of web content to correct accessibility defects identified through manual and automated testing
• Update and correct HTML structure, including headings, landmarks, lists, tables, and semantic markup
• Apply and validate alternative text, labels, and instructions for non-text content
• Remediate keyboard navigation, focus order, and interactive elements (links, buttons, forms)
• Address color contrast, text resizing, and visual presentation issues
• Implement accessibility fixes within content management systems (CMS) and web platforms
• Coordinate with accessibility testers to support post-remediation validation
• Document remediation actions and support status reporting as needed
• Follow established accessibility standards, agency policies, and remediation priorities

Web Content Remediation Specialist

• Leading end-to-end internal assessments based on PCI DSS requirements
• Managing team communications and visibility into status of deliverables
• Obtaining ISA certification within 12 months (if not current)

PCI Compliance Consultant – Part time

QA Engineer

• Conduct complete penetration tests, report on results, and provide improvement recommendations
• Ensure customer satisfaction through the delivery of high-quality consulting services across a portfolio of commercial and federal government projects
• Ability to elicit and understand customer requirements and convert those requirements into a technical services solution
• Ability to accurately estimate time and cost for each project
• Foster an environment of continuous learning, innovation and excellence
• Work closely with development teams, product managers, and customer success teams to ensure successful delivery of consulting services or product implementation projects and remove roadblocks
• Develop, review and approve formal statements of work, change requests, and proposals
• Formulate timely reports and documentation to track progress
• Effectively collaborate with peers and company leadership to accomplish team, corporate and client objectives
• Answer developer, designer, and content contributor questions about IT Security requirements.

Penetration Tester, Part Time

• Develop NIST 800-53 Rev5 based System Security Plan (SSP)
• Create/Update the applicable documents identified by NIST 800-53 Rev 5, specifically the Security Assessment Report (SAR)
• Create/Update the associated Plan of Actions and Milestones (POA&M)
• Provide detailed security-related reports including data, analyses, and conclusions upon completion of tests, scans, and assessments, including mitigations and, if indicated, appropriate escalation of identified risks and vulnerabilities
• Verify and document the implementation of security controls necessary to achieve compliance
• Keep management apprised of impending areas of concern, verbally and in writing
• Review and develop System Security Plans (SSPs), Plans of Actions and Milestones (PO&Ms), and as well as other necessary artifacts
• Facilitate the Plan of Actions and Milestones (POA&M) program to ensure customer systems have accurately and fully provided information for POA&M activities to include valid remediation of findings
• Develop various policy documents (SOPs/CONOPs) as required
• This may include policies regarding Configuration Management, IS Sanitization, Media Security, Password Policy, Business Continuity, Continuity of Operations, Incident Response, Disaster Recover, and Security Assessments
• Develop new, and mature existing information security and risk policies
• Initiate, and lead on-going information security maturity assessment processes and training, using industry accepted frameworks and implement into the overall cyber security posture
• Produce and review key performance indicators for implemented security measures and distribute KPIs
• Maintain knowledge of threat landscape by monitoring threat intelligence, and other related sources

Security Controls Assessor

Consultant

• Perform complete audits and validation testing on cell phones.
• Write detailed findings to document identified issues and recommend potential solutions and best practices for remediation of accessibility violations.
• Apply software fixes and/or additional accessibility features within the target software source code.
• Develop and deliver informative and useful high quality outreach/educational presentations.
• Prepare and conduct training on accessibility related topics.

IT Accessibility Assessment Consultant, Part Time

• Support hands-on testing and compliance validation of a medical records management and electronic document management application operating within a regulated healthcare environment.
• Perform functional, security, compliance, privacy, and data integrity testing of systems managing sensitive healthcare and electronic records.
• Execute compliance validation activities related to HIPAA, FDA 21 CFR Part 11, ISO 16175-1, and ISO 14641 requirements.
• Review system functionality related to electronic records management, electronic signatures, audit trails, access controls, and user permissions.
• Develop and execute test plans, test cases, validation scripts, traceability matrices, and compliance validation documentation.
• Validate data integrity, record authenticity, retention, and system security controls.
• Document findings, risks, gaps, and recommendations.