Leads FedRAMP 20X advisory engagements, performing gap analyses, designing cloud security solutions mapped to Key Security Indicators, and developing client compliance documentation. Builds automated, code-based validation using scripts, APIs, and Infrastructure-as-Code; advises on vulnerability response, encryption, authorization boundaries, SIEM, and continuous compliance monitoring. Tracks regulatory changes, manages client relationships, leads project activities, mentors team members, and delivers high-quality services on schedule.

Lead and perform SOC 1/2 and ISO/IEC 27001-series security assessments for cloud-based systems: define system boundaries, develop testing plans, complete AICPA/ISO audit documentation, conduct stakeholder and technical interviews, produce final reports and certification deliverables, manage project delivery and utilization, and mentor junior staff. Occasional travel to client sites may be required.

Conduct network, web (API/mobile), and social engineering penetration tests; advise customers on vulnerabilities and remediation; prepare deliverables; coordinate engagements; mentor juniors; meet FedRAMP certification requirements; and support cloud-focused security assessments.