Senior DoD Cybersecurity Lead - RMF, ATO & SBOM

Caelum Research Corporation; Huntsville (AL); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

Paid Leave

Holidays

401(k) Retirement Plan

Flexible Spending Account

Tuition/Training Assistance

Referral Bonuses

Job summary

Caelum Research Corporation seeks a Cybersecurity Lead to command RMF lifecycle execution, authorization packages, and continuous-monitoring across DoD systems on a major Army IT services contract in Huntsville, AL.

You will interface with ISSM/ISSE, control assessors, and government leaders to drive risk-based decisions while embedding cybersecurity engineering into infrastructure and development cycles.

Qualifications

• 8+ years DoD cybersecurity/IA experience with senior RMF, ISSM, ISSE or security-engineering responsibility.
• Deep knowledge of DoDI 8510.01, NIST RMF, NIST SP 800-53, DISA STIGs, vulnerability management and eMASS.
• Experience with ATO/ATC/IATT, SSP, PPSM, POA&M, continuous-monitoring and authorization-package experience.

Responsibilities

• Lead DoD RMF lifecycle execution and maintain authorization packages as living records tied to current system state.
• Serve as primary Caelum interface for ISSM/ISSE matters, Control Assessor/G-6 validation and Government authorization decisions.
• Maintain SSP, PPSM, POA&M, boundary/data-flow diagrams, inventories, account/role matrices, STIGs, scan evidence and risk records.
• Lead ACAS/Tenable, STIG and IAVM vulnerability processes from applicability through remediation, rescan and closure/risk disposition.
• Embed cybersecurity engineering into infrastructure, software, interfaces, automation, change control and sustainment.
• Lead software assurance including Fortify/static analysis, OWASP, Application Development STIG, FOSS/dependency risk and SBOM practices.
• Establish continuous-monitoring metrics for authorization status, vulnerability exposure, POA&M aging, STIG compliance and privileged-access risk.
• Ensure cyber workforce alignment to DoD 8140/DCWF qualification and continuing-development requirements.
• Lead CDRL A008 RMF artifact quality, traceability, peer review and Government-ready submission.
• Brief Government and Caelum leadership on mission cyber risk, trends, dependencies and required decisions.

Skills

DoD cybersecurity

RMF/ATO

Vulnerability management

Security engineering

Education

DoD 8140/DCWF

Tools

ACAS/Tenable

eMASS

Fortify/OWASP

Job description

POSITION: Cybersecurity Lead

LOCATION: Huntsville, AL

SCOPE:Serves as a Cybersecurity Lead on a major IT services contract for the U.S. Army. Lead cybersecurity engineering, RMF/A&A, ATO/ATC/IATT support, vulnerability management, continuous monitoring, software/hardware assurance and controlled cybersecurity documentation across classified and unclassified systems.

RESPONSIBILITIES:

• Lead DoD RMF lifecycle execution and maintain authorization packages as living records tied to current system state.
• Serve as primary Caelum interface for ISSM/ISSE matters, Control Assessor/G-6 validation and Government authorization decisions.
• Maintain SSP, PPSM, POA&M, boundary/data-flow diagrams, inventories, account/role matrices, STIGs, scan evidence and risk records.
• Lead ACAS/Tenable, STIG and IAVM vulnerability processes from applicability through remediation, rescan and closure/risk disposition.
• Embed cybersecurity engineering into infrastructure, software, interfaces, automation, change control and sustainment.
• Lead software assurance including Fortify/static analysis, OWASP, Application Development STIG, FOSS/dependency risk and SBOM practices.
• Establish continuous-monitoring metrics for authorization status, vulnerability exposure, POA&M aging, STIG compliance and privileged-access risk.
• Ensure cyber workforce alignment to DoD 8140/DCWF qualification and continuing-development requirements.
• Lead CDRL A008 RMF artifact quality, traceability, peer review and Government-ready submission.
• Brief Government and Caelum leadership on mission cyber risk, trends, dependencies and required decisions.

QUALIFICATIONS:

• 8+ years DoD cybersecurity/IA experience with senior RMF, ISSM, ISSE or security-engineering responsibility.
• Deep knowledge of DoDI 8510.01, NIST RMF, NIST SP 800-53, DISA STIGs, vulnerability management and eMASS.
• Demonstrated ATO/ATC/IATT, SSP, PPSM, POA&M, continuous-monitoring and authorization-package experience.
• Experience leading cyber support for classified systems and complex enterprise environments.
• DoD 8140/DCWF qualification appropriate to assigned work role.
• Ability to obtain and maintain required TS/SCI and special accesses as applicable.

PREFERRED/HIGHLY DESIRED:

• CISSP, CGRC/CAP, CASP+/SecurityX, CISM or comparable advanced cyber credential.
• Army RMF Knowledge Service, ACAS/Tenable, Evaluate-STIG/STIG Viewer and Fortify experience.
• Software/hardware assurance, SBOM, DevSecOps and supply-chain security experience.
• Redstone Arsenal, PEO/PAE, missile/air-defense or Army acquisition cyber experience.

SECURITY CLEARANCE:Active DoD TopSecret Clearance

BENEFITS:We designed our employee benefits program around the goal of improving the quality of life for each employee. We offer some of the most competitive benefits in the industry to include Medical, Dental, Vision, and Life Insurances; Short- and Long-Term Disability; Paid Leave, Holidays, Bereavement, Military, and Jury Duty; 401(k) Retirement Plan, Flexible Spending Account, Dependent Care, Health Savings Account, Tuition/Training Assistance, and Referral Bonuses.