YOUR MISSION 

True Anomaly is seeking an Executive Assistant to support senior leaders by managing complex calendars, coordinating travel, and ensuring day-to-day operations run smoothly. 

This role is ideal for someone with 5+ years of experience who has supported multiple executives (VP-level and above) and thrives in a fast-paced, high-growth environment. You will play a key role in keeping leaders focused, aligned, and operating efficiently. 

This position will also be the office manager for the Washington DC location.

RESPONSIBILITIES 

Calendar & Scheduling Management 

• Manage complex, high-volume calendars across multiple executives. 

• Prioritize and schedule meetings across internal and external stakeholders, balancing competing demands. 

• Anticipate scheduling conflicts and proactively resolve them. 

• Ensure executives are prepared with context, materials, and clear agendas. 

Travel & Logistics 

• Coordinate domestic and international travel, often with short lead times. 

• Manage end-to-end travel logistics including flights, hotels, ground transportation, and itineraries. 

• Adjust plans in real time to accommodate changing schedules and priorities. 

• Ensure seamless execution so executives can remain focused on business objectives. 

Executive & Administrative Support 

• Support day-to-day administrative needs including expense reporting and meeting coordination. 

• Track action items and follow-ups to ensure execution across teams. 

• Assist with preparing materials for meetings, offsites, and leadership engagements. 

• Maintain strong organization of documents, communications, and priorities. 

Executive & Administrative Support 

• Support day-to-day administrative needs including expense reporting and meeting coordination. 

• Track action items and follow-ups to ensure execution across teams. 

• Assist with preparing materials for meetings, offsites, and leadership engagements. 

• Maintain strong organization of documents, communications, and priorities. 

Office Management & Workplace Operations 

• Oversee day-to-day office operations to ensure a productive, organized, and professional work environment. 

• Coordinate office services, vendors, supplies, equipment, and facilities needs. 

• Manage office logistics for visitors, meetings, team events, and leadership engagements. 

• Support onboarding activities and workspace readiness for new employees and guests. 

• Partner across teams to maintain smooth communication, operational efficiency, and a positive employee experience. 

• Handle sensitive information and operational matters with discretion and professionalism. 

QUALIFICATIONS 

• 5+ years of experience supporting executives in fast-paced environments. 

• Experience supporting multiple principals (VP-level or above). 

• Strong calendar management skills with the ability to handle competing priorities. 

• Proven experience coordinating complex travel and logistics. 

• Highly organized with strong attention to detail. 

• Strong communication skills and ability to interact with senior stakeholders. 

• Ability to operate with discretion and handle sensitive information. 

PREFERRED EXPERIENCE 

• Experience supporting executives in a startup or high-growth environment. 

• Exposure to HR processes (onboarding, coordination, people ops support). 

• Familiarity with AI tools or automation (e.g., scheduling tools, workflow optimization, productivity tools). 

• Experience working across distributed teams or multiple locations. 

COMPENSATION  

• Base Salary: $95,000-$130,000 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education and experience. 

ADDITIONAL REQUIREMENTS 

• Ability to maintain or obtain a US- security clearance 

• Work Location: this role will be fully onsite at our Washington D.C. facility 

• Work environment is in a standard office, working at a desk or in a production factory. 

• Physical demands may include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20lbs. 

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite 

YOUR MISSION 

The Corporate Paralegal will support the Legal Department, providing comprehensive paralegal, regulatory, and legal operations support across all legal functions. Reporting directly to the Head of Corporate Legal, this role will support all attorneys within the department and serve as the department’s primary owner of legal administration, governance, regulatory filings, and legal operations systems. 

This position is ideal for a highly organized professional who is comfortable operating independently, managing compliance-driven workstreams and multiple competing priorities, supporting a mix of contract types, and serving as the connective tissue across contracts, corporate governance, compliance, and legal operations in a fast-paced, collaborative environment. 

 Responsibilities

• Draft, revise, format, and proof legal documents, including contracts, subcontracts, amendments, NDAs, teaming agreements, correspondence, and internal memoranda.
• Incorporate attorney comments, manage redlines, and maintain document version control.
• Coordinate execution logistics, including signature routing, notarization, and record retention.
• Schedule and support legal meetings, including preparation of agendas, materials, and follow-up actions.
• Prepare and file corporate annual reports, PAC filings, and other required federal, state, and local regulatory filings applicable to government contractors.
• Maintain calendars and trackers for regulatory and compliance deadlines.
• Manage entity registrations, good standing certificates, and annual filings across jurisdictions.
• Serve as primary administrator for contract lifecycle management (CLM) and contract review platforms, including intake, workflow routing, user access, and reporting.
• Maintain and improve legal department process documentation, checklists, and playbooks.
• Track legal metrics related to contracts, compliance, and workload to support leadership reporting.
• Support onboarding of new legal team members and coordination with outside counsel.
• Help develop internal reference materials and training aids for contracting and compliance processes.
• Assist with special projects, ad hoc initiatives, and maintenance of other legal documentation as needed and under attorney direction. 

Qualifications 

• Associate’s or Bachelor’s degree required; paralegal certificate preferred.
• 5-11 years of experience as a corporate or government contracting paralegal, preferably in an in-house environment.
• Experience supporting government contracts, subcontracts, or regulated industries.
• Familiarity with FAR/DFARS structure, government contractor compliance requirements, and audit support is strongly preferred.
• Experience with corporate annual reports and entity management. Additional experience with PAC filings a plus.
• Experience supporting commercial vendor and supplier contracts.
• Proficiency with CLM systems, document management platforms, and legal technology tools.
• Strong working knowledge of Microsoft Office and document comparison/redlining tools. 

Compensation

• Base Salary: $90,000-$130,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave  

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

#LI-Onsite #LI-Remote #LI-Hybrid

Your Mission 

We are seeking a rare combination of disciplines: an experienced Sr. Compliance Engineer with deep AI Subject Matter Expertise (SME) and export compliance background to join our Governance, Risk, and Compliance (GRC) team. This role is responsible for building, implementing, and sustaining the organizational compliance posture across key regulatory and security frameworks — with a primary emphasis on RMF (NIST 800-53 Rev. 5 + Classified Overlays), CMMC Level 3, NIST 800-171 Rev. 3, EAR/ITAR cyber regulations, and — critically - the governance, risk management, and compliance controls surrounding AI/ML systems and large language models (LLMs) deployed across the enterprise. 

As AI becomes embedded in True Anomaly's operations, mission systems, and products, this role serves as the organizational authority on how AI capabilities are adopted, audited, and controlled responsibly. You will architect and operationalize compliance checkpoints and governance gates within LLM pipelines, evaluate AI vendors and platforms (including OpenAI, Anthropic Claude, and others) against classified and unclassified compliance requirements, and ensure AI-driven workflows satisfy both regulatory obligations and internal risk tolerance. 

The ideal candidate brings deep GRC knowledge, hands-on AI/LLM engineering fluency, and the ability to engage credibly with compliance assessors, government partners, and internal AI/ML engineering teams alike. 

Responsibilities 

Compliance Program Execution 

• Lead and support compliance assessment readiness across key organizational frameworks including NIST SP 800-171 Rev. 2 and 3, CMMC Level 3, NIST SP 800-53 Rev. 5, and the NIST Cybersecurity Framework (CSF). 

• Provide direction on cybersecurity readiness to address EAR and ITAR-related controls and requirements. 

• Drive CMMC readiness activities across the organization, including scoping, gap analysis, control implementation validation, evidence collection, and pre-assessment preparation. 

• Review, maintain, and mature System Security Plans (SSPs) to accurately reflect organizational control implementations, system boundaries, and operational practices — including AI/ML system boundaries and data flows. 

• Manage Plans of Actions and Milestones (POA&Ms), tracking open findings to resolution, communicating status to GRC leadership, and coordinating remediation efforts across responsible teams. 

• Conduct internal compliance audits and control effectiveness reviews to ensure ongoing adherence to applicable frameworks and to surface emerging gaps before external assessments. 

• Maintain audit-ready evidence repositories and documentation packages, ensuring traceability between controls, evidence, and framework requirements. 

AI Governance, Risk & Compliance (AI-GRC) 

• Serve as the organizational AI compliance SME — the primary authority on how AI/LLM systems (including OpenAI GPT models, Anthropic Claude, open-source models, and internally developed models) are evaluated, onboarded, and continuously governed within True Anomaly's compliance boundaries. 

• Design, implement, and maintain compliance checkpoints and enforcement gates within LLM pipelines, including:  

• Input/output filtering and content policy enforcement layers 

• Prompt injection detection and mitigation controls 

• Data classification guardrails to prevent CUI, ITAR-controlled, or classified data from flowing into non-authorized AI systems or endpoints 

• Automated audit logging of AI interactions for traceability and incident investigation 

• Model access control and role-based permissions within AI platforms 

• Conduct AI-specific risk assessments, including evaluation of AI vendor data handling practices, model training data provenance, and third-party AI API security postures against NIST AI RMF, NIST SP 800-53 AI overlays, and internal standards. 

• Develop and enforce an AI System Acceptable Use Policy and supporting standards that govern how employees and systems interact with LLMs, including permissible data inputs, output handling, human-in-the-loop requirements, and escalation procedures. 

• Evaluate proposed AI/ML use cases for regulatory risk (EAR/ITAR, CMMC, data privacy) and provide compliance go/no-go determinations with documented rationale. 

• Collaborate with AI/ML engineers and DevSecOps teams to integrate compliance gates into CI/CD pipelines and MLOps workflows, ensuring model changes and prompt changes undergo review before production deployment. 

• Maintain an AI system inventory, tracking all deployed models, APIs, integrations, and associated risk and compliance status. 

• Monitor emerging AI regulatory developments (e.g., EO 14110, NIST AI RMF, DoD AI Ethics Principles, EU AI Act implications for U.S. defense partners) and assess organizational impact. 

Cross-Functional Compliance Enablement 

• Serve as a primary GRC team resource for compliance questions, control guidance, and framework interpretation across engineering, IT, operations, legal, and security teams. 

• Partner with IT and security operations teams to verify that technical controls — including access management, logging, configuration baselines, and incident response procedures — meet CMMC and NIST requirements at an organizational level. 

• Partner with AI/ML engineers, data scientists, and product teams to embed compliance thinking into AI system design, model selection, and deployment architecture. 

• Collaborate with the Enterprise Risk Manager and broader GRC leadership to ensure compliance findings — including AI-specific risks — are reflected in the enterprise risk register and remediation priorities. 

• Support the development of compliance training and awareness materials, including AI-specific training that builds organizational understanding of responsible AI use, LLM risk, and CMMC obligations. 

• Coordinate with external assessors, third-party auditors, and government partners during assessment engagements, serving as a knowledgeable point of contact for evidence walkthroughs and control discussions. 

Qualifications 

• 7+ years of experience in IT security compliance, GRC, or a closely related discipline, with direct ownership of compliance program activities. 

• Demonstrated expertise in NIST SP 800-171, CMMC (Level 2 or 3), and NIST SP 800-53, with hands-on experience conducting gap assessments, implementing controls, and preparing organizations for external audits. 

• Extensive, hands-on experience with AI/LLM systems, including practical knowledge of platforms such as OpenAI (GPT-4/o-series), Anthropic Claude, Meta Llama, Microsoft Azure OpenAI Service, and/or comparable commercial and open-source LLM ecosystems. 

• Demonstrated ability to design, implement, and operationalize compliance controls within LLM pipelines, including guardrail layers, content filtering, audit logging hooks, and data classification enforcement. 

• Working knowledge of AI security risks, including prompt injection, jailbreaking, data exfiltration via LLM outputs, model inversion, and supply chain risks associated with third-party AI APIs. 

• Familiarity with NIST AI Risk Management Framework (AI RMF) and its application to enterprise and defense AI deployments. 

• Strong understanding of SSP development and maintenance, POA&M management, and audit evidence lifecycle practices in an organizational (non-product) compliance context. 

• Proven experience developing and operationalizing information security policies, standards, and procedures across a multi-disciplinary organization. 

• Strong communication skills with the ability to explain compliance requirements — including AI risk concepts — clearly to both technical practitioners and non-technical business stakeholders. 

• Highly organized, with demonstrated ability to manage multiple concurrent compliance workstreams and deadlines in a fast-paced environment. 

• Active or ability to obtain SECRET or TS/SCI security clearance. 

• Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)). 

Preferred Qualifications 

• Strong EAR/ITAR background as it pertains to cybersecurity, AI-generated outputs, and policy development. 

• J.D. focusing on technology law, export compliance (EAR and ITAR), AI regulation, or cyber law. 

• Experience building MLOps or AI DevSecOps pipelines with integrated compliance gates, including automated policy enforcement, prompt review workflows, or model change management processes. 

• Hands-on experience with AI safety and alignment tooling (e.g., LangChain guardrails, NeMo Guardrails, Azure Content Safety, OpenAI Moderation API, Anthropic Constitutional AI/policy layer configurations). 

• Experience evaluating AI vendor agreements and data processing agreements against DoD/CMMC/ITAR data handling requirements. 

• Familiarity with DoD AI Ethics Principles, Responsible AI (RAI) frameworks, and emerging federal AI governance requirements (e.g., EO 14110, OMB AI guidance). 

• Industry certifications such as:  

• Certified Information Systems Auditor (CISA) 

• Certified in Risk and Information Systems Control (CRISC) 

• Certified Information Systems Security Professional (CISSP) 

• CMMC Registered Practitioner (RP) or Certified Professional (CP) 

• CompTIA Security+ or equivalent 

• AWS/Azure AI or Security certifications 

• Background in startup, aerospace, defense technology, or SaaS environments operating under DoD compliance obligations. 

• Familiarity with cloud environments — particularly Azure Government, AWS GovCloud, or Azure OpenAI Government deployments — as they relate to organizational control implementation and AI boundary scoping. 

• Experience coordinating with C/3PAOs or supporting CMMC assessments. 

• Working knowledge of DFARS 252.204-7012, ITAR, and supply chain compliance obligations. 

• Familiarity with Agile/Scrum environments and hybrid project delivery models. 

Compensation 

• Base Salary: Denver - $145,000 to $195,000, Long Beach - $150,000 to $205,000, Washington, DC - $150,000 to $205,000 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

Additional Requirements 

• Work Location: Successful candidates will be located near Denver, CO, Long Beach, CA, or Washington D.C. While we observe a hybrid work environment, some work must be done on site. #LI-Onsite

• Work Environment: Standard office setting, working at a desk or in a production factory environment. 

• Physical Demands: May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs. 

This position will be open until it is successfully filled. 

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. 

We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know. 

Your Mission 

We are seeking a Senior Enterprise Risk Manager to build, lead, and mature two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor Risk Management (TPVRM). This is a foundational leadership role for a seasoned risk professional who thrives in fast-moving, mission-critical environments and understands the unique demands of operating at the intersection of defense, aerospace, and commercial SaaS. 

The ideal candidate brings deep experience navigating regulated government environments—including RMF, DoD IL5/IL6, and CMMC—and is fluent in industry-standard risk quantification and assessment methodologies such as FAIR (Factor Analysis of Information Risk) and OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation). They pair that expertise with a startup mindset that enables them to build programs from the ground up, not just maintain inherited ones. You will work cross-functionally with engineering, security, legal, compliance, product, and executive leadership to identify, assess, communicate, and mitigate risk across the enterprise and its extended supply chain. 

Responsibilities: 

Enterprise Risk Management 

• Design, implement, and continuously mature a scalable enterprise risk management program aligned to NIST RMF, ISO 31000, and applicable DoD frameworks. 

• Apply FAIR methodology to quantify cyber and operational risk in financial terms, enabling data-driven prioritization and executive-level risk decision-making. 

• Leverage OCTAVE or similar threat-centric methodologies to lead structured risk assessments that identify critical assets, threat profiles, and organizational vulnerabilities. 

• Establish and maintain an enterprise risk register, risk appetite statements, and risk tolerance thresholds in collaboration with executive leadership and the Board (as applicable). 

• Lead recurring risk identification, assessment, and prioritization processes across business units, ensuring alignment between operational risk posture and strategic objectives. 

• Develop and maintain executive-ready risk dashboards, KPI/KRI reporting, and program metrics using tools such as Jira, Confluence, GRC platforms, and MS Project. 

• Conduct and coordinate internal audits and risk assessments to ensure adherence to DoD compliance standards, including NIST SP 800-53 Rev. 5, NIST SP 800-171, RMF (IL5 and IL6), and CMMC Level 3. 

• Support audit readiness activities including pre-assessment preparation, evidence collection, POA&M management, and post-audit remediation planning. 

• Develop, implement, and mature information security and enterprise risk policies, standards, and guidelines based on industry best practices. 

• Serve as a primary point of contact for internal stakeholders, executive leadership, and external assessors, certification bodies, and government partners. 

Third-Party Vendor Risk Management 

• Build and lead a formalized Third-Party Vendor Risk Management program, establishing vendor classification tiers, risk assessment methodologies, and ongoing monitoring cadences. 

• Define and operationalize vendor onboarding risk assessments, including security questionnaires, compliance validations, and contractual risk controls (e.g., SLAs, right-to-audit clauses, data handling requirements). 

• Maintain a vendor risk inventory and lifecycle management process covering initial due diligence through offboarding, ensuring continuous visibility into third-party risk exposure. 

• Collaborate with legal, procurement, and supply chain teams to embed risk criteria into vendor selection, contract negotiation, and renewal processes. 

• Monitor third-party vendors for changes in risk posture, including cybersecurity incidents, financial instability, regulatory actions, and ITAR/export control concerns. 

• Develop vendor risk reporting and executive-level dashboards to provide ongoing transparency into third-party exposure across critical suppliers and technology partners. 

• Ensure TPVRM program alignment with applicable regulatory requirements including CMMC supply chain requirements, DFARS clauses, and DoD IL environment authorization boundaries. 

Cross-Functional Leadership 

• Build, mentor, and provide technical guidance to junior risk team members and project contributors across both lines of effort. 

• Drive alignment across engineering, security operations, product compliance, IT operations, legal, and business operations teams on risk priorities and remediation timelines. 

• Track program milestones, identify dependencies and blockers, and drive timely course corrections with a bias toward action. 

• Continuously improve program workflows, reporting processes, and team coordination for scalable, repeatable, and consistent risk program execution. 

• Proactively track emerging regulatory, threat, and supply chain risk requirements and update program posture accordingly. 

Qualifications 

• 10+ years of experience in enterprise risk management, GRC, cybersecurity risk, or related disciplines, with demonstrated ownership of risk programs at a senior level. 

• Proven track record in startup or high-growth technology environments, with demonstrated ability to build risk programs from the ground up under resource and time constraints. 

• Experience applying FAIR for risk quantification and OCTAVE or similar frameworks for threat and asset-centric risk assessments. 

• Direct experience with U.S. government or defense sector programs, including working knowledge of DoD RMF (IL5 and IL6), NIST SP 800-53, NIST SP 800-171, and CMMC. 

• Hands-on experience leading or significantly contributing to Third-Party/Vendor Risk Management programs, including vendor tiering, due diligence workflows, and ongoing monitoring. 

• Strong proficiency in risk management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC platforms, and MS Visio or Lucidchart. 

• Excellent communication and stakeholder management skills, with a strong ability to translate technical risk into business language for executives and board-level audiences. 

• Active or ability to obtain SECRET, TS/SCI security clearance. 

• Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)). 

Preferred Qualifications 

• Background in aerospace, defense technology, or SaaS companies operating in regulated government markets; experience with both commercial and government customer bases strongly preferred. 

• Proficient with creating risk programs in a startup environment, scaling, and adapting to changing organizational structure 

• Experience managing certification or authorization initiatives across one or more of: FedRAMP, SOC 2, DoDIN APL, ISO 27001, CMMC as it pertains to risk. 

• Industry certifications such as:  

• Certified in Risk and Information Systems Control (CRISC) 

• Certified Information Systems Auditor (CISA) 

• Certified Information Systems Security Professional (CISSP) 

• Certified in the Governance of Enterprise IT (CGEIT) 

• Certified ScrumMaster (CSM) or Agile PM certification 

• Experience with cloud environments, particularly Azure Government and/or AWS GovCloud, and understanding of authorization boundary design. 

• Working knowledge of ITAR, EAR, and export control considerations as they apply to vendor and supply chain risk. 

• Familiarity with Agile/Scrum and hybrid project delivery models. 

• Experience with DFARS, FAR, and government contracting compliance requirements. 

Compensation 

• Base Salary: Denver - $160,000 to $220,000, Long Beach - $165,000 to $230,000, Washington DC - $165,000 to $230,000 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

Additional Requirements 

• Work Location: This role will be onsite at one of our facilities in Centennial, CO, Long Beach, California, or Washington, D.C. #LI-Onsite 

• Work Environment: Standard office setting, working at a desk or in a production factory environment  

• Physical Demands: May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs. 

This position will be open until it is successfully filled. 

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. 

We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know. 

YOUR MISSION

We are seeking an experienced Principal Compliance Engineer to lead the design and implementation of secure, compliant architectures within highly regulated cloud environments. This role requires deep expertise in STIG development, encryption standards, and vulnerability remediation, alongside a strong foundation in DevOps and SecOps practices, particularly within the AWS and Azure Government platform. 

The ideal candidate brings at least 10 years of experience in security engineering or technical compliance and will work cross-functionally to align cloud infrastructure and operations with frameworks such as RMF (DoD IL5 and IL6), and CMMC. This is a hands-on technical role focused on enabling and sustaining system authorization through security automation, technical control implementation, and audit readiness. 

RESPONSIBILITIES

Security & Compliance Engineering 

• Architect, implement, and maintain secure, audit-ready systems and services in AWS and Azure Government environments. 
• Develop and maintain custom STIGs (Security Technical Implementation Guides) for cloud infrastructure, SaaS applications, and IaaS/PaaS configurations and customer-deployed applications. 
• Design and enforce secure configurations using encryption standards such as FIPS 140-2/FIPS 140-3, TLS 1.2+, and data-at-rest protections for regulated data. 

DevOps & SecOps Integration 

• Embed compliance and security checks into CI/CD pipelines, ensuring that infrastructure-as-code meets regulatory and organizational policies. 
• Integrate technical controls to support monitoring, logging, and alerting consistent with RMF and CMMC requirements. 
• Partner with cybersecurity operations teams to support incident response, log review, and system hardening efforts. 

Vulnerability Management & Remediation 

• Lead the technical remediation of vulnerabilities identified through internal scans, third-party testing, or external audits. 
• Work with engineering and DevOps teams to drive secure patch management, system baseline enforcement, and automated vulnerability response workflows. 
• Maintain and operationalize vulnerability metrics dashboards aligned with continuous monitoring plans (ConMon). 

Audit Readiness & Documentation 

• Able to support and manage detailed system documentation including SSPs, network diagrams, control implementations, and POA&Ms. 
• Serve as a technical point of contact during audits and assessments, capable of demonstrating compliance posture through hands-on walkthroughs and evidence collection. 
• Collaborate with DevOps, Cybersecurity teams to translate security requirements into enforceable technical controls and testable artifacts. 

Cross-Functional Collaboration & Leadership 

• Partner with product, engineering, and compliance teams to implement secure system boundaries and customer segmentation strategies for multi-tenant environments. 
• Provide technical mentorship and occasional leadership to junior compliance engineers or project contributors. 
• Track emerging requirements and proactively update system configurations to meet evolving DoD IL5, IL6, and CMMC mandates. 

QUALIFICATIONS

• 10+ years of experience in cybersecurity engineering, cloud compliance, or DevSecOps roles. 
• Proven experience designing STIG-compliant configurations, including custom STIG development and validation. 
• Deep understanding of FIPS-validated encryption, TLS configurations, and cryptographic module implementation for data protection. 
• Hands-on experience with vulnerability scanning, remediation planning, and automated patching workflows. 
• Familiarity with DoD RMF (IL5 and IL6), CMMC and related audit frameworks. 
• Proficiency with tools such as Terraform, Ansible, Azure Policy, GitHub Actions, and common SIEM/logging platforms. 
• Experience with authorization boundary design and customer isolation techniques in AWS and Azure Gov environments. 
• Position requires an active security clearance. While all clearance levels will be considered, TS/SCI clearance holders are preferred.

PREFERRED SKILLS AND EXPERIENCE

• Experience with DoD RMF (IL5 and IL6) cloud environments. 
• Working knowledge of container security, particularly in AKS or Kubernetes-based deployments. 
• Basic people leadership experience, including mentoring or technical guidance responsibilities. 
• Industry certifications such as CISSP, CCSP, Azure Security Engineer, or relevant compliance certs (e.g., CMMC RP). 

COMPENSATION

• Colorado Base Salary: $195,000-$270,000
• California Base Salary: $205,000-$285,000
• Washington D.C. Base Salary: $205,000-$285,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Work Location—Successful candidates will be located near one of our office locations including Centennial, CO; Long Beach, CA; Colorado Springs, CO, or Washington D.C. 
• Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
• Physical demands—the physical demands of the job, including bending, sitting, lifting and driving.

This position will be open until it is successfully filled. To submit your application, please follow the directions below.
#LI-Onsite

YOUR MISSION 

As part of the Proposal team, you will join a team that sits at the heart of True Anomaly’s growth and revenue generation and be a critical driver of True Anomaly’s growth. As a member of a fast growing start-up, you will wear many hats and be expected to work autonomously and within cross-functional teams. You will be responsible for working closely with account leads on the business development team, and technical teams, to develop and write new content that can serve a multitude of use cases through the acquisition lifecycle, from early-stage capture and sales enablement activities to advanced proposal (RFx) artifacts. You must be able to translate technical jargon into a customer’s language, and deliver artifacts regularly at the highest quality, ensuring continued wins for the business. As a detail-oriented, effective communicator, and creative writer, you turn complex technical concepts into persuasive RFx, white papers, other collateral. By understanding customer requirements, you will effectively deliver content that aligns with a customer’s unique needs. You will write technical and non-technical explanations of our product offerings and deliver compelling proposals to win new business. We are looking for mission-driven teammates who can jump into any writing project with enthusiasm and produce qualitative outputs within tight deadlines.

RESPONSIBILITIES

• Serve as a primary author of Request for Information (RFI), Request for Proposal (RFP), Commercial Solutions Openings (CSO), and other capture opportunities
• Collaborate with internal teams to match our proposal language that will resonate with customers
• Translate technical concepts into easily digestible reading materials for a variety of audiences
• Create persuasive content that showcases our products’ strengths, capabilities, and solutions to address customer needs
• Take high-level details and raw inputs from colleagues and convert it into high-impact content for proposals
• Build templates and content from scratch that is easily modifiable across a variety of proposals and request for content
• Build content repository for repeatable assets to drive proposal efficiency

BASIC QUALIFICATIONS

• 5+ years’ experience writing, drafting, and editing proposals for U.S. Government contracts
• Experience with conveying technical concepts through concise and compelling written communication
• Demonstrated experience collaborating with a team on a joint output, across departments / agencies / roles, and writing content that requires input from multiple stakeholders
• Knowledge and experience with Federal Acquisitions Regulations (FAR) and Defense Federal Acquisitions Regulations (DFAR).
• Ability to quickly understand technical concepts, proactively learn with minimal instruction, and think creatively to produce artifacts
• Passion for writing.

PREFERRED SKILLS AND EXPERIENCE 

• Active TS or TS/SCI clearance preferred, SAP experience a bonus
• Preference for Engineering and other STEM-Bachelor’s degrees.  

• Start-up experience and/or previous experience with a major U.S. Defense Contractor (space sector ideal)

 ADDITIONAL REQUIREMENTS 

• Strong preference for candidates based in the Washington, DC area (DMV metro) who can work flexibly and come to our local office (Arlington, VA) regularly.

COMPENSATION: $110-150k pending experience and desire to work hard

YOUR MISSION 

Lead the organization’s government affairs strategy to advance space superiority objectives through proactive engagement with U.S. government stakeholders. 

RESPONSIBILITIES 

• Executive Branch Engagement 
  • Build and maintain relationships with key agencies (DoW, U.S. Space Force, Intelligence Community, and the Executive Office of the President).
  • Advocate for policies and programs that align with the company’s mission and national security priorities.
  • Coordinate briefings and meetings with senior administration officials to influence space policy and acquisition strategies. 

• Legislative Branch Engagement 
  • Develop and execute strategies to engage Congress, including members, committees, and staff focused on defense, space, and technology.
  • Prepare and deliver position papers and legislative proposals to support funding and policy objectives.
  • Monitor and analyze legislation impacting space defense and commercial space operations; advise leadership on implications.
• Policy Development and Advocacy
  • Shape and communicate the company’s positions on space security and innovation.
  • Represent the organization in industry coalitions and public-private partnerships to influence policy outcomes.
• Strategic Communications
  • Draft briefing materials, talking points, and reports for executive leadership and government stakeholders.
  • Ensure consistent messaging across all government engagement activities.
• Cross-Functional Collaboration
  • Partner with business development, legal, and program teams to align government affairs activities with contract opportunities and strategic growth initiatives. 

QUALIFICATIONS 

• 15+ years of relevant experience in government affairs, public policy, or defense-related roles, with a proven ability to develop and execute strategic engagement plans. 

• Deep understanding of U.S. government processes, including executive and legislative branch operations including authorizations and appropriations, PPBE budget process, defense acquisition, and space policy frameworks. 

• Established relationships with key stakeholders in the Department of Defense, U.S. Space Force, Intelligence Community, and Congress. 

• Strong leadership and collaboration skills, with the ability to inspire teams and work cross-functionally with business development, legal, and technical groups. 

• Exceptional communication and presentation abilities, capable of articulating complex policy and technical concepts to diverse audiences, including senior government officials. 

• Analytical and strategic thinking, with the ability to interpret legislative and regulatory developments and make data-driven recommendations. 

• Ability to thrive in a fast-paced, dynamic environment, managing multiple priorities and adapting to evolving policy landscapes. 

• Eligibility for TS//SCI clearance and compliance with ITAR requirements (U.S. citizen or lawful permanent resident). 

COMPENSATION  

• Base Salary: $160,000 - $225,000

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education and experience. 

ADDITIONAL REQUIREMENTS 

• Eligibility for TS//SCI clearance and compliance with ITAR requirements (U.S. citizen or lawful permanent resident). 

• Work Location: this role will be at our Washington DC area facility. 

• Work environment is in a standard office, working at a desk or in a production factory. 

• Physical demands may include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20lbs. 

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Onsite  

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. 

We value diversity of experience, knowledge, backgrounds and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.