Guardian Nexus is a cleared engineering firm. Our engineers design secure systems for classified and multi-level environments, independently evaluate Cross Domain Solutions and CSfC architectures, and support both sides of an acquisition decision.
For Department of War programs, the system integrators who build for them, and the vendors who sell into them.
Architecture, design, and hardening of secure systems for classified and sensitive environments: security control implementation, RMF authorization support, STIG compliance, and systems engineering across multiple classification levels. We also author the documentation that goes with it: technical white papers, design descriptions, and the RMF body of evidence, including system security plans, security assessment reports, and POA&Ms.
Independent testing and evaluation of Cross Domain Solutions for multi-level security environments, including verification of NCDSMO Raise the Bar requirements for transfer, access, and MLS systems. On the CSfC side, component and solution-level testing aligned with NSA Capability Packages. In both cases we author the security test plans and procedures as well as executing them.
Requirements analysis and technical support on both sides of a buying decision. For a program office: decomposing mission need into requirements a vendor can be held to, running trade studies and analyses of alternatives, and assessing a proposed solution against the requirements it claims to meet. For a vendor: getting a product ready for the evaluation it will face. Security controls are often part of this work but rarely the whole of it, and we do not take both sides on the same system.
Adversary simulation and network penetration testing against real-world threat models, to establish how an attacker would breach the environment before one does. This is the work to commission when the question is whether a control holds up under someone actively trying to defeat it.
Multi-framework compliance scanning for SOC 2, PCI-DSS, HIPAA, ISO 27001, and CMMC Level 2, built out of the evidence collection we were doing by hand.
Resume screening and job matching for hiring teams in defense, technology, and government contracting. Every candidate score shows the evidence behind it rather than a bare number.
Visit resumenex.usGuardian Nexus provides security engineering, independent test and evaluation, and compliance automation to Department of War programs, defense contractors, and regulated industries.
Our team holds active security clearances and brings more than twenty years across cybersecurity, systems engineering, and defense programs. We know classified environments, compliance mandates, and the operational realities of the defense industrial base, including how long an accreditation takes.
We do not evaluate a system we engineered, or coach a vendor through a test we are administering. If an engagement would put us on both sides, we say so before it starts.
Tell us the environment, the deadline, and the standard you are being held to, and we will tell you what testing it needs.
