VERISONDE
Federal Cybersecurity Engineering

Subcontractor-ready cybersecurity support

Senior cybersecurity engineering and NIST-aligned compliance support for regulated environments. Available for unclassified federal and federal-adjacent engagements—ideal for part-time, surge, and backlog burn-down under prime contractors.

CISSP 15+ years IT Cyber Security Engineer III Veteran

Core capabilities

Focused support areas that map cleanly to federal cybersecurity delivery and oversight.

Security engineering

Implementation support for security controls, hardening, and secure configuration in hybrid environments.

  • Secure configuration baselines & hardening
  • Identity and access control support
  • Logging, monitoring, and detection alignment
  • Control implementation support (practice-based)

Compliance & risk (NIST-aligned)

Audit-ready documentation and evidence workflows aligned to NIST-based programs.

  • SSP development & maintenance
  • POA&M creation, triage, and burn-down
  • Control narratives, evidence, and traceability
  • Assessment readiness support (internal)

Vulnerability & incident support

Practical help to reduce exposure and improve response readiness (non-forensic support).

  • Vulnerability review & remediation planning
  • Patch / configuration risk prioritization
  • Incident response support (non-forensic)
  • Post-incident corrective action planning

Federal alignment

Experience translating regulated-environment security programs into clear control narratives, repeatable procedures, and evidence that stands up to review.

  • NIST familiarity: Comfortable operating in control-driven environments.
  • RMF support: Familiar with RMF concepts and documentation patterns (SSP/POA&M/evidence).
  • CMMC: Familiar with Level 2 objectives and NIST 800-171 control intent (not an assessor).
  • DoD baseline: CISSP aligns with common DoD 8570/8140 role requirements by billet.

What primes value

  • Low friction onboarding: clear scope, clean deliverables, predictable comms.
  • Documentation that matches reality: no “paper security.”
  • Calm execution: practical, no hype or over-promising.
  • Part-time friendly: evenings/weekends support for backlogs and surge needs.
Typical deliverables
  • SSP updates (boundary clarity + narratives)
  • POA&M triage + milestone plans
  • Evidence pack organization (by control)
  • Vuln findings → prioritized remediation backlog
  • Policy/procedure refresh aligned to practice

Credentials & background

Senior practitioner background with governance and engineering depth.

Certifications

  • CISSP
  • CEH (in progress)

Education

  • M.S. Information Technology
  • Graduate Certificate: Information Architecture
  • Graduate Certificate: Information Leadership & Management
  • B.S. Information Technology — CAE-CD validated Program of Study (POS-CD)
  • Advanced Technical Certificate: Cybersecurity & Cyberforensics

Experience

  • 15+ years in IT
  • Cyber Security Engineer III
  • Former System Administrator (4+ years)
  • U.S. Army Veteran • Disabled Veteran

Engagement models

Designed for subcontracting and part-time federal support without heavy overhead.

Part-time / surge support

Nights/weekends help for audit prep, backlog burn-down, documentation refresh, and remediation planning.

Fixed-scope deliverables

A defined outcome with clear acceptance criteria (e.g., SSP update, POA&M cleanup, evidence pack organization).

Hourly SME support

Flexible advisory support for teams that need senior judgment and execution without a full-time hire.

Note: Availability is scheduled around an existing full-time role. Conflicts of interest are disclosed up front. Engagements are accepted only when scope and boundaries are clear.

Professional inquiries

For prime/subcontracting opportunities or unclassified federal cybersecurity support, email scope, timeline, expected hours, and any compliance framework requirements.

Email hello@verisonde.com
Location: Remote-first
Engagement: 1099 subcontractor
Clearance: Eligible; open to sponsorship