Cybersecurity Lead

Maximus; Corridor North (MD); Sur place; USD 140 000 - 160 000; Plein temps

Résumé du poste

Maximus is seeking a senior cybersecurity technical lead to direct security initiatives for a federal contract. You will drive strategy, risk assessment, and remediation across critical systems while coordinating multi-site teams.

The role requires a US citizen with an active secret clearance and 10+ years in cybersecurity, strong RMF/NIST experience, and hands-on expertise in SIEM, vulnerability management, and incident response. On-site, on-call duties apply.

Qualifications

• Active Secret clearance required.
• US Citizens only.
• 10+ years of experience in cybersecurity or related fields.
• Strong knowledge of cybersecurity frameworks (NIST, RMF, FISMA).
• Experience leading cybersecurity teams and large-scale initiatives.
• Hands-on experience with SIEM, IDS/IPS, vulnerability scanners, and endpoint security solutions.
• Excellent communication and leadership across technical and executive teams.
• Residents within commutable distance for daily onsite work and on-call requirements.
• Contract supports 24x7x365 uptime and recall requirements.

Responsabilités

• Serve as primary cybersecurity technical lead for the contract.
• Develop and implement cybersecurity strategies, frameworks, and policies to enhance security posture.
• Lead POA&M and ISVM remediation efforts and coordinate actions and reporting.
• Manage co-located cybersecurity teams and ensure effective collaboration and workload alignment.
• Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.
• Provide guidance and mentorship to cybersecurity engineers and analysts.
• Lead security architecture reviews and technical assessments to identify and mitigate risks.
• Collaborate with stakeholders to align security requirements with business needs.
• Support continuous monitoring, security audits, and regulatory compliance efforts.
• Identify and coordinate remediation of deprecated protocols per federal standards.
• Communicate risks, remediation progress, and emerging issues to government leadership.
• Serve as primary point of contact for security deliverables and PMR updates.
• Oversee vulnerability scanning scheduling, results analysis, remediation prioritization, and reporting.
• Oversee PKI certificate management activities.
• Participate in on-call rotation to support security operations.

Connaissances

Cybersecurity leadership

NIST RMF FISMA

Vulnerability management

Incident response

SIEM

IDS/IPS

Endpoint security

Communication skills

On-call coordination

Team mentorship

Outils

SIEM

IDS/IPS

Vulnerability scanners

Endpoint security

PKI management

Description du poste

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS034, T4, Band 7Job - Specific Essential Duties and Responsibilities:- Serve as the primary cybersecurity technical lead for the contract, ensuring compliance with Homeland Security policies and directives.- Develop and implement cybersecurity strategies, frameworks, and policies to enhance the security posture of critical systems.- Lead Plan of Action and Milestones (POA&M) and Information System Vulnerability Management (ISVM) remediation efforts by tracking findings, coordinating corrective actions, validating closure evidence, and reporting status to stakeholders.- Manage and coordinate co-located cybersecurity teams, ensuring effective collaboration, workload alignment, and consistent execution of mission priorities.- Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.- Provide guidance and mentorship to cybersecurity engineers and analysts.- Lead security architecture reviews and technical assessments to identify and mitigate risks.- Collaborate with stakeholders to ensure security requirements align with business and operational needs.- Support continuous monitoring, security audits, and regulatory compliance efforts.- Identify and coordinate the remediation of deprecated protocols, ensuring secure configurations align with federal cybersecurity standards and operational requirements.- Communicate cybersecurity risks, remediation progress, and emerging issues to government leadership, providing timely updates, clear recommendations, and escalation support as needed.- Serve as the primary point of contact for all security-related deliverables, coordinating inputs, and ensuring timely and accurate submissions.- Provide cybersecurity updates during monthly Program Management Reviews (PMRs).- Oversee vulnerability scanning activities, including scan scheduling, results analysis, remediation prioritization, and reporting.- Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.- Provide guidance and mentorship to cybersecurity engineers and analysts.- Lead security architecture reviews and technical assessments to identify and mitigate risks.Collaborate with stakeholders to ensure security requirements align with business and operational needs.- Support continuous monitoring, security audits, and regulatory compliance efforts.Identify and coordinate the remediation of deprecated protocols, ensuring secure configurations align with federal cybersecurity standards and operational requirements.- Communicate cybersecurity risks, remediation progress, and emerging issues to government leadership, providing timely updates, clear recommendations, and escalation support as needed.- Serve as the primary point of contact for all security-related deliverables, coordinating inputs, and ensuring timely and accurate submissions.- Provide cybersecurity updates during monthly Program Management Reviews (PMRs).- Oversee vulnerability scanning activities, including scan scheduling, results analysis, remediation prioritization, and reporting.- Provide oversight of Public Key Infrastructure (PKI) certificate management activities performed by the team, ensuring timely issuance, renewal, deployment, inventory tracking, and expiration monitoring.- Participate in an on-call rotation to support security operations and incident response.Job - Specific Minimum Requirements:- Active Secret clearance is required.- Due to contract requirements, only US Citizens can be considered.- 10+ years of experience in cybersecurity, IT security, or related fields.- Strong knowledge of cybersecurity frameworks (e.g., NIST, RMF, FISMA) and best practices.- Experience leading cybersecurity teams and managing large-scale security initiatives.- Hands-on experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint security solutions.- Strong communication and leadership skills, with the ability to work across technical and executive teams.- Candidates must reside within a commutable distance for daily onsite work and on-call requirements.- This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including participation in a rotational on-call schedule.Minimum RequirementsTCS034, T4, Band 7Preferred Skills and Qualifications:- DHS Suitability.- Experience supporting Homeland Security or other federal agencies.- CISSP certification is highly preferred (Additional certifications such as CISM, CISA, or CEH are a plus).#techjobs #clearance #veteransPage #APPCASTDTOEEO StatementMaximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.Pay TransparencyMaximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.AccommodationsMaximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process-including accessing job postings, completing assessments, or participating in interviews,-please contact People Operations at [e-mail] .Minimum Salary$140,000.00Maximum Salary$160,000.00