Are you ready for new challenges and new opportunities?
Join our team!
Current job opportunities are posted here as they become available.
| Department: | Federal Civilian |
| Location: | Washington, DC |
This is a remote position.
Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile methods, our team creates products that meet people’s needs and transform their experience of government.
Work on things that matter
Our collaborations have shaped some of the defining moments in public-sector service delivery. We’ve helped build products that connect Veterans to tailored services, help millions access affordable health care, and support important programs like Head Start. As we work with agencies to deliver critical services, we’re also changing how the government approaches technology.
Built for a remote life
Our culture, communications, and tools are built for remote work, enabling us to bring together top talent nationwide. At Ad Hoc, remote life empowers our teams to design work environments that fit their lives and that foster flexibility and collaboration to achieve positive outcomes for our customers.
Committed to high expectations and a welcoming culture
Ad Hoc values acceptance, accountability, and humility. We aren’t heroes. We learn from our mistakes and improve the process for the next time. We build small, inclusive teams to collaborate closely with our partners to solve the right problems and deliver software that works.
The Federal Civilian business unit supports many customers spanning the federal, commercial, and nonprofit space. Our customers include NASA, the General Services Administration, Office of Personnel Management, the Library of Congress, Health & Human Services, and the FDIC. We partner with these agencies to build new capabilities, deliver products, establish data as a strategic asset for informed decision-making, modernize legacy systems, and build the digital service infrastructure necessary to scale their mission impact.
Primary Responsibilities:
Security and Compliance Manager II serves as an individual contributor within a team; with the support and guidance of leadership, you will be responsible for supporting the goal of meeting scope, schedule and delivery requirements. You will begin to develop an awareness and understanding of the security and compliance within your designated program, as well as interact with stakeholders. Primary expectations for a Security and Compliance Manager II include:
Conducts security control tests of design and operational effectiveness
Manages remediation tasks to completion on tight deadlines
Supports internal and external auditors
Maintains documentation related to security compliance
Identifies opportunities for security compliance control automation
Maintains security compliance automation tasks
Building an understanding of at least two security control frameworks (e.g. SOC, NIST, etc.)
Works towards understanding how compliance works with cloud-native tech stacks
onboarding for new developers
Exhibits understanding for other roles and practices, including how they are intended to work together
Participates in planning sessions to ensure security and compliance requirements are met
Basic Qualifications:
Bachelor’s degree in computer science, information assurance, cybersecurity or related field, 3+ years of experience
Relevant years of experience may be substituted for education
At least 2+ years experience working with a SaaS company and passion for learning and working in compliance programs
Operate effectively in a fast-paced environment managing multiple concurrent security requests and priorities
Support recurring security processes including security impact analysis, risk assessments, remediation tracking, and ongoing documentation updates
Apply NIST security controls (preferably NIST 800-53) within a GRC/RMF framework to evaluate system security posture
Assist in translating security control requirements into actionable guidance for engineering teams.
Demonstrate the ability to work independently by researching existing documentation, standards, and previous artifacts to resolve questions before escalating.
Maintain and update security artifacts and documentation in Jira and Confluence, ensuring accuracy and completeness
Work closely with DevOps, infrastructure, and data engineering teams to review system changes and assess potential security impact
Participate in security reviews and risk discussions related to cloud and data platform environments
Monitor and follow through on remediation efforts and POA&M-style tracking until closure
Communicate proactively in team channels (Slack), surfacing blockers early and providing clear status updates
Demonstrate strong attention to detail to minimize rework and repeated review cycles
Take initiative in identifying potential risks, gaps, or improvements within security processes
Preferred Qualifications:
Ability to obtain/maintain: CompTIA Sec+
Hands-on experience with AWS security fundamentals (IAM policies, S3 permissions, access control review)
Familiarity with GitHub workflows and repository access management
Exposure to Databricks or data platform security, including workspace access or data governance considerations
Experience working in regulated or compliance-driven environments (RMF, FedRAMP, CMS ARS, etc.)
Experience identifying process improvements or automation opportunities within security operations
To learn more about working at Ad Hoc, please visit:https://adhocteam.us/join
Benefits:
Ad Hoc LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, sex, sexual orientation, gender identity or expression, religion, age, pregnancy, disability, work-related injury, covered veteran status, political ideology, marital status, or any other factor that the law protects from employment discrimination.
In support of various state and city equal pay transparency laws, Ad Hoc job descriptions feature the starting range we reasonably expect to pay to candidates who would join our team with little to no need for training on the responsibilities we've outlined above. Actual compensation is influenced by a wide range of factors including but not limited to skill set, level of experience, and responsibility. The range of starting pay for this role is $100,000-120,000. Our recruiters will be happy to answer any questions you may have, and we look forward to learning more about your salary requirements.
job reference:
https://adhoc.team/