Jobs at True Zero Technologies, LLC

Extract, clean, and transform data from multiple sources; build and optimize dashboards and reports; perform root cause analysis and statistical modeling; collaborate with leaders and Data Engineers to translate business needs; streamline data workflows and perform database migrations and schema mapping.

Analyze enterprise vulnerability and exposure data to prioritize real-world cyber risks for NIH. Correlate KEVs, threat intelligence, attack paths, and asset criticality; validate penetration findings; recommend remediation priorities; support RMF/POA&M activities; and produce technical and executive exposure assessments to drive risk-based remediation.

Design and implement automated workflows and integrations to support RMF/A&A and continuous monitoring. Automate evidence collection, control validation, reporting, and dashboards; integrate GRC platforms, vulnerability management, SIEMs, and ticketing systems; collaborate with RMF analysts and ISSOs to improve cybersecurity governance and authorization readiness.

Monitor and maintain network infrastructure, detect and troubleshoot outages and performance issues, escalate incidents, perform routine maintenance and controlled changes, document incidents and changes, and collaborate with teams to improve network availability and resilience.

Lead development of enterprise cybersecurity metrics, dashboards, and executive reporting. Aggregate and analyze data from vulnerability management, incident response, RMF, CDM, penetration testing, and threat intelligence to produce risk profiles, support FISMA reporting, and inform leadership. Validate data with technical teams, maintain reporting processes, and recommend automation and metric improvements to enhance operational visibility and program performance.

Design and implement data-centric cybersecurity solutions: develop ML algorithms and automation for security tools; discover, parse, map, and transform legacy RMF artifacts into OSCAL; migrate and analyze security data; reproduce dashboards/workflows in eGRC; collaborate with Professional Services; produce migration assessments and reports.

Lead enterprise vulnerability management and CDM for NIH: run and direct vulnerability scanning across infrastructure, cloud, endpoints, network, and applications; prioritize using exploitability, KEVs, threat intelligence, and mission impact; coordinate remediation, track POA&Ms and RMF processes; produce executive dashboards and liaise with pen test, incident response, and stakeholders.

Lead daily cybersecurity operations across vulnerability management, incident response, RMF, security engineering, ISSO, policy, and continuous monitoring. Coordinate cross-functional teams, manage schedules and deliverables, track risks and metrics, drive process improvements, support Government reviews, and act as escalation point during incidents and transitions.

Develop, document, and maintain RMF policies, procedures, process maps, templates, and governance artifacts. Translate regulatory requirements into workflows, gather stakeholder inputs, support authorization documentation (SSPs, POA&Ms, risk assessments), maintain version control and metrics, and support audits, governance boards, and implementation of RMF processes.

Lead end-to-end database migration projects across on-prem, cloud, hybrid, relational and non-relational systems. Plan migration strategies, perform schema mapping and conversions, implement replication and change data capture, minimize downtime with HA techniques, conduct cutovers and rehearsals, validate post-migration, and develop rollback/contingency plans. Collaborate with teams and address technical risks and compatibility issues.

Own and manage the end-to-end RMF lifecycle and transition current-state workflows to a standardized, target-state GRC/RMF platform. Lead requirements gathering, translate processes into system configurations, validate migrations, establish governance, coordinate testing and UAT, develop training, monitor authorization timelines and POA&M remediation, and provide leadership reporting and continuous improvement recommendations.

Manage and improve the PMO Quality Management System, ensure compliance with CMMI/CMMC/ISO/NIST frameworks, coordinate audits and evidence collection, track CAPA and remediation, monitor government contract deliverables, maintain compliance documentation and repositories, support PMO governance, and produce compliance and executive reporting.

The Senior Cyber Threat Intelligence Analyst is responsible for analyzing and disseminating threat intelligence, mentoring junior analysts, and enhancing threat detection capabilities.

Configure, manage, and troubleshoot Palo Alto NGFWs and Panorama; create security policies (NAT, VPN, URL filtering); deploy IDS/IPS; integrate SASE and Prisma cloud solutions; automate tasks with Python/Ansible/Terraform and APIs; ensure compliance and resolve complex traffic, SSL/TLS, and HA issues.

Manage performance and growth of assigned IDIQ contracts and task orders, oversee staffing, budgets, subcontractors, compliance, and reporting, coordinate cross-functional teams for proposals and delivery, maintain program plans, financials, risk registers, and pursue additional task orders under contract vehicles.