Cybersecurity Ops Lead: RMF, Incident Response & DoD

EPS Corporation; Scott Air Force Base (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

EPS Corporation is seeking a Cyber Security Lead to direct cyber operations for ARTRANS under the U.S. Army Transportation Command, overseeing RMF, vulnerability management, tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

The role requires 6+ years in DoD cybersecurity, active SECRET clearance, and experience achieving RMF ATOs. Work location is Scott Air Force Base, Illinois, with responsibilities spanning security posture improvement and incident

Qualifications

• 6+ years of cybersecurity operations experience in a DoD environment including RMF and incident response.
• Experience achieving/sustaining ATO under RMF for Army systems and familiarity with USTCI 6600.01.
• Active SECRET clearance (final, adjudicated) and U.S. citizenship for clearance.

Responsibilities

• Direct RMF documentation and ATO sustainment; submit RMF packages via eMASS and RMF Strategy.
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP reporting
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG)
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports

Skills

RMF & ATO expertise

Vulnerability management

Incident response

Security tool administration

DoD cyber operations

DoD compliance reporting

Education

CySA+/GCIA/CEH

CISSP/GCIH/CASP+

DoDM 8140.03 qualification

SECRET clearance

Tools

Tenable/ACAS

eMASS RMF

Splunk SIEM

Cisco ISE

Palo Alto NGFW/Panorama

Trellix ePO/HBSS

Job description

EPS Corporation is seeking a Cyber Security Lead to direct cyber operations for ARTRANS under the U.S. Army Transportation Command, overseeing RMF, vulnerability management, tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

The role requires 6+ years in DoD cybersecurity, active SECRET clearance, and experience achieving RMF ATOs. Work location is Scott Air Force Base, Illinois, with responsibilities spanning security posture improvement and incident