Cybersecurity Lead: DoD RMF & Compliance Expert (Onsite)

IGNITE

Huntsville (AL)

On-site

USD 140,000 - 170,000

Full time

32 hours ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Ignite is seeking a Cybersecurity Lead to join our team supporting the U.S. Army on Redstone Arsenal in Huntsville, AL.

This on-site role directs the organization’s cybersecurity program, oversees RMF/A&A, and coordinates with DoD stakeholders to achieve authorization and maintain mission readiness. Candidates should bring 10+ years in cybersecurity, strong leadership, and proven experience with risk management, security engineering, and continuous monitoring across classified and unclassified

Qualifications

Ten or more years of cybersecurity/IA policy experience at the Senior/Lead level.
Experience leading Certification and Accreditation, RMF/A&A, cyber defense compliance, audits, inspections, security-plan reviews, risk assessments, security testing, and enterprise security requirements analysis.
Experience leading control implementation and evidence development for classified and unclassified systems and networks.
Experience balancing mission, architecture, engineering, software, operations, vulnerability, and compliance needs.
Expert knowledge of DoDI 8510.01, DoDI 8500.01, DoDM 8140.03, AR 25-2, NIST SP 800-37, NIST SP 800-53/53A, CNSSI 1253, DISA STIGs, and applicable Army/DoD cybersecurity policy.
Experience with SSPs, PPSM, POA&M, control evidence, vulnerability scans, IAVM, risk acceptance, continuous monitoring, incident support, and authorization packages.
Strong leadership, audit, technical writing, briefing, and cross-functional coordination skills.
CompTIA Security+ is required.
DoD 8140/DCWF-aligned qualification; CISSP, CISM, CISSP-ISSMP, GSLC, or equivalent.
Must maintain at least 20 hours of continuing professional development annually.

Responsibilities

Establish and improve the contract cybersecurity program.
Serve as primary cybersecurity/ISSE point of contact.
Lead RMF planning, categorization, control selection, implementation, assessment, authorization, monitoring, and package maintenance.
Lead and perform compliance reviews, risk assessments, and security test evaluations and audits.
Coordinate ATO, ATC, and IATT activities with system owners, CA, AO, G-6, engineering, development, and operations personnel.
Produce and maintain SSPs, PPSM registrations, POA&Ms, vulnerability documentation, and required RMF artifacts.
Direct vulnerability scanning, patch assessment, IAVM, STIG validation, remediation prioritization, exception processing, and risk reporting.
Integrate security into architecture, systems engineering, software design, testing, deployment, training, and lifecycle management.
Enforce software assurance, FOSS/SBOM review, mobile-code approval, hardware baseline, and CCB requirements.
Ensure cybersecurity personnel maintain applicable DoDM 8140.03 qualifications and continuing professional development.
Support cyber and engineering technical interchange meetings, incidents, audits, inspections, and executive briefings.