Cyber & A&A Security Lead - Level IV

AttainX; Silver Spring (MD); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Paid vacation

Medical/dental/vision coverage

401(k) match

Tuition reimbursement

Disability insurance

Accommodations

Job summary

AttainX, Inc. is seeking an experienced Cybersecurity / Assessment and Authorization (A&A) Team Lead to support a federal cybersecurity program.

This role provides leadership and technical oversight for SA&A activities across federal systems and cloud environments, including RMF assessments and ATO preparations. The candidate will coordinate with government stakeholders, review security artifacts, and mentor staff while driving process improvements to strengthen security posture.

Qualifications

• Bachelor's degree or higher in Information Systems, Cybersecurity, Information Technology, Computer Science, or related field.
• Four (4) years of combined relevant education and experience accepted in lieu of a degree.
• Knowledge of DOC, NOAA, and NWS IT security policies and implementation standards or similar organizations.
• Comprehensive understanding of NIST guidance, including NIST SP and FIPS.
• Experience leading teams of IT Security Specialists or Security Assessors.
• At least 5 years of recent experience applying IT security concepts and RMF assessments.

Responsibilities

• Lead and oversee full lifecycle Security Assessment and Authorization activities.
• Plan, coordinate, and manage assessment schedules, resources, and deliverables.
• Conduct security control assessments in accordance with NIST RMF and NIST SP 800-53.
• Review SAPs, SARs, VARs, POA&M recommendations, and ATO briefing materials.
• Conduct risk analyses and evaluate security control effectiveness.
• Assess cloud-hosted environments against federal cybersecurity requirements.
• Serve as the primary liaison between assessment teams and government stakeholders.
• Present assessment findings, risk determinations, and remediation recommendations.
• Support executive-level briefings and ATO decision activities.
• Mentor and guide cybersecurity personnel and assessment teams.
• Recommend security measures to protect organizational information assets.
• Implement process improvements that enhance assessment quality and efficiency.

Skills

Security leadership

RMF assessments

NIST SP 800-53

Cloud security

Team leadership

Governance

Education

Bachelor's degree

Job description

Position Title: Cybersecurity / Assessment and Authorization (A&A) Team Lead

Location: Hybrid-Remote / Silver Spring, MD (2 days on-site per week)

Clearance: Public Trust / US Citizenship Required

Position Overview

AttainX, Inc. is seeking an experienced and highly motivated Cybersecurity / Assessment and Authorization (A&A) Team Lead to support a federal cybersecurity program. This position provides leadership and technical oversight for Security Assessment and Authorization (SA&A) activities across multiple federal information systems and cloud environments. The successful candidate will lead teams performing Risk Management Framework (RMF) assessments, coordinate assessment activities with government stakeholders, evaluate security controls, develop authorization packages, and provide recommendations to support Authorization to Operate (ATO) decisions.

Required Qualifications

• Bachelor's degree or higher in Information Systems, Cybersecurity, Information Technology, Computer Science, or related field. Four (4) years of combined relevant education and experience will be accepted in lieu of a degree.
• Knowledge of DOC, NOAA, and NWS IT security policies and implementation standards or similar organizations.
• Comprehensive understanding of NIST guidance, including NIST Special Publications and FIPS.
• Experience leading teams of IT Security Specialists or Security Assessors.
• At least 5 years of recent experience applying IT security concepts, methodologies, principles, procedures, and industry-standard security tools.
• At least 5 years of recent experience with enterprise architecture methodologies, contingency planning, backup/recovery best practices, technical testing tools, and RMF assessments.
• Robust verbal and written communication skills.
• Effective interpersonal, project management, and organizational skills
• Ability to work effectively in a team-oriented environment.

Required Certification

• CISSP
• CISA
• GSNA
• CEH
• ISC2 CGRC
• CISM

Preferred Qualifications

• Bachelor's degree or higher in Information Systems, Cybersecurity, Information Technology, Computer Science, or related field.
• Experience assessing cloud-hosted systems in AWS, Azure, or GCP.
• Experience supporting federal ATO decisions and Continuous Authorization programs.
• Knowledge of High Value Asset (HVA) requirements.
• Clear-cut attention to detail and ability to manage multiple priorities.

Job Duties and Responsibilities

• Lead and oversee full lifecycle Security Assessment and Authorization activities.
• Plan, coordinate, and manage assessment schedules, resources, and deliverables.
• Conduct security control assessments in accordance with NIST RMF and NIST SP 800-53.
• Review SAPs, SARs, VARs, POA&M recommendations, and ATO briefing materials.
• Conduct risk analyses and evaluate security control effectiveness.
• Assess cloud-hosted environments against federal cybersecurity requirements.
• Serve as the primary liaison between assessment teams and government stakeholders.
• Present assessment findings, risk determinations, and remediation recommendations.
• Support executive-level briefings and ATO decision activities.
• Mentor and guide cybersecurity personnel and assessment teams.
• Recommend security measures to protect organizational information assets.
• Implement process improvements that enhance assessment quality and efficiency.

About Us

AttainX Inc. is SBA Certified 8(a), Women Owned Small Business (WOSB), Economically Disadvantaged WOSB (EDWOSB), CMMI Level 3, ISO 9001:2015 certified QMS, and a Gold Level SAFe Partner. For over 14 years, AttainX has delivered innovative IT and cloud-based solutions for a broad portfolio of federal clients, including USDA, NOAA, DOE, DHS, and DIA.

Benefits:

• Paid vacation
• Medical, dental, and vision coverage
• Matching 401(k) plan
• Tuition/training reimbursement
• Long & Short-Term Disability
• Accommodations: Individuals with disabilities may request reasonable workplace accommodations by contacting AttainX Human Resources directly and specifying the nature of the support needed.

EEO Commitment

AttainX is an Equal Employment Opportunity employer and prohibits discrimination in the workplace based on Title VII of the Civil Rights Act, VEVRAA, Section 503, and other applicable laws. These protections extend to all applicants and employees.

Physical Demands

This position requires extended periods of sitting, computer use, and communication via phone or email. Occasional lifting of up to 10 pounds may be necessary. Vision abilities required include close, distance, and peripheral vision as well as depth perception.

Work Environment

The work environment is typically moderate in noise and may require onsite presence during standard business hours.

AttainX Inc. is SBA Certified 8(a), Women Owned Small Business (WOSB), Economically Disadvantaged WOSB (EDWOSB), CMMI Level 3, ISO 9001:2015 certified QMS, and a Gold Level SAFe Partner. For over 14 years, AttainX has delivered innovative IT and clou