Cybersecurity Lead

Lucayan Technology Solutions LLC; Deutschland; On-site; EUR 80,000 - 116,000; Part time

Job summary

AtLucayan Technology Solutions LLC is seeking a Cybersecurity Lead to direct RMF/ATO activities for a DoD emergency mass notification system. You will own the authorization package from boundary definition through AO decision support, collaborating with engineering and field teams on an accelerated schedule.

Requires 5+ years of DoD RMF experience, eMASS/Nessus, and the ability to obtain DoD CAC and base access.

Qualifications

• 5+ years of DoD RMF experience including leading systems through ATO.
• Experience writing SSPs, ISAs, and security architecture documentation.
• Hands‑on with eMASS, STIG/SRG, ACAS, and POA&M management.
• Ability to obtain a DoD CAC and military base access.
• Legally authorized to work in the United States.

Responsibilities

• Lead the full RMF lifecycle: boundary definition, categorization, control selection, implementation, assessment, and authorization.
• Author SSPs, control narratives, network and data-flow diagrams, and ISAs.
• Apply STIGs/SRGs, run SCAP, Evaluate-STIG, and ACAS/Nessus scans, and maintain hardened baselines.
• Manage findings, POA&Ms, patching, and IAVM records, and direct field staff on remediation.
• Prepare an eMASS-ready ATO package and support assessor reviews, AO briefings, and IATT when needed.
• Deliver continuous-monitoring and patch-management plans, weekly status reports, and closeout knowledge transfer.

Skills

RMF experience

Tools

eMASS

STIG/SRG

ACAS

Nessus

SCAP

Job description

AtLucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Location: This is a US-based remote position, with approved on-site work at a U.S. military installation in Germany as needed.

• On-site travel is scheduled in advance and approved travel costs are covered.

Employment Type: Part-Time Contract
Security Clearance: Must be eligible for a DoD Common Access Card (CAC) and military base access

Status: Actively Hiring

Job Summary

We are looking for an experienced Cybersecurity Lead to direct the Risk Management Framework (RMF) and Authority to Operate (ATO) effort for a new Department of Defense emergency mass notification system. You will own the authorization package from boundary definition through AO decision support, working alongside the engineering and installation team on an accelerated schedule.

Key Responsibilities

• Lead the full RMF lifecycle: boundary definition, categorization, control selection, implementation, assessment, and authorization
• Author the SSP, control narratives, network and data-flow diagrams, and interconnection security agreements (ISAs)
• Apply STIGs/SRGs, run SCAP, Evaluate-STIG, and ACAS/Nessus scans, and maintain hardened baselines
• Manage findings, POA&Ms, patching, and IAVM records, and direct field staff on remediation
• Secure system APIs and provide cybersecurity test procedures and evidence for acceptance testing
• Prepare an eMASS-ready ATO package and support assessor reviews, AO briefings, and IATT when needed
• Deliver continuous-monitoring and patch-management plans, weekly status reports, and closeout knowledge transfer

Required Qualifications

• Legally authorized to work in the United States
• Ability to obtain a DoD CAC and military base access
• Minimum 5 years of DoD RMF experience, including leading systems through ATO
• Hands‑on experience with eMASS, STIG/SRG compliance, ACAS, and POA&M management
• Experience writing SSPs, ISAs, and security architecture documentation
• Valid U.S. passport or ability to obtain one before travel

Preferred Qualifications

• Greenfield (new system) ATO experience
• Air Force or overseas (OCONUS) installation experience
• Familiarity with mass notification, unified communications, or VoIP systems
• Interim Authority to Test (IATT) experience

Certifications

• DoD 8570/8140 IAM Level II-compliant certification required (e.g., CISSP, CISM, CASP+/SecurityX, CGRC/CAP, GSLC, CCISO)
• DoD Cyber Awareness and Antiterrorism/Force Protection training completed upon hire