Cybersecurity Lead

Leads cybersecurity governance, RMF execution, vulnerability management, continuous monitoring, release security validation, and cybersecurity compliance activities across the BMx FoS. The Cybersecurity Lead integrates cybersecurity directly into Agile execution, DevSecOps pipeline governance, release management, cloud migration, modernization sequencing, and operational sustainment activities.

The Cybersecurity Lead defines release security gates, manages vulnerability triage, coordinates STIG validation, oversees ACAS compliance activities, supports cATO readiness, and ensures cybersecurity evidence generation remains synchronized with release execution and RMF reporting requirements. This role works closely with the DevSecOps Platform Lead, Independent Test Lead, System Architect, Product Owners, and Cloud Engineers to ensure cybersecurity controls are integrated into pipeline execution and modernization governance from backlog refinement through production release.

The Cybersecurity Lead also supports POA&M management, operational risk analysis, continuous monitoring activities, and cybersecurity reporting required for Government oversight and compliance.

Must possess DoD Secret Clearance.

·       RMF

·       STIGs

·       ACAS

·       SAST/DAST

·       Vulnerability management

·       Continuous monitoring

·       eMASS

·       Security architecture

·       Zero Trust concepts

Required:

·       Security+

Preferred:

·       CISSP

·       CASP+

·       CCSP

·       Bachelor’s degree.

·       10+ years cybersecurity experience.

·       Experience supporting DoD RMF environments.