Job Title
CYBERSECURITY LEAD
Location
Huntsville, AL US (Primary)
Category
Information Technology
Job Type
Full-Time
Career Level
Experienced (Non-Manager)
Education
Bachelor's Degree
Security Clearance Required
TS
Job Description
Ignite is currently seeking a driven Cybersecurity Lead to join our team supporting the U.S. Army on Redstone Arsenal in Huntsville, AL. This position is expected to be onsite. The Cybersecurity Lead will direct the organization's cybersecurity program and serve as the contractor's primary point of contact for cybersecurity and information-systems security engineering matters. The role leads RMF, A&A, security engineering, control implementation, assessment support, vulnerability management, software/hardware assurance, documentation, and continuous monitoring across classified and unclassified systems.
The Cybersecurity Lead will provide or oversee the qualified ISSM function, coordinate with the Authorizing Official, Control Assessor, G-6, system owners, engineers, developers, and operations teams, and driving systems toward ATO/ATC/IATT decisions while reducing mission risk.
THIS POSITION IS CONTINGENT UPON AWARD.
Job Requirements
Responsibilities include, but are not limited to:
§ Establish, implement, operate, and continuously improve the contract cybersecurity program.
§ Serve as primary cybersecurity/ISSE point of contact and provide or oversee qualified ISSM support.
§ Lead RMF planning, categorization, control selection, implementation, assessment, authorization, monitoring, and package maintenance.
§ Lead and perform compliance reviews computer security plans, conduct risk assessments, and validate and perform security test evaluations and audits.
§ Coordinate ATO, ATC, and IATT activities with system owners, CA, AO, G-6, engineering, development, and operations personnel.
§ Produce and maintain SSPs, PPSM registrations, POA&Ms, vulnerability documentation, and required RMF artifacts.
§ Direct vulnerability scanning, patch assessment, IAVM, STIG validation, remediation prioritization, exception processing, and risk reporting.
§ Integrate security into architecture, systems engineering, software design, testing, deployment, training, and lifecycle management.
§ Enforce software assurance, FOSS/SBOM review, mobile-code approval, hardware baseline, and CCB requirements.
§ Ensure cybersecurity personnel maintain applicable DoDM 8140.03 qualifications and continuing professional development.
§ Support cyber and engineering technical interchange meetings, incidents, audits, inspections, and executive briefings.
Job Requirements and Qualifications:
§ Ten (10) or more years of relevant cybersecurity/IA policy and compliance experience at the Senior/Lead level.
§ Experience leading Certification and Accreditation, RMF/A&A, cyber defense compliance, audits, inspections, security-plan reviews, risk assessments, security testing, and enterprise security requirements analysis.
§ Experience leading control implementation and evidence development for classified and unclassified systems and networks.
§ Experience balancing mission, architecture, engineering, software, operations, vulnerability, and compliance needs.
§ Expert knowledge of DoDI 8510.01, DoDI 8500.01, DoDM 8140.03, AR 25-2, NIST SP 800-37, NIST SP 800-53/53A, CNSSI 1253, DISA STIGs, and applicable Army/DoD cybersecurity policy.
§ Experience with SSPs, PPSM, POA&Ms, control evidence, vulnerability scans, IAVM, risk acceptance, continuous monitoring, incident support, and authorization packages.
§ Strong leadership, audit, technical writing, briefing, and cross-functional coordination skills.
§ CompTIA Security+ is required.
§ DoD 8140/DCWF-aligned qualification; CISSP, CISM, CISSP-ISSMP, GSLC, or equivalent.
§ Must maintain at least 20 hours of continuing professional development annually.
Preferred Qualifications:
§ RMF Knowledge Service and Army authoritative cybersecurity repositories.
§ Tenable Nessus/Security Manager, Evaluate STIG, STIG Viewer, Trellix, Fortify, Elastic/Beats/Logstash/Kibana, and related security tools.
§ Security engineering for VMware, Windows, Linux, OpenShift/container, network, database, application, backup, cloud, and identity environments.
§ Software assurance, static analysis, SBOM/FOSS risk, hardware baselines, vulnerability plans, IAVM test reports, and remediation governance.
§ CMMC Level 2, FCI/CUI safeguarding, SPRS affirmations, CMMC UID management, and subcontractor flowdown awareness.
Security Clearance Requirements: Must have an active DoD Top Secret Clearance (SCI and SAP eligible)
Education Requirements:
§ MA/MS.
§ Permitted substitution: BA/BS with 12 or more years of relevant experience.
