Key Facts

Remote From:

Full time

English

Hard Skills

Security Controls Security Management Security Studies Plan Of Action And Milestones (POA&M) FedRAMP Health Insurance Portability And Accountability Act (HIPAA) Compliance Java XML JSON YAML Kali Linux +5 more

Other Skills

•
Report Writing
•
Team Management

Roles & Responsibilities

Proven OSCAL experience (at least two years)
5+ years of hands-on security controls assessment and development of Security Assessment Plan (SAP), Security Assessment Report (SAR), and Plan of Actions and Milestones (POAM)
Experience with RegScale, Paramify, or similar tools
Ability to write clear, professional, and actionable technical reports

Requirements:

Conduct independent security control compliance assessments using guidelines from NIST (800-53, 800-171)
Utilize assessment automation via OSCAL (Open Security Controls Assessment Language)
Assess security controls in both U.S. Government and Commercial environments
Produce a set of interoperable, extensible, machine-readable formats that support control-based risk management processes

TestPros

Information Technology & Services

About TestPros

TestPros brings the latest relevant software life-cycle process methodologies, process improvement methods, test/QA methodologies, tools and industry best-practice knowledge to our customers. We continue to push the boundaries of technology by developing exciting and innovative IT services for the global market. We have a culture of innovation where our employees can make a difference, and are always looking for the best and brightest talent to join our team and further their career. Like-minded, dynamic individuals are encouraged to apply. Established in 1988, TestPros provides Independent Assessment and Security Services. Our range of services includes Cybersecurity, Testing, Independent Verification and Validation (IV&V), Quality Assurance, Software/Systems Testing, Automated Testing, Test Range/Test Lab operations, Section 508/WCAG Accessibility, Program Management, Oversight, Cyber Security, FedRAMP Cloud Security, 800-171, Information Assurance, Software Assurance, Configuration Management, Continuous Integration, Help Desk, and software lifecycle services. TestPros supports both government and commercial clients. On the government side, we are a prime contractor on the DHS EAGLE II vehicle in Functional Category 3. We have many other contract vehicles, including a GSA MAS and GSA VETS2, which make us easy to engage. On the commercial side, we work with companies ranging from small start-ups looking to validate the functionality of their products under development, to Fortune 50 corporations augmenting their test operations or independently verifying the security (RMF, ISO/IEC 27000 series) and accessibility (WCAG / Section 508) compliance of their products.

Company type: SME

Industry: Information Technology & Services

Founded: 2018

Company size: 51 - 200

Website LinkedIn See all jobs →

Job description

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA. TestPros is dedicated to making lives better, safer and more secure.

Start: Future projects late 2026 or 2027 (not an immediate job opening)

Type: Part-time consulting

Overview

The ideal candidate will have strong hands-on experience conducting independent security control compliance assessments using guidelines from NIST (800-53, 800-171) and assessment automation via OSCAL (Open Security Controls Assessment Language). You must have security controls and OSCAL experience in both U.S. Government and Commercial environments. FedRAMP experience is a plus...

Required Qualifications

Proven OSCAL experience (at least two years).
5+ years of hands-on security controls assessment and development of Security Assessment Plan (SAP), Security Assessment Report (SAR) and Plan of Actions and Milestones (POA&M).
Experience with RegScale, Paramify, or similar tools.
Experience with government, public sector, or municipal IT environments is highly preferred.
Ability to write clear, professional, and actionable technical reports.
Full U.S. Citizenship, and ability to pass an extensive background check.

Preferred Skills

Experience with NIST 800-53 based ATO assessment, NIST 800-171/CMMC assessment, and/or HIPAA assessment.
Ability to produce a set of interoperable, extensible, machine-readable formats that supports a broad range of control-based risk management processes (XML-, JSON-, and YAML-based formats that allow for lossless translations between XML, JSON, and YAML representations).
Familiarity with U.S. Government security policy requirements.
Experience coordinating with multi-agency or cross-organizational IT teams.
Expertise with common tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus/Tenable, and Wireshark.

Engagement Details

Estimated Start: Late 2026 or 2027
Estimated Duration: TBD
Work Location: Fully Remote
Clearances: Not required, but government experience is a plus

Rate: $50-85/hr (1099 or Corp. to Corp.) This range represents a good-faith estimate and is not a guarantee; final compensation is determined by factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range.

Equal Opportunity Employer
TestPros is an equal-opportunity employer and does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit factor.

Offer Considerations
TestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications.

Federal Compliance
As a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.

Benefits
TestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees.