Job - Specific Essential Duties and Responsibilities:
- Serve as the primary cybersecurity technical lead for the contract, ensuring compliance with Homeland Security policies and directives.- Develop and implement cybersecurity strategies, frameworks, and policies to enhance the security posture of critical systems.- Lead Plan of Action and Milestones (POA&M) and Information System Vulnerability Management (ISVM) remediation efforts by tracking findings, coordinating corrective actions, validating closure evidence, and reporting status to stakeholders.- Manage and coordinate co-located cybersecurity teams, ensuring effective collaboration, workload alignment, and consistent execution of mission priorities.
- Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.
- Provide guidance and mentorship to cybersecurity engineers and analysts.
- Lead security architecture reviews and technical assessments to identify and mitigate risks.
- Collaborate with stakeholders to ensure security requirements align with business and operational needs.
- Support continuous monitoring, security audits, and regulatory compliance efforts.
- Identify and coordinate the remediation of deprecated protocols, ensuring secure configurations align with federal cybersecurity standards and operational requirements.
- Communicate cybersecurity risks, remediation progress, and emerging issues to government leadership, providing timely updates, clear recommendations, and escalation support as needed.
- Serve as the primary point of contact for all security-related deliverables, coordinating inputs, and ensuring timely and accurate submissions.
- Provide cybersecurity updates during monthly Program Management Reviews (PMRs).
- Oversee vulnerability scanning activities, including scan scheduling, results analysis, remediation prioritization, and reporting.
- Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.- Provide guidance and mentorship to cybersecurity engineers and analysts.- Lead security architecture reviews and technical assessments to identify and mitigate risks.Collaborate with stakeholders to ensure security requirements align with business and operational needs.- Support continuous monitoring, security audits, and regulatory compliance efforts.Identify and coordinate the remediation of deprecated protocols, ensuring secure configurations align with federal cybersecurity standards and operational requirements.- Communicate cybersecurity risks, remediation progress, and emerging issues to government leadership, providing timely updates, clear recommendations, and escalation support as needed.- Serve as the primary point of contact for all security-related deliverables, coordinating inputs, and ensuring timely and accurate submissions.- Provide cybersecurity updates during monthly Program Management Reviews (PMRs).- Oversee vulnerability scanning activities, including scan scheduling, results analysis, remediation prioritization, and reporting.- Provide oversight of Public Key Infrastructure (PKI) certificate management activities performed by the team, ensuring timely issuance, renewal, deployment, inventory tracking, and expiration monitoring.- Participate in an on-call rotation to support security operations and incident response.
Job - Specific Minimum Requirements:
- Active Secret clearance is required.
- Due to contract requirements, only US Citizens can be considered.
- 10+ years of experience in cybersecurity, IT security, or related fields.
- Strong knowledge of cybersecurity frameworks (e.g., NIST, RMF, FISMA) and best practices.
- Experience leading cybersecurity teams and managing large-scale security initiatives.
- Hands-on experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint security solutions.
- Strong communication and leadership skills, with the ability to work across technical and executive teams.
- Candidates must reside within a commutable distance for daily onsite work and on-call requirements.
- This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including participation in a rotational on-call schedule.
