Open to opportunities

Leann Leichtweis

@leannleichtweis

Message

I assess federal cloud and on-premises systems against FISMA and NIST controls to strengthen compliance readiness.

United States

Message

What I'm looking for

I'm looking to continue strengthening federal security posture through FISMA and NIST-based assessments, evidence review, risk analysis, assessor training, and collaboration with system stakeholders.

At Valiant supporting the IRS, I train and quality-review assessors delivering enterprise third-party security control assessments across cloud and on-premises federal systems. I review SARs, SCTMs, AILs, SSPs, technical evidence, findings, and risk determinations to ensure conclusions are accurate, consistent, and defensible.

Previously at Teracore, Tria Federal supporting DHS and the U.S. Secret Service, and CybertLabs, I conducted FISMA assessments, supported ATO and reauthorization activities, and partnered with ISSOs and system stakeholders to evaluate control effectiveness and compliance readiness. My work includes analyzing vulnerability, compliance, and web scans; audit logs; STIG reports; POA&Ms; and Risk-Based Decisions.

I'm Security+ certified with Secret and DHS Public Trust clearances, and I bring hands-on experience with NIST SP 800-53, RMF, FedRAMP, Qualys, Microsoft Sentinel, Splunk, CSAM, Qmulos, and Nessus.

Experience

Work history, roles, and key accomplishments

Current

Security Control Assessment Training & Review Specialist

Current

Valiant

Aug 2026 - Present (0 months)

Served as a senior training and quality review resource for enterprise-level third-party security control assessments of cloud-based and on-prem federal information systems, ensuring alignment with FISMA and NIST SP 800-53. Trained and mentored assessors, reviewed work products, and provided technical guidance on complex control implementations.