Your Dream. Our Team.

About Rise8

We’re transforming the United States Government and we know that takes a dream team. 

We believe customer experience starts with employee experience, so we take care of our employees. We offer competitive pay and benefits, invest in employee growth, and offer a culture you can’t find anywhere else.

At Rise8, we continuously achieve unreached heights through next-level tech, and on-the-level collaboration. Together, we create continuous impact. We turn breakdowns into breakthroughs, make small steps into giant leaps, and deliver game-changing products through culture-changing process.

We pair Risers with their customer counterparts and practice pairing at every moment to elevate people and teams and deliver results fast and forever. We work in small teams and rotate between them frequently so that we are able to meet new challenges and explore new ideas.

Our methodology is about experimenting and learning, and our culture is empowering. We subscribe to an ethos of kindness. We make a point to bring empathy to each and every project and are guided by a promise and a purpose: to deploy critical outcomes to prod in order to drive relentless progress. Not just an idea. But an outcome. A better world. A world where every day, fewer bad things happen because of bad software.

Rise8 is certified as a Great Place to Work with 100% of employees saying they love working here.

About You

• You want to make tomorrow better than today. 
• You have a passion for high-speed security and you care about risk management over compliance.
• You believe the biggest vulnerability in any system is time. You live to securely reduce cycle time.
• You enjoy daily decision making and real product delivery.
• You help ensure project success and client satisfaction. 
• You enjoy collaborative teams, pairing with team members, and inviting your clients to participate. 
• You like to work alongside, and learn from, lean and agile leaders. 
• You are a creative problem solver who is comfortable with uncertainty.
• You’re a curious and keen learner who thrives on enhancing your (and our) practices and knowledge.

As a Director of Cybersecurity at Rise8, you will:

Drive Rise8’s cybersecurity posture and practice across delivery and client engagements. You’ll own CMMC readiness and compliance, SCG/CUI governance, and act as our cATO SME while building and scaling a high-trust Cyber Practice that supports both internal operations and customer missions. This is a hands-on leadership role that blends technical depth (architecture, DevSecOps, secure cloud operations) with program-level responsibility (SSP/POA&M ownership, audit readiness, customer briefings, staffing and capability delivery).

• Own CMMC (2.0) program delivery end-to-end — policy, System Security Plans (SSPs), POA&Ms, evidence collection, assessor engagements, and audit readiness.
• Lead SCG / CUI governance: define handling policies, training, marking/labeling guidance, and cross-contract controls.
• Serve as the company cATO SME: design and operationalize continuous Authorization-to-Operate approaches, advise customers on sustainment, and integrate continuous monitoring tooling and processes.
• Build and lead the Cyber Practice: define service offerings (advisory, readiness, implementation, managed services), craft go-to-market materials, scope engagements, and own delivery quality.
• Provide technical leadership on secure architecture, cloud security (AWS/Azure/GCP), identity & access management, DevSecOps integration, vulnerability management, SIEM/SOAR operations, and incident response.
• Drive evidence collection and tooling integration to make compliance repeatable and auditable (automation of evidence, drift detection, configuration baselines).
• Support proposals, SOWs, pricing, and technical capture; brief executives and DoD/federal customers on security strategy and risk posture.
  Hire, mentor, and grow cybersecurity staff and contractors; establish OKRs, career bands, and practice playbooks.
• Partner closely with IT, Delivery, Legal, and People Ops to ensure contract-level security obligations are satisfied and sustained.
• Maintain relationships with assessors, auditors, third-party vendors, and MSSPs; select and manage partners as needed.
• Run tabletop exercises, incident post-mortems, and continuous improvement cycles to reduce risk and harden operations.
• Measure and report on cyber KPIs (POA&M closure rate, time-to-remediate, control maturity, audit status) for leadership and customers.

Qualifications:

• 10+ years in cybersecurity roles with a minimu