CISO

Everforth, Inc.; Sierra Vista (AZ); On-site; USD 180,000 - 260,000; Full time

Job summary

Everforth ECS is seeking a CISO to lead the Army Endpoint Security Solution program from our Sierra Vista, AZ office. The role requires senior cybersecurity leadership, DoD experience, and expert knowledge of RMF, NIST SP 800-53, and DISA STIGs.

You will oversee Information Assurance, Security Operations Center, and vulnerability management, ensuring compliance across endpoints, servers, networks, and customer-facing services. Strong communication with program leadership is essential.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related discipline.
• 16+ years of cybersecurity experience.
• Demonstrated DoD environment experience.
• CISSP or CISM certification and ITIL familiarity.

Responsibilities

• Provide senior cybersecurity leadership and act as principal security advisor to the Army Endpoint Security Solution program manager.
• Lead cybersecurity strategy, governance, risk management, information assurance, security operations, and compliance activities.
• Oversee Information Assurance and SOC personnel and ensure RMF, NIST 800-53, DoD requirements, DISA STIGs, and continuous monitoring.
• Ensure security of endpoint, backend, and frontend infrastructure, servers, networks, and customer-facing capabilities.
• Coordinate with multiple teams (endpoint engineering, infrastructure, network, systems administration, identity, cloud, service desk, compliance, operations) and support audits.

Skills

Security leadership

Risk management

DoD compliance

RMF/NIST SP 800-53

SOC oversight

Vulnerability management

Zero Trust

Incident response

Education

Bachelor's degree in cybersecurity/CS/IS/engineering

Tools

ACAS

Nessus

SCAP

STIG Viewer

SIEM

SOAR

EDR tools

Job description

ECS is seeking a CISO to work in our Sierra Vista, AZ office.

The Chief Information Security Officer will serve as the senior cybersecurity leader and principal security advisor to the Program Manager for The Army Endpoint Security Solution (AESS). This role is responsible for protecting the service delivery environment, including back-end and front-end security infrastructure, endpoints, servers, networks, customer-facing services, and supporting operational platforms.

The CISO will lead cybersecurity governance, risk management, information assurance, security operations, compliance, documentation, and policy activities across the program. The role provides oversight of Information Assurance and Security Operations Center personnel and ensures program alignment with DoD requirements, RMF, NIST SP 800-53, DoD security baselines, DISA STIGs, ACAS scanning, continuous monitoring, vulnerability management, and Zero Trust principles.

• Senior security advisor to the Program Manager on cybersecurity risk, compliance, security operations, incident response, and mission assurance matters.
• Lead the cybersecurity strategy for the AESS.
• Oversee Information Assurance and SOC personnel, including day-to-day security operations, compliance activities, documentation, reporting, and process improvement.
• Ensure the security of service delivery infrastructure, including endpoint security platforms, backend systems, frontend services, servers, networks, administrative access paths, and customer-facing capabilities.
• Provide oversight of SOC, including monitoring, alert triage, incident response, threat hunting, detection engineering, escalation management, SIEM/EDR operations, and security reporting.
• Lead Information Assurance activities, (RMF support, control documentation, evidence collection, assessment readiness, POA&M management, continuous monitoring, and security authorization support).
• Ensure compliance with NIST SP 800-53, DoD cybersecurity requirements, DoD security baselines, DISA STIGs, ACAS scanning requirements, and applicable customer security policies.
• Oversee vulnerability management activities, (ACAS scan coordination, findings analysis, remediation tracking, risk reporting, and compliance validation).
• Ensure STIG compliance is implemented, documented, reviewed, and maintained across applicable endpoints, servers, applications, databases, infrastructure, and network devices.
• Develop, maintain, and enforce cybersecurity policies, standards, plans, procedures, playbooks, runbooks, and security documentation.
• Establish/maintain program-level cybersecurity risk management process, (risk identification, tracking, mitigation recommendations, and risk reporting).
• Advise on security impacts of architecture changes, service enhancements, onboarding/offboarding activities, integrations, and operational changes.
• Provide regular security posture updates to the Program Manager, customer stakeholders, and internal leadership.
• Track/report key security metrics, (incident trends, vulnerability status, POA&M progress, compliance posture, SOC performance, and remediation activities).
• Coordinate with endpoint engineering, infrastructure, network, systems administration, identity, cloud, service desk, compliance, and operations teams.
• Support audits, assessments, inspections, cybersecurity reviews, and contract deliverables.
• Mentor and guide security personnel while promoting a culture of accountability, mission support, and continuous improvement.
• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related discipline.
• Minimum of 16 years of cybersecurity experience.
• Demonstrated experience supporting Department of Defense environments.
• Experience in a senior cybersecurity leadership, information assurance, security operations, security architecture, or cyber risk management role.
• Strong knowledge of RMF, NIST SP 800-53, DoD cybersecurity requirements, DISA STIGs, DoD security baselines, POA&M management, continuous monitoring, and vulnerability management.
• Experience overseeing SOC activities, including security monitoring, alert triage, incident response, threat hunting, detection engineering, escalation, and reporting.
• Familiarity with endpoint security, infrastructure security, network security, server security, identity and access management, logging, monitoring, and vulnerability management technologies.
• Strong understanding of Zero Trust concepts and their application in enterprise or government environments.
• Excellent written and verbal communication skills, including the ability to brief technical risk to program leadership, government customers, and non-technical stakeholders.
• Must be local to the Sierra Vista, AZ
• CISSP or CISM
• ITIL Certification

Desired Skills

• Master’s degree in cybersecurity, information assurance, computer science, information systems, business, or a related field.
• Experience with ACAS, Nessus, SCAP, STIG Viewer, SIEM platforms, SOAR platforms, EDR tools, ticketing systems, and enterprise monitoring platforms.
• Experience supporting DoD authorization activities, audits, inspections, cybersecurity readiness reviews, or assessment events.
• Familiarity with DoD 8140 or DoD 8570 cybersecurity workforce requirements.
• Experience operating within an MSP, MSSP, or multi-customer government service delivery model.
• Experience developing executive briefings, security metrics, dashboards, compliance reports, and operational performance reporting.

The ideal candidate is a senior cybersecurity leader with deep DoD experience, strong knowledge of security operations and information assurance, and the ability to serve as the program’s principal security authority. This individual can lead teams, advise program leadership, manage cybersecurity risk, protect MSP service delivery operations, and ensure compliance across a complex endpoint security environment.

#EverforthECS1

ECSFederal LLCis an equal opportunity employer and does not discriminate or allow discrimination on the basisany characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or localjurisdictionlaw.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over10,000 employees. Ournearly 3,500professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference withEverforthECS!

Our Company

Our Culture

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

Meet the challenge. Make a difference with Everforth ECS!

EEO is the Law

ADP Privacy Statement

Artificial Intelligence

Google Privacy Policy

Google Terms of Service