Strategic Cybersecurity Program Lead | Secret Clearance

AMERICAN SYSTEMS; City of Middletown (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

AMERICAN SYSTEMS is seeking a Cybersecurity Program Lead to support complex customer programs requiring a blend of cybersecurity, information assurance, systems security, and program execution expertise.

This role will serve as a key technical and programmatic point of contact, supporting security, compliance, risk management, and mission-focused technical activities across applications, networks, and information systems.

Qualifications

• Active Secret clearance required or eligible for reinstatement.
• Bachelor's degree in Cybersecurity, IT, CS, IS, or related field.
• 8+ years of cybersecurity, information assurance, or risk management experience.
• Experience supporting DoD, Navy, or federal programs.
• CSWF certification with CompTIA Security+ or preferred.
• Ability to develop and maintain security documentation and assessment artifacts.
• Strong communication and independent work capability.

Responsibilities

• Lead cybersecurity, compliance, risk management, and systems security activities across programs.
• Support certification, accreditation, and RMF-based workflows and documentation.
• Develop system security plans, contingency plans, and assessment materials.
• Conduct risk and vulnerability assessments and track remediation.
• Oversee secure configuration practices and security tooling.
• Coordinate with developers, program managers, security personnel, and customers.

Skills

Leadership

Communication

RMF

NIST controls

Vulnerability management

Risk assessment

DoD/federal programs

Education

Bachelor's degree in Cybersecurity / IT / CS

Tools

Security documentation tools

STIGs

POA&M management

ATO package support

Job description

AMERICAN SYSTEMS is seeking a Cybersecurity Program Lead to support complex customer programs requiring a blend of cybersecurity, information assurance, systems security, and program execution expertise.

This role will serve as a key technical and programmatic point of contact, supporting security, compliance, risk management, and mission-focused technical activities across applications, networks, and information systems.