Cybersecurity Operations Lead

Socket.dev; Scott Air Force Base (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

Computer World Services is a leading defense contractor providing cybersecurity operations support at scale. The role focuses on RMF documentation, ATO sustainment, and vulnerability management across DoD systems from Scott Air Force Base.

You will lead incident response, coordinate weekly scans, and manage compliance reporting using Tenable/ACAS, eMASS, and related tools to maintain secure, compliant environments.

Qualifications

• 6+ years of cybersecurity operations experience in a DoD environment (RMF, vulnerability management, incident response).
• Full DoDM 8140.03 foundational qualification prior to start; Residentially Qualified at the start of work for elevated access to any system, network, or enclave.
• Experience achieving/sustaining ATO under RMF for Army systems; familiar with USTCI 6600.01.

Responsibilities

• Direct RMF documentation and Authorization to Operate sustainment; submit RMF packages via eMASS and RMF Strategy.
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP compliance reporting.
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk SIEM, Symantec ProxySG).
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports.

Skills

Vulnerability management

Incident response

RMF

Threat monitoring

Education

DoDM 8140.03

Residentially Qualified

Tools

Tenable/ACAS

eMASS

STIG/SCAP

Cisco ISE

Palo Alto NGFW/Panorama

Splunk SIEM

Trellix ePO/HBSS

Job description

Key Tasks & Responsibilities

• Direct RMF documentation and Authorization to Operate (ATO) sustainment; submit RMF packages via eMASS and RMF Strategy


• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP compliance reporting


• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG)


• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports

Education & Experience

• 6+ years of cybersecurity operations experience in a DoD environment (RMF, vulnerability management, incident response)


• Full DoDM 8140.03 foundational qualification prior to start. Residentially Qualified at the start of work for elevated access to any system, network, or enclave


• Experience achieving/sustaining ATO under RMF for Army systems;familiarity with USTCI 6600.01

Certifications

• DCWF Work Role 621 - Cyber Defense Analyst, Intermediate proficiency. Common qualifying certifications: CySA+, GCIA, CEH


• Advanced certification such as CISSP, GCIH, or CASP+

Security Clearance

• Secret clearance

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [e-mail].