Cyber Security Manager

VulnU; Alexandria (VA); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking an experienced Cyber Security Manager to lead cybersecurity engineering, RMF/ATO, and security operations for the USCG C5ISC in Alexandria, VA. You will manage ISSOs, ISSEs, and incident response staff, guiding cloud security on AWS/Azure and enterprise systems.

You will oversee vulnerability remediation, continuous monitoring, and security control health while coordinating with government stakeholders, cloud teams, and program leadership to strengthen security posture and

Qualifications

• 8+ years in cybersecurity engineering, information assurance, security operations, or RMF/ATO.
• 3+ years direct technical people management or team leadership.
• Deep knowledge of NIST RMF, NIST SP 800-53, FISMA, ATO packages.
• Experience with AWS/Azure security in enterprise environments.

Responsibilities

• Lead multidisciplinary cybersecurity team and manage workloads with clear ownership.
• Oversee RMF/ATO activities and eMASS coordination across boundaries.
• Direct cybersecurity engineering across AWS and Azure environments.
• Coordinate with Coast Guard stakeholders, leadership, and vendors.

Skills

Cybersecurity leadership

RMF/ATO expertise

Incident response coordination

Cloud security AWS/Azure

Team management

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline

Tools

Jira

eMASS

Nessus/ACAS

Cloud platforms (AWS/Azure)

Job description

Join us in transforming how technology serves those who serve. At Leidos, we're not just delivering solutions – we're pioneering the future of defense and intelligence technology. Our diverse teams of innovators unite around a singular purpose: empowering our customers to succeed in their critical missions. We believe in leading with integrity, investing in our communities, and building sustainably for tomorrow. Your opportunity to lead transformation. Leidos is seeking an experienced Cyber Security Manager to lead cybersecurity engineering, risk management, authorization, and security operations support for the United States Coast Guard’s Command, Control, Communications, Computers, Cyber, and Intelligence Service Center (C5ISC) in Alexandria, VA. This hands-on technical leader will manage a multidisciplinary team of Information System Security Officers (ISSOs), Information System Security Engineers (ISSEs), and incident response engineering personnel supporting mission-critical AWS, Azure, and enterprise systems. The manager will work closely with Coast Guard cybersecurity leadership, authorizing stakeholders, cloud engineering and operations teams, and program management to strengthen security posture, accelerate compliant delivery, and reduce mission risk.Ready to engineer solutions that matter?The Cyber Security Manager is accountable for the quality, timeliness, and execution of cybersecurity activities across the USCG Cloud Modernization program. The role combines technical cybersecurity leadership, direct people management, integrated delivery planning, customer engagement, and continuous improvement. The manager must be able to challenge technical assumptions, remove blockers, and drive measurable progress across authorization, vulnerability remediation, security monitoring, and incident response—not simply administer compliance activities.Primary Duties:Lead, coach, recruit, and evaluate a multidisciplinary cybersecurity team of ISSOs, ISSEs, security engineers, and incident response personnel; establish clear ownership, backups, workload priorities, and accountability.Oversee NIST Risk Management Framework (RMF) execution and Authorization to Operate (ATO) activities across multiple cloud and enterprise authorization boundaries, including security control implementation, assessment readiness, evidence quality, continuous authorization support, and eMASS coordination.Direct cybersecurity engineering across AWS and Azure environments, partnering with Cloud Engineering and Cloud Operations on secure architecture, configuration baselines, identity/access controls, encryption, network security, Zero Trust, and DevSecOps integration.Own a disciplined vulnerability and remediation program covering vulnerability scans, STIG compliance, findings triage, Plan of Action and Milestones (POA&M) tracking, corrective-action ownership, due dates, verification, and risk escalation.Oversee continuous security monitoring, security control health, log and alert visibility, incident detection and response coordination, incident documentation, and corrective actions with appropriate Coast Guard stakeholders.Build integrated cybersecurity work plans, Jira backlogs, schedules, milestones, capacity forecasts, risks, and dependencies; ensure each authorization, assessment, remediation, and security engineering deliverable has an accountable owner and measurable completion criteria.Conduct technical and quality reviews of security plans, control narratives, architecture diagrams, assessment artifacts, contingency/incident response documentation, vulnerability evidence, and other authorization deliverables.Coordinate with government ISSOs, security control assessors, authorizing officials, CISO representatives, program leadership, vendors, and cross-functional delivery teams to resolve findings and maintain transparent status.Lead cybersecurity readiness reviews, tabletop exercises, remediation reviews, and operational process improvements; ensure continuity, tested procedures, and effective handoffs across the team.Provide clear, decision-oriented briefings on ATO status, security risks, POA&M aging, vulnerabilities, remediation progress, staffing constraints, and recommended mitigations to technical and executive stakeholders.Foster a proactive security culture through mentoring, technical standards, documented procedures, knowledge transfer, and repeatable Agile/DevSecOps delivery practices.Basic Qualifications: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline (or equivalent relevant experience, subject to program requirements).8 years of progressively responsible cybersecurity engineering, information assurance, security operations, or RMF/ATO experience, including 3 years supporting federal government contracts or programs.4 years of direct technical people management or cybersecurity team leadership, with responsibility for multidisciplinary teams and multiple concurrent workstreams.Deep practical knowledge of NIST RMF, NIST SP 800-53 security controls, FISMA, ATO packages, security assessment evidence, POA&Ms, and continuous monitoring.Experience leading vulnerability management, scan review, STIG remediation, control validation, incident response coordination, and security risk reporting. Strong technical understanding of securing AWS and/or Azure cloud environments, enterprise identity, network/security architecture, and infrastructure security controls.Experience managing integrated schedules, staffing/capacity plans, Jira or comparable work tracking, delivery dependencies, quality reviews, and risk mitigation using Agile and disciplined project management practices.Ability to lead technical investigations and communicate cybersecurity findings, architecture tradeoffs, remediation priorities, and executive-level recommendations clearly.Clearance Requirement: Current and active Public Trust, consistent with the existing USCG Cloud Modernization position requirements; ability to maintain required access. Preferred Qualifications:Experience supporting DHS, U.S. Coast Guard, DoD, or large federal civilian cloud modernization programs.Experience managing cybersecurity teams of 10 personnel across ISSO, ISSE, cyber engineering, and incident response functions.CISSP, CISM, Security , CCSP, CAP/CGRC, or comparable cybersecurity certification.Experience with eMASS, federal security assessment and authorization workflows, FedRAMP, DoD Impact Level requirements, and cloud authorization boundaries.Experience with ACAS/Nessus, DISA STIGs, SIEM/log monitoring, vulnerability remediation dashboards, and incident response processes.Knowledge of Zero Trust, cloud security automation, infrastructure as code, DevSecOps, and security governance.PMP, Certified ScrumMaster, or comparable project/delivery management credential.If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.Original Posting:October 16, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.Pay Range:Pay Range $131,300.00 - $237,350.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.