Cybersecurity Operations Lead

EPS Corporation; Scott Air Force Base (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

EPS Corporation is seeking a Cyber Security Lead to direct cyber operations for ARTRANS under the U.S. Army Transportation Command, overseeing RMF, vulnerability management, tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

The role requires 6+ years in DoD cybersecurity, active SECRET clearance, and experience achieving RMF ATOs. Work location is Scott Air Force Base, Illinois, with responsibilities spanning security posture improvement and incident

Qualifications

• 6+ years of cybersecurity operations experience in a DoD environment including RMF and incident response.
• Experience achieving/sustaining ATO under RMF for Army systems and familiarity with USTCI 6600.01.
• Active SECRET clearance (final, adjudicated) and U.S. citizenship for clearance.

Responsibilities

• Direct RMF documentation and ATO sustainment; submit RMF packages via eMASS and RMF Strategy.
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP reporting
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG)
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports

Skills

RMF & ATO expertise

Vulnerability management

Incident response

Security tool administration

DoD cyber operations

DoD compliance reporting

Education

CySA+/GCIA/CEH

CISSP/GCIH/CASP+

DoDM 8140.03 qualification

SECRET clearance

Tools

Tenable/ACAS

eMASS RMF

Splunk SIEM

Cisco ISE

Palo Alto NGFW/Panorama

Trellix ePO/HBSS

Job description

EPS Corporation is looking for Cyber Security Lead, they will Lead all Cybersecurity Operations (CSO) under U.S. Army Transportation Command (ARTRANS) C4ISR and distribution operations, directing RMF, vulnerability management, security tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

Key Responsibilities

• Direct RMF documentation and Authorization to Operate (ATO) sustainment; submit RMF packages via eMASS and RMF Strategy
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP compliance reporting
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG)
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports

Work Location: Scott Air Force Base, Illinois

Required Qualifications, Certifications & Experience

• 6+ years of cybersecurity operations experience in a DoD environment (RMF, vulnerability management, incident response)
• DCWF Work Role 621 - Cyber Defense Analyst, Intermediate proficiency. Common qualifying certifications: CySA+, GCIA, CEH
• Full DoDM 8140.03 foundational qualification prior to start. Residentially Qualified at the start of work for elevated access to any system, network, or enclave
• SECRET clearance (final, adjudicated) at minimum; U.S. citizenship as required for clearance
• Experience achieving/sustaining ATO under RMF for Army systems; familiarity with USTCI 6600.01
• Advanced certification such as CISSP, GCIH, or CASP+