DoD Cyber Operations Lead: RMF & Incident Response

Computer World Services; Scott Air Force Base (IL); On-site; USD 120,000 - 150,000; Full time

Job summary

Computer World Services seeks a senior cybersecurity operations lead to manage RMF documentation and ATO sustainment for Army networks at Scott Air Force Base. The role oversees vulnerability management, STIG/SCAP compliance, and security-tool administration across NIPR/SIPR networks.

The ideal candidate has 6+ years in DoD cybersecurity operations and holds DoD 8140.03 qualifications with elevated access permissions. Secret clearance is required for this role.

Qualifications

• 6+ years of cybersecurity operations experience in a DoD environment (RMF, vulnerability management, incident response).
• Full DoD 8140.03 foundational qualification prior to start. Residentially Qualified at the start of work for elevated access to any system, network, or enclave.
• Experience achieving/sustaining ATO under RMF for Army systems; familiarity with USTCI 6600.01.

Responsibilities

• Direct RMF documentation and Authorization to Operate (ATO) sustainment; submit RMF packages via eMASS and RMF Strategy.
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP compliance reporting.
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG).
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports.

Skills

RMF

Vulnerability management

Incident response

Tenable/ACAS

STIG/SCAP

Education

DoD 8140.03 foundational qualification

Residentially Qualified for elevated access

Tools

Trellix ePO/HBSS

Cisco ISE

Palo Alto NGFW/Panorama

Splunk/SIEM

Symantec ProxySG

Job description

Computer World Services seeks a senior cybersecurity operations lead to manage RMF documentation and ATO sustainment for Army networks at Scott Air Force Base. The role oversees vulnerability management, STIG/SCAP compliance, and security-tool administration across NIPR/SIPR networks.

The ideal candidate has 6+ years in DoD cybersecurity operations and holds DoD 8140.03 qualifications with elevated access permissions. Secret clearance is required for this role.