Coordinating ACAS/SAST Vulnerability scans, IAVA compliance, and remediation efforts with DHA Cybersecurity Team and Platform Engineers, tracking vulnerabilities and compliance findings through remediation and closure
Translating DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements, partnering with Platform/Engineers to implement security controls through Infrastructure as Code (IaC) and performing security control assessments
Serving as the primary cybersecurity liaison for government stakeholders, supporting CCB/change requests and briefing DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and the path to continued authorization
Required Qualifications
5+ years of relevant Cybersecurity experience, with a focus on DoD RMF and Impact Level 5/6 authorizations
Direct experience with DoD Cloud Service Providers (e.g. AWS Govcloud) ecosystems
Proven ability to independently lead coordination with government Security Control Assessors (SCA) and mission partners
Experience with eMASS and the Enterprise Mission Assurance Support Service for managing DoD system records
Knowledge of security scanning tools (e.g., Static Analysis, Dynamic Analysis, etc.)
Experience with using Atlassian tools such as Jira and Confluence
Confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders
DoD 8140/8570 IAM Level III Certification (e.g., CISSP, CISM, or GSLC)
US Citizenship and an active DoD Secret security clearance
B.A. or B.S. Information Security, Computer Science or related discipline
Desired Qualifications
Experience with the DoD Architecture Framework (DoDAF)
Experience with Cloud Computing Security Requirements Guide (CC SRG)
Experience with DoD DevSecOps Fundamentals Playbook
Experience with DevSecOps Platforms such as GitLab or GitHub
Understanding of container based application development tools (e.g., Docker, Docker Compose, Kubernetes)
Understanding of "Continuous ATO" (cATO) concepts and the integration of automated security testing into DevSecOps pipelines
This role requires a hybrid presence in Northern Virginia. The compensation for this role is estimated to be between $120,000-$150,000, commensurate on experience.
We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.
In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.
We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.
