True Zero Technologies, LLC

Security Engineer

• Provide technical expertise to plan, analyze, define, and support the secure delivery of future functional and technical capabilities for applications leveraging an evolving, security focused cloud-based architecture.
• Guide the continuous review and improvement process for existing components and their security integrations.
• Assist in facilitating technical solution and design discussions, complete proof of concepts, and develop non-functional requirements.
• Manage creation and quality of deliverables.
• Develop processes to ensure successful operations and management applications within the cloud.
• Integrate into all aspects of Security Operations to enable resilient and holistic cloud-focused mission achievement.

Cloud Security Engineer

• Collaborate with internal and external stakeholders to ensure secure data gathering, processing and management.
• Analyze SQL statements, identify and help resolve potential performance issues for optimized database operations.
• Designing secure network architectures, conducting penetration testing, managing security tools (e.g., SIEM, IDS/IPS), and establishing security policies.
• Working with DevOps, IT, and software teams to integrate security into the development lifecycle (DevSecOps).
• Deep knowledge of network protocols, operating systems (Linux/Windows), cloud security (AWS/Azure/GCP), and scripting/programming languages (Python, Bash).
• Implement and uphold cloud data security technologies and best practices.
• Operate independently, demonstrating proactive problem-solving skills and attention to detail.
• Effectively communicate complex technical concepts through strong written and verbal skills. - Regularly report progress and security concerns to the Head of Security Engineering.

Senior Security Engineer

Analyst

• Assessment and Authorization (A&A)**:** Guide systems through the 6-step RMF process (NIST SP 800-37) to obtain/maintain an ATO.
• Security Control Assessment: Evaluate technical controls using tools like ACAS or SCAP and analyze __STIG (Security Technical Implementation Guides) checklists.__
• Documentation**:** Create and maintain SSPs (System Security Plans), POA&Ms, and security assessment reports.
• Risk Management: Identify, analyze, and mitigate security risks in coordination with system owners and stakeholders
• Compliance Monitoring**:** Conduct continuous monitoring to ensure ongoing compliance with Federal or DoD cybersecurity policies
• System Categorization**:** Defining the system's boundary and assessing the potential impact of a security breach on the organization’s mission.
• Security Control Selection**:** Identifying and tailoring the specific security controls
• Implementation & Assessment**:** Verifying that security controls are properly implemented through audits, technical testing, and vulnerability scans.

RMF Analyst

Technical Project Manager

• Develop detailed project schedules, monitor workflows, and track milestones.
• Act as the primary contact for team members, communicating updates, risks, and changes.
• Maintain project documentation, including meeting minutes, project plans, and status reports.
• Coordinate technical resources, order equipment, and assist with software/hardware installation.
• Ensure project adherence to budget and scope constraints
• Monitor resource availability, order necessary hardware/software, and track project expenditures against the budget.
• Identify technical bottlenecks or schedule slippages and escalate complex issues to senior management or project managers.
• Assist in installing software/hardware, gathering technical requirements, or conducting quality assurance testing

IT Project Coordinator

• __**Project planning and execution:**__ Define program vision, create project plans, and guide cross-functional teams through the full lifecycle of a project, from idea to deployment.
• __**Technical leadership:** __Contribute to technical decisions, participate in design reviews, and ensure the program's technical feasibility and alignment with engineering standards.
• **R**__**isk and dependency management**__**:** Identify and mitigate risks, negotiate dependencies, and proactively address issues that may arise during the project.
• __**Communication and stakeholder management**__**:** Serve as a liaison, communicate progress and blockers to senior management, and ensure clear information flow between technical teams, customers, and other stakeholders.
• __**Problem-solving:**__ Act as a central point for solving technical and program-related problems, removing roadblocks for the team, and ensuring the team stays on track.
• __**Process and tool establishment**__**:** Establish the necessary tools, technologies, and processes to ensure a program's success and improve overall system operations.
• **Technical acumen:** Strong understanding of system architecture, software development, and testing methods.
• **Program management:** Experience in planning, executing, and closing cross-functional programs.
• **Leadership and influence:** Ability to lead teams, build trust, and guide projects without direct authority.
• **Communication:** Ability to clearly articulate complex technical concepts to both technical and non-technical audiences.
• **S**__**trategic thinking:** __Ability to connect technical execution to a larger business vision and prioritize initiatives accordingly.
• **Cross-Functional Leadership:** Coordinating and facilitating communication and collaboration among diverse teams (engineering, product, IT, QA, marketing, vendors, and senior leadership) to ensure alignment and cohesive execution.
• __**Risk Management:**__ Identifying, assessing, and mitigating technical and operational risks that could impact project success, developing contingency plans as needed.
• __**Technical Oversight:**__ Using their strong technical background (e.g., in software development, cloud platforms, system architecture) to engage with engineers, understand technical trade-offs, solve problems, and ensure sound design and architecture decisions.
• __**Monitoring and Reporting:**__ Tracking program progress, performance metrics (KPIs), budgets, timelines, and resource allocation. They generate clear, concise reports for various stakeholders, including executive leadership.
• __**Process Optimization:**__ Advocating for best practices and implementing methodologies like Agile, Scrum, or Kanban to improve efficiency, quality, and velocity of project delivery

DevOps Engineer

• Integrate security scanning and compliance checks into CI/CD pipelines
• Automate generation of RMF evidence and artifacts
• Support continuous monitoring and authorization efforts
• Collaborate with RMF and GRC teams to align tooling
• Reduce manual security and compliance tasks through automation

CI/CD Engineer

• Support control selection, system categorization, and tailoring activities
• Develop standardized control implementation statements
• Assist system teams in documenting controls in SSPs
• Coordinate with assessors during control testing
• Promote control reuse and common control strategies
• Support automation of control evidence collection where possible

Security Controls Specialist

ServiceNow

• Design the overall ServiceNow architecture supporting RMF process automation and integration
• Define standardized ServiceNow workflows for RMF lifecycle activities, approvals, and artifact management
• Architect integrations between ServiceNow, GRC tools, cybersecurity platforms, and enterprise systems
• Ensure ServiceNow solutions are secure, scalable, and compliant with federal cybersecurity requirements
• Provide technical leadership and guidance to ServiceNow developers, business analysts, and integration engineers
• Support the automation of evidence collection, reporting, and continuous monitoring data ingestion
• Establish ServiceNow development standards, governance, and best practices
• Streamline documentation on system changes and configurations
• Develop and execute test plans to ensure overall quality of ServiceNow solutions
• Monitor systems stability to prevent service degradation or interruption. Conduct risk assessments to identify potential gaps.
• Develop dashboards, KPIs, and reports to provide visibility into portfolio performance, risks, and opportunities.
• Modify and/or customize the core applications such as Incident, Problem, Change, Requests, Service Catalog while applying best practices
• Assist in delivering best practices for the Enterprise to include ITIL, Agile, PMBOK frameworks for delivering IT Services
• Create and enhance business rules, UI policies, client scripts, and automation scripts to improve service efficiency and automate tasks within ServiceNow.

Senior ServiceNow Architect

• Gather and document RMF process automation requirements
• Design ServiceNow workflows to support RMF lifecycle activities
• Collaborate with cybersecurity and RMF stakeholders
• Support testing, deployment, and user adoption
• Continuously improve RMF automation capabilities

ServiceNow Business Analyst

Solutions Engineer

• Design and implement integrations between cybersecurity tools, GRC platforms, and workflow systems
• Automate the ingestion of security data and evidence into RMF artifacts and repositories
• Support integration of continuous monitoring data to enable ongoing authorization
• Collaborate with RMF, cybersecurity, DevSecOps, and tool owners to define integration requirements
• Develop and maintain technical documentation for integrations and data flows
• Troubleshoot and resolve integration issues across tools and platforms
• Identify opportunities to standardize and reuse integrations across systems
• Support testing, validation, and deployment of integrated cybersecurity solutions

Cyber Tool Integration Engineer

• Lead cybersecurity tool data calls with customer programs and technical leads.
• Conduct detailed technical assessments of cybersecurity tools and platforms.
• Collect and analyze configuration data, logs, integrations, and usage metrics.
• Evaluate tool performance, coverage, tuning, and operational effectiveness.
• Support identification of redundant capabilities and underutilized features.
• Assist with integration mapping between tools (SIEM, SOAR, ticketing, threat intel).
• Document technical findings and contribute to assessment reports.
• Support validation workshops and technical discussions with SOC analysts and engineers.
• Assist in developing transition and optimization recommendations.