Cyber Security Manager

Leidos•Alexandria, VA

16h•$131,300 - $237,350

About The Position

Leidos is seeking an experienced Cyber Security Manager to lead cybersecurity engineering, risk management, authorization, and security operations support for the United States Coast Guard’s Command, Control, Communications, Computers, Cyber, and Intelligence Service Center (C5ISC) in Alexandria, Virginia. The role supports the USCG Cloud Modernization program and manages a multidisciplinary team of ISSOs, ISSEs, security engineers, and incident response personnel working across mission-critical AWS, Azure, and enterprise systems. The manager is accountable for the quality, timeliness, and execution of cybersecurity activities. This hands-on technical leadership role combines cybersecurity engineering, direct people management, integrated delivery planning, customer engagement, and continuous improvement. The manager works with Coast Guard cybersecurity leadership, authorizing stakeholders, cloud engineering and operations teams, and program management to strengthen security posture, accelerate compliant delivery, and reduce mission risk.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant experience subject to program requirements.
At least 8 years of progressively responsible cybersecurity engineering, information assurance, security operations, or RMF/ATO experience, including at least 3 years supporting federal government contracts or programs.
At least 4 years of direct technical people management or cybersecurity team leadership, with responsibility for multidisciplinary teams and multiple concurrent workstreams.
Practical knowledge of NIST RMF, NIST SP 800-53 security controls, FISMA, ATO packages, security assessment evidence, POA&Ms, and continuous monitoring.
Experience leading vulnerability management, scan review, STIG remediation, control validation, incident response coordination, and security risk reporting.
Strong technical understanding of securing AWS and/or Azure cloud environments, enterprise identity, network and security architecture, and infrastructure security controls.
Experience managing integrated schedules, staffing and capacity plans, Jira or comparable work tracking, delivery dependencies, quality reviews, and risk mitigation using Agile and disciplined project management practices.
Current and active Public Trust, consistent with existing USCG Cloud Modernization position requirements, and ability to maintain required access.

Nice To Haves

Experience supporting DHS, the U.S. Coast Guard, DoD, or large federal civilian cloud modernization programs.
Experience managing cybersecurity teams of 10 or more across ISSO, ISSE, cyber engineering, and incident response functions.
CISSP, CISM, Security+, CCSP, CAP/CGRC, or comparable cybersecurity certification.
Experience with eMASS, federal security assessment and authorization workflows, FedRAMP, DoD Impact Level requirements, and cloud authorization boundaries.
Experience with ACAS/Nessus, DISA STIGs, SIEM/log monitoring, vulnerability remediation dashboards, and incident response processes.
Knowledge of Zero Trust, cloud security automation, infrastructure as code, DevSecOps, and security governance.
PMP, Certified ScrumMaster, or comparable project/delivery management credential.

Responsibilities

Lead, coach, recruit, and evaluate a multidisciplinary cybersecurity team; establish ownership, backup coverage, workload priorities, and accountability.
Oversee NIST Risk Management Framework execution and Authorization to Operate activities across cloud and enterprise authorization boundaries, including control implementation, assessment readiness, evidence quality, continuous authorization support, and eMASS coordination.
Direct cybersecurity engineering across AWS and Azure environments, partnering with cloud engineering and operations on secure architecture, configuration baselines, identity and access controls, encryption, network security, Zero Trust, and DevSecOps integration.
Manage vulnerability scanning, STIG compliance, findings triage, POA&M tracking, corrective-action ownership, deadlines, verification, and risk escalation.
Oversee continuous security monitoring, security control health, log and alert visibility, incident detection and response coordination, incident documentation, and corrective actions.
Build cybersecurity work plans, Jira backlogs, schedules, milestones, capacity forecasts, and risk and dependency plans; assign accountable owners and measurable completion criteria to deliverables.
Conduct technical and quality reviews of security plans, control narratives, architecture diagrams, assessment artifacts, contingency and incident response documentation, vulnerability evidence, and authorization deliverables.
Coordinate with government ISSOs, security control assessors, authorizing officials, CISO representatives, program leadership, vendors, and cross-functional teams to resolve findings and maintain transparent status.
Lead cybersecurity readiness reviews, tabletop exercises, remediation reviews, and operational process improvements; promote continuity, tested procedures, and effective team handoffs.
Brief technical and executive stakeholders on ATO status, security risks, POA&M aging, vulnerabilities, remediation progress, staffing constraints, and recommended mitigations.
Promote a proactive security culture through mentoring, technical standards, documented procedures, knowledge transfer, and repeatable Agile and DevSecOps practices.
Lead technical investigations and communicate cybersecurity findings, architecture tradeoffs, remediation priorities, and executive-level recommendations.