Cybersecurity Lead, RMF & DoD Programs (TS/SCI)

Socket.dev; Huntsville (AL); On-site; USD 106,000 - 148,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off accrued each pay period

Parental Leave

Medical plan options with employer_con

Dental and Vision Insurance

Company paid Short-Term and Long-Term 

Company paid Life and AD&D Insurance

401k with matching and vesting

Job summary

PingWind is seeking a Cybersecurity Lead to direct the cybersecurity program supporting PAE Fires OCIO IMAS. The Cybersecurity Lead will provide senior security leadership across systems engineering, software design/integration, testing, RMF assessment and authorization, vulnerability management, security documentation, and continuous risk reduction for classified and unclassified systems.

PingWind is focused on delivering outstanding services to the federal government.

Qualifications

• Senior-level experience leading DoD/Army cybersecurity programs, RMF assessment/authorization, security engineering, and continuous risk management for enterprise information systems.
• Expert knowledge of NIST SP 800-37, 800-53, DoDI 8510.01, DoDI/DoDD 8500-series cybersecurity requirements, DISA STIGs, and related Army cybersecurity policy.
• Experience developing and maintaining RMF artifacts such as SSPs, PPSM information, POA&Ms, risk/vulnerability assessments, security-control evidence, and authorization packages.
• Experience leading vulnerability management, security scanning, patch assessment, IAVM/IAVA processes, remediation prioritization, and technical risk reporting.
• Working knowledge of secure systems engineering and software assurance, including SBOM concepts, OWASP/DISA application-security practices.
• Ability to lead cybersecurity staff, work across engineering/development/operations teams, brief Government leaders and assessors, and drive issues through formal approval/governance processes.
• Must meet the applicable DoDM 8140.03/DCWF qualification requirements for the assigned cybersecurity work role and proficiency level, including required continuing professional development.
• TS/SCI security clearance.

Responsibilities

• Lead implementation and operation of the contract cybersecurity program and maintain the security expertise needed to support systems engineering, software design/integration, testing, training, and lifecycle support.
• Serve as the contractor primary cybersecurity/IS systems-engineering point of contact and coordinate security activities with Government cybersecurity leadership, assessors, authorizing officials, engineers, developers, administrators, and program management.
• Lead RMF Assess and Authorize activities and support achievement and maintenance of ATO/ATC or IATT decisions as appropriate for supported missions.
• Ensure system cybersecurity implementation is aligned with applicable DoD and Army requirements, NIST 800-series controls, CNSS guidance, DISA STIGs, and other governing cybersecurity policies identified by the PWS.
• Provide cybersecurity engineering across the system security architecture, including security configuration/implementation, product selection, threat assessment, vulnerability assessment, and risk assessment documentation.
• Manage security exceptions, alternative implementations, and discrepancies through appropriate Government review and Change Control Board approval before implementation.
• Oversee software-assurance activities for Government software, including risk management for third-party/public-domain/FOSS components, SBOM concepts, and OWASP/DISA application-security practices.
• Oversee hardware-assurance baseline inventory requirements and maintain security-relevant hardware information in the Army authoritative cybersecurity repository as required.
• Lead Information Assurance Vulnerability Management activities, including Vulnerability Management Plan content, patch review, security scans, IAVA/IAVM tracking, test reporting, and use of DISA-approved scanning tools.
• Produce, maintain, and deliver RMF cybersecurity artifacts including the System Security Plan, Ports/Protocols/Services Matrix, POA&M, and other required documentation.
• Prioritize and drive remediation of identified vulnerabilities and weaknesses, with High and Moderate risks addressed first and Low-risk findings managed as part of comprehensive risk reduction.
• Ensure cybersecurity personnel maintain required qualifications and continuous professional development in accordance with DoDM 8140.03 and applicable DCWF work roles/proficiency levels.

Skills

Senior cybersecurity leadership

RMF assessment & authorization

Security engineering

Vulnerability management

Security documentation

Remediation for DoD/Army systems

Education

Bachelor's degree

Tools

Tenable Nessus

STIG Viewer

Trellix security tools

Job description

PingWind is seeking a Cybersecurity Lead to direct the cybersecurity program supporting PAE Fires OCIO IMAS. The Cybersecurity Lead will provide senior security leadership across systems engineering, software design/integration, testing, RMF assessment and authorization, vulnerability management, security documentation, and continuous risk reduction for classified and unclassified systems.

PingWind is focused on delivering outstanding services to the federal government.