Platform Security & RMF Lead

<div class="content-intro"><h3>About Us</h3> <p>Red Cell Partners is an incubation firm building and investing in rapidly scalable technology-led companies that are bringing revolutionary advancements to market in three distinct practice areas: healthcare, cyber, and national security. United by a shared sense of duty and deep belief in the power of innovation, Red Cell is developing powerful tools and solutions to address our Nation’s most pressing problems.</p></div><p>ABOUT DEFCON AI</p> <p>RESILIENCE IN THE FACE OF DISRUPTION. DEFCON AI is an insights company that leverages artificial intelligence, mathematical optimization, data analytics, and software engineering for resilient optimization of complex systems.<br>In today’s dynamically changing world, DEFCON AI’s technology aligns outcomes with operational goals, better decision making, and empowers customers to anticipate assess, and mitigate the impacts of disruptions.</p> <div> <p></p> <p><strong><span data-contrast="auto">About the Role</span><span data-ccp-props="{}"> </span></strong></p> <div> <p><span data-contrast="auto">This is a rare opportunity to define the security posture of a mission-critical DoD software platform from the ground up.</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":0,"335559739":0,"335559740":278}"=""> </span></p> <p><span data-contrast="auto">As the Platform Security & RMF Lead, you will own the authorization posture and platform-level security discipline for DEFCON AI’s government-facing systems and integration platform. You are responsible for the full RMF lifecycle—from ATO strategy through continuous monitoring—and serve as the authoritative voice on whether the system is secure, compliant, and authorized to operate.</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":0,"335559739":0,"335559740":278}"=""> </span></p> <p><span data-contrast="auto">You will work closely with Architecture and DevSecOps leadership to define the security standards the platform must meet, while ensuring cross-domain data flows comply with classification and authorization requirements. This is a deeply specialized role requiring expert-level fluency in DoD security frameworks, RMF processes, and cleared-system environments.</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":0,"335559739":0,"335559740":278}"=""> </span></p> <p><span data-contrast="auto">This is a</span><strong><span data-contrast="auto"> </span></strong><span data-contrast="auto">senior level role combining hands-on RMF execution with platform-wide security leadership. You will guide both government stakeholders and engineering teams through complex authorization, classification, and security decisions.</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":0,"335559739":0,"335559740":278}"=""> </span></p> <p><strong><span data-contrast="auto">Key Responsibilities</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <p><strong><span data-contrast="auto">ATO Strategy & RMF Ownership</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Define and execute the ATO pathway, including responsibility allocation across government and contractor teams</span></li> <li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Author and maintain RMF documentation (SSP, SAP, SCTM, ConMon) in accordance with DoDI 8510.01 and NIST 800-53</li> <li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Coordinate with eMASS and Authorizing Officials on assessment and authorization activities</li> <li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Lead continuous monitoring and reauthorization efforts across the system lifecycle<span data-ccp-props="{" 335559739":0}"=""> </span></li> </ul> <p><strong><span data-contrast="auto">Cross-Domain Security & Classification Policy</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Define security requirements for cross-domain data flows (IL-5, IL-6, tactical edge)</span></li> <li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Evaluate and guide selection of DoD-approved cross-domain solutions</li> <li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Ensure classification-aware data segmentation is enforceable, auditable, and aligned with policy (e.g., NOFORN, REL_TO, ORCON)</li> <li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Review system architecture to ensure compliant handling of classified data flows<span data-ccp-props="{" 335559739":0}"=""> </span></li> </ul> <p><strong><span data-contrast="auto">Multi-Enclave Security Architecture</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Support secure operation across NIPR, SIPR, and higher classification environments</span></li> <li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Define authorization approaches (inheritance vs. standalone ATOs) across enclaves</li> <li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Ensure security posture scales without requiring fundamentally different architectures</li> <li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Maintain alignment with evolving joint and service-level security requirements<span data-ccp-props="{" 335559739":0}"=""> </span></li> </ul> <p><strong><span data-contrast="auto">Platform Security Advisory</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Serve as the authoritative internal resource for DoD security and RMF-related questions</span></li> <li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Advise on container security, RBAC, service mesh security, PKI/CAC integration, and secrets management</li> <li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Define expectations for security scanning, container hardening, and vulnerability management (without owning the pipeline)</li> <li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Evaluate new capabilities for security and authorization impacts prior to production deployment<span data-ccp-props="{" 335559739":0}"=""> </span></li> </ul> <p><strong><span data-contrast="auto">Required Qualifications</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li><span data-contrast="auto">10+ </span><span data-contrast="auto">years of information assurance or security engineering experience with increasing seniority</span></li> <li>5+ years of hands-on ownership of RMF / ATO packages for DoD production systems, including at least one full authorization cycle (categorization → controls → implementation → assessment → authorization → ConMon).</li> <li>Deep familiarity with DoD security frameworks, RMF processes, and NIST 800-53 controls</li> <li>Proven ability to operate in complex, multi-enclave or classified environment</li> <li>US Citizenship Required</li> <li>Active Secret Clearance</li> <li>Willing to travel up to 25% for business needs<span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559737":0,"335559738":0,"335559739":0,"335559740":278}"=""> </span></li> </ul> <p><strong><span data-contrast="auto">Preferred Qualifications</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li><span data-contrast="auto">Active TS/SCI Clearance</span></li> <li>Experience supporting USMC or Service-level network environments</li> <li>Experience with ATO inheritance, reciprocity, or common control provider model</li> <li>Experience with cross-domain solutions or multi-level security architectures<span data-ccp-props="{" 335559739":0}"=""> \</span></li> <li>Familiarity with Palantir Foundry or Anduril Lattice environments</li> <li>Prior experience as an ISSO, SCA, or in a similar senior DoD security role<span data-ccp-props="{" 335559739":0}"=""> </span></li> </ul> <p><strong><span data-contrast="auto">What Success Looks Like</span></strong><span data-ccp-props="{" 335559739":0}"=""> </span></p> <ul> <li><span data-contrast="auto">A clear ATO pathway is defined, approved by stakeholders, and actively progressing</span></li> <li>RMF artifacts and compliance evidence are built into the delivery process—not created after the fact</li> <li>Cross-domain data flows are secure by design, with classification policy embedded at the data level</li> <li>The platform operates securely across multiple enclaves without requiring re-architecture at each level</li> <li>Engineering teams proactively engage security early in design decisions</li> <li>Government stakeholders view the system’s security posture as credible, well-managed, and audit-ready<span data-ccp-props="{" 134233117":false,"134233118":false,"335559737":0,"335559738":0,"335559739":0}"=""> </span></li> </ul> </div> <p><strong>What We Offer: </strong></p> <ul> <li>A fully remote, results-based environment</li> <li>Competitive salary, bonus, and equity package</li> <li>100% employer paid, comprehensive health insurance including medical, dental, and vision for you and your family</li> <li>Unlimited PTO, with your manager’s approval</li> <li>Flexible work environment where you manage your work day</li> <li>14 weeks of fully-paid parental leave</li> </ul> <p><strong>Salary Range:</strong> $175,000-$215,000. This represents the typical salary range for this position based on experience, skills, and other factors.</p> <p></p> </div><div class="content-conclusion"><p><strong><span data-contrast="auto">Our Red Cell Partners Benefits:</span></strong></p> <p><span data-ccp-props="{" 134233117":false,"134233118":false,"335559685":0,"335559738":0,"335559739":0}"="">For full-time roles</span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Career track opportunity with potential for rapid advancement with strong performance as the firm grows </span></li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">100% employer paid, comprehensive health care including medical, dental, and vision for you and your family.</span></li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Paid maternity and paternity for 14 weeks at employees' normal pay.</li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Unlimited PTO, with management approval.</li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Opportunities for professional development and continued learning.</li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1">Optional 401K, FSA, and equity incentives available.</li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Mental health benefits are available through </span><a href="https://www.taramind.com/"><span data-contrast="none"><span data-ccp-charstyle="Hyperlink">Tara Mind</span></span></a><span data-contrast="auto">.</span><span data-ccp-props="{" 201341983":0,"335559739":0,"335559740":240}"=""> <br></span></li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="8" data-aria-level="1"><span data-contrast="auto">Cost effective GLP-1 solutions available through </span><a href="https://soon.getcrux.com/"><span data-contrast="none"><span data-ccp-charstyle="Hyperlink">Crux</span></span></a><span data-contrast="auto">.</span><span data-ccp-props="{" 201341983":0,"335559739":0,"335559740":240}"=""> </span></li> </ul> <p>We’re an Equal Opportunity Employer: You’ll receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.<br><br></p> <hr> <p><strong><em><span data-contrast="none">Applicant Data Disclosure</span></em></strong> <span data-contrast="none"> </span><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></p> <p><em><span data-contrast="none">By submitting an application, you acknowledge that Red Cell Partners, LLC ("Red Cell") uses third-party service providers to facilitate its recruitment and hiring processes. These providers include applicant tracking systems, candidate verification platforms, and fraud detection tools (collectively, "Hiring Platforms"). Your application materials, including your résumé, cover letter, work samples, responses to application questions, and any other information you submit, may be transmitted to and processed by these Hiring Platforms for the following purposes:</span></em><span data-contrast="none"> </span><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="1" data-aria-level="1"><em><span data-contrast="none">Managing and administering your application throughout the hiring process;</span></em><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="2" data-aria-level="1"><em><span data-contrast="none">Verifying the accuracy and authenticity of application materials, including by cross-referencing information you provide against publicly available sources and proprietary databases;</span></em><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridmultilevel"}"="" data-aria-posinset="3" data-aria-level="1"><em><span data-contrast="none">Identifying indicators of potentially fraudulent, fabricated, or materially misleading application content, including but not limited to discrepancies between submitted materials and publicly available professional profiles, geographic anomalies, and fabricated work histories.</span></em><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></li> </ul> <p><em><span data-contrast="none">Applications that are flagged through this process as containing indicators of fraud or material misrepresentation may be declined from further consideration. If you have questions about the status of your application or the evaluation process, please contact </span></em><em><span data-contrast="none">talent</span></em><a href="mailto:recruiting@redcellpartners.com"><em><span data-contrast="none"><span data-ccp-charstyle="Hyperlink">@redcellpartners.com</span></span></em></a><em><span data-contrast="none">. </span></em><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></p> <p><em><span data-contrast="none">Red Cell requires its Hiring Platform providers to process your information solely for the purposes described above and in accordance with applicable law. Your information will be retained only for as long as necessary to fulfill these purposes and any applicable legal obligations, after which it will be deleted in accordance with Red Cell's data retention policies.</span></em></p> <p><em><span data-contrast="none">For more information about how your data is used, please refer to our Privacy Policy and <a href="https://www.redcellpartners.com/applicant-privacy-policy/">Applicant Privacy Notice</a>. </span></em><span data-ccp-props="{" 134233117":false,"134233118":false,"335559738":0,"335559739":0}"=""> </span></p></div>

Back to blog

Other Jobs To Apply

No other job posts for this day.