Cybersecurity Lead: DoD RMF & Cloud Security (Secret)

BlueWater Federal Solutions; Montgomery (AL); On-site; USD 140,000 - 180,000; Full time

Job summary

BlueWater Federal Solutions seeks a Cybersecurity Lead to support Maxwell AFB, focusing on governance, RMF execution, and compliance across the BMx FoS. You will define security gates, manage vulnerability programs, and oversee STIG/ACAS activities while coordinating cloud modernization efforts.

The role requires a DoD RMF background, a Bachelor’s degree, an active Secret clearance, and a Security+ certification with CISSP/CASP/CCSP preferred.

Qualifications

• Bachelor's degree required.
• 10+ years of cybersecurity experience, including DoD RMF environments.
• Active Secret clearance required.
• Experience with RMF, STIGs, ACAS, SAST/DAST, vulnerability management, continuous monitoring, eMASS, security architecture, and Zero Trust concepts.
• Security+ certification required; CISSP/CASP+/CCSP preferred.

Responsibilities

• Lead cybersecurity governance, RMF execution, and compliance activities across the BMx FoS.
• Define and enforce release security gates and cybersecurity requirements.
• Manage vulnerability assessment, remediation, and continuous monitoring activities.
• Oversee STIG compliance, ACAS scanning, and cATO readiness efforts.
• Coordinate cybersecurity support for cloud migration and modernization initiatives.
• Support POA&M management and cybersecurity risk assessments.
• Provide cybersecurity reporting and compliance oversight to Government stakeholders.

Skills

Cybersecurity governance

RMF execution

Vulnerability management

Continuous monitoring

Zero Trust concepts

Security architecture

Education

Bachelor's degree

Tools

eMASS

STIGs

ACAS

SAST/DAST

Job description

BlueWater Federal Solutions seeks a Cybersecurity Lead to support Maxwell AFB, focusing on governance, RMF execution, and compliance across the BMx FoS. You will define security gates, manage vulnerability programs, and oversee STIG/ACAS activities while coordinating cloud modernization efforts.

The role requires a DoD RMF background, a Bachelor’s degree, an active Secret clearance, and a Security+ certification with CISSP/CASP/CCSP preferred.