Cybersecurity Lead

Cybersecurity Jobs; Huntsville (AL); On-site; USD 120,000 - 160,000; Full time

Job summary

Ignite Fueling Innovation is seeking a Cybersecurity Lead to support the U.S. Army at Redstone Arsenal in Huntsville, AL.

The role directs the contract cybersecurity program and serves as the primary contact for cybersecurity and information-systems security engineering, including RMF/A&A, security engineering, assessments, authorization, and continuous monitoring across both classified and unclassified systems.

Qualifications

• 10+ years of cybersecurity/IA policy and compliance experience (Senior/Lead).
• Experience leading Certification & Accreditation, RMF/A&A, audits, security-plan reviews, risk assessments and security testing.

Responsibilities

• Establish and operate the contract cybersecurity program.
• Act as primary ISSE/ cybersecurity point of contact and oversee ISSM support.
• Lead RMF planning, control selection, assessment, and authorization.
• Coordinate ATO/ATC/IATT with stakeholders and maintain RMF artifacts.

Skills

10+ years cybersecurity

RMF/A&A

DoD policy knowledge

leadership & cross-functional

security testing & audits

Education

MA/MS in relevant field

BA/BS with 12+ years experience substitution

Tools

Tenable Nessus/Security Manager

STIGs & DISA tools

NIST SP 800-37/53

DoDI 8510.01/8500.01

CISSP/CISM/CISSP-ISSMP/GSLC

Job description

Ignite Fueling Innovation is seeking a Cybersecurity Lead to support the U.S. Army at Redstone Arsenal in Huntsville, AL (onsite). In this role, you will direct the contract cybersecurity program and serve as the primary point of contact for cybersecurity and information-systems security engineering, including RMF/A&A, security engineering, assessments, authorization support, and continuous monitoring across both classified and unclassified systems.

What you’ll be doing

• Establish, implement, operate, and continuously improve the contract cybersecurity program.
• Act as the primary cybersecurity/ISSE point of contact and provide or oversee qualified ISSM support.
• Lead RMF planning, categorization, control selection, implementation, assessment, authorization, monitoring, and package maintenance.
• Lead and perform compliance reviews of computer security plans, conduct risk assessments, and validate security test evaluations and audits.
• Coordinate ATO, ATC, and IATT activities with system owners, CA, AO, G-6, engineering, development, and operations personnel.
• Produce and maintain required RMF artifacts, including SSPs, PPSM registrations, POA&Ms, vulnerability documentation, and RMF package content.
• Direct vulnerability scanning and remediation workflows, including patch assessment, IAVM, STIG validation, prioritization, exception processing, and risk reporting.
• Integrate security into architecture, systems engineering, software design, testing, deployment, training, and lifecycle management.
• Enforce security assurance requirements such as software assurance, FOSS/SBOM review, mobile-code approval, hardware baseline, and CCB requirements.
• Ensure cybersecurity personnel maintain applicable DoDM 8140.03 qualifications and continuing professional development.
• Support cyber and engineering technical interchange meetings, incidents, audits, inspections, and executive briefings.

What you bring

• 10+ years of relevant cybersecurity/IA policy and compliance experience at the Senior/Lead level.
• Experience leading Certification and Accreditation, RMF/A&A, cyber defense compliance, audits and inspections, security-plan reviews, risk assessments, security testing, and enterprise security requirements analysis.
• Experience leading control implementation and evidence development for classified and unclassified systems and networks.
• Expert knowledge of applicable DoD and Army cybersecurity policy, including DoDI 8510.01, DoDI 8500.01, DoDM 8140.03, AR 25-2, NIST SP 800-37, NIST SP 800-53/53A, CNSSI 1253, and DISA STIGs.
• Experience with SSPs, PPSM, POA&Ms, control evidence, vulnerability scans, IAVM, risk acceptance, continuous monitoring, incident support, and authorization packages.
• Strong leadership, audit execution, technical writing, briefing, and cross-functional coordination skills.
• CompTIA Security+ is required.
• DoD 8140/DCWF-aligned qualification; CISSP, CISM, CISSP-ISSMP, GSLC, or equivalent.
• Maintain at least 20 hours of continuing professional development annually.

Security clearance

Must have an active DoD Top Secret Clearance (SCI and SAP eligible).

Education

MA/MS is required. BA/BS with 12+ years of relevant experience is permitted as a substitution.

Tools and technologies you may work with

• CompTIA Security+, CISSP, CISM, CISSP-ISSMP, GSLC
• DoDI 8510.01, DoDI 8500.01, DoDM 8140.03, AR 25-2, NIST SP 800-37, NIST SP 800-53/53A, CNSSI 1253, DISA STIGs
• Tenable Nessus/Security Manager, Evaluate STIG, STIG Viewer, Trellix, Fortify
• Elastic (Beats/Logstash/Kibana), VMware, Windows, Linux, OpenShift/container, cloud
• Identity, SBOM, FOSS, CMMC Level 2, CUI
• CMMC UID management