DoD Cyber Operations Lead — RMF, ATO & Incident Response

Cwsc; Scott Air Force Base (IL); On-site; USD 95,000 - 130,000; Full time

Job summary

Computer World Services is seeking a Cyber Defense Analyst to lead all CSO activities under ARTRANS C4ISR and distribution operations, directing RMF, vulnerability management, security tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

The candidate should have 6+ years of DoD cybersecurity operations experience, a full DoD 8140.03 qualification, and be residentially qualified for elevated access. A Secret clearance is required; [e-mail] is the contact.

Qualifications

• 6+ years of cybersecurity operations experience in a DoD environment.
• Full DoD 8140.03 foundational qualification.
• Residentially qualified at start for elevated access to systems.
• Experience achieving/sustaining ATO under RMF for Army systems.
• Secret clearance is required.

Responsibilities

• Direct RMF documentation and ATO sustainment; submit RMF packages via eMASS.
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS.
• Administer government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG).
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data.

Skills

RMF framework

Vulnerability management

Incident response

Security tool administration

Tenable/ACAS

STIG/SCAP compliance

Automated security reporting

DoD cyber operations

Education

DoD 8140.03 foundational qualification

Tools

Trellix ePO/HBSS

Cisco ISE

Palo Alto NGFW/Panorama

Splunk SIEM

Symantec ProxySG

Job description

Computer World Services is seeking a Cyber Defense Analyst to lead all CSO activities under ARTRANS C4ISR and distribution operations, directing RMF, vulnerability management, security tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

The candidate should have 6+ years of DoD cybersecurity operations experience, a full DoD 8140.03 qualification, and be residentially qualified for elevated access. A Secret clearance is required; [e-mail] is the contact.