Cyber Security Manager

Leidos•Alexandria, VA

About The Position

Leidos is seeking an experienced Cyber Security Manager to lead cybersecurity engineering, risk management, authorization, and security operations support for the U.S. Coast Guard’s Command, Control, Communications, Computers, Cyber, and Intelligence Service Center (C5ISC) in Alexandria, Virginia. The hands-on technical leader manages a multidisciplinary team of ISSOs, ISSEs, security engineers, and incident response personnel supporting mission-critical AWS, Azure, and enterprise systems. The manager works with Coast Guard cybersecurity leadership, authorizing stakeholders, cloud engineering and operations teams, and program management to strengthen security posture, accelerate compliant delivery, and reduce mission risk. The role is accountable for the quality, timeliness, and execution of cybersecurity activities across the USCG Cloud Modernization program. It combines technical cybersecurity leadership, direct people management, integrated delivery planning, customer engagement, and continuous improvement. The manager drives measurable progress in authorization, vulnerability remediation, security monitoring, and incident response, while challenging technical assumptions and resolving blockers. The position requires a bachelor’s degree in a relevant discipline or equivalent relevant experience, 8 or more years of progressively responsible cybersecurity experience, including federal program support, and 4 or more years of direct technical people management or cybersecurity team leadership. A current and active Public Trust, consistent with existing USCG Cloud Modernization requirements, and the ability to maintain required access are required. The role is based in Alexandria, VA; the posting does not specify a workplace type.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant experience subject to program requirements.
At least 8 years of progressively responsible cybersecurity engineering, information assurance, security operations, or RMF/ATO experience.
At least 3 years supporting federal government contracts or programs.
At least 4 years of direct technical people management or cybersecurity team leadership, including multidisciplinary teams and multiple concurrent workstreams.
Deep practical knowledge of NIST RMF, NIST SP 800-53 security controls, FISMA, ATO packages, security assessment evidence, POA&Ms, and continuous monitoring.
Experience leading vulnerability management, scan review, STIG remediation, control validation, incident response coordination, and security risk reporting.
Strong technical understanding of securing AWS and/or Azure environments, enterprise identity, network and security architecture, and infrastructure security controls.
Experience managing integrated schedules, staffing and capacity plans, Jira or comparable work tracking, delivery dependencies, quality reviews, and risk mitigation using Agile and disciplined project management practices.
Ability to lead technical investigations and clearly communicate cybersecurity findings, architecture tradeoffs, remediation priorities, and executive-level recommendations.
Current and active Public Trust and ability to maintain required access.

Nice To Haves

Experience supporting DHS, U.S. Coast Guard, DoD, or large federal civilian cloud modernization programs.
Experience managing cybersecurity teams of 10 or more personnel across ISSO, ISSE, cyber engineering, and incident response functions.
CISSP, CISM, Security+, CCSP, CAP/CGRC, or comparable cybersecurity certification.
Experience with eMASS, federal security assessment and authorization workflows, FedRAMP, DoD Impact Level requirements, and cloud authorization boundaries.
Experience with ACAS/Nessus, DISA STIGs, SIEM and log monitoring, vulnerability remediation dashboards, and incident response processes.
Knowledge of Zero Trust, cloud security automation, infrastructure as code, DevSecOps, and security governance.
PMP, Certified ScrumMaster, or comparable project or delivery management credential.

Responsibilities

Lead, coach, recruit, and evaluate a multidisciplinary cybersecurity team; establish ownership, backups, workload priorities, and accountability.
Oversee NIST Risk Management Framework execution and Authorization to Operate activities across cloud and enterprise authorization boundaries, including control implementation, assessment readiness, evidence quality, continuous authorization support, and eMASS coordination.
Direct cybersecurity engineering in AWS and Azure environments, partnering with cloud engineering and operations on secure architecture, configuration baselines, identity and access controls, encryption, network security, Zero Trust, and DevSecOps integration.
Own vulnerability management and remediation, including scan review, STIG compliance, findings triage, POA&M tracking, corrective-action ownership, deadlines, verification, and risk escalation.
Oversee continuous security monitoring, security control health, log and alert visibility, incident detection and response coordination, incident documentation, and corrective actions with Coast Guard stakeholders.
Build integrated cybersecurity work plans, Jira backlogs, schedules, milestones, capacity forecasts, risk registers, and dependency plans; assign accountable owners and measurable completion criteria to deliverables.
Conduct technical and quality reviews of security plans, control narratives, architecture diagrams, assessment artifacts, contingency and incident response documentation, vulnerability evidence, and authorization deliverables.
Coordinate with government ISSOs, security control assessors, authorizing officials, CISO representatives, program leadership, vendors, and cross-functional delivery teams to resolve findings and maintain transparent status.
Lead cybersecurity readiness reviews, tabletop exercises, remediation reviews, and operational process improvements; maintain continuity, tested procedures, and effective team handoffs.
Provide decision-oriented briefings on ATO status, security risks, POA&M aging, vulnerabilities, remediation progress, staffing constraints, and recommended mitigations.
Promote a proactive security culture through mentoring, technical standards, documented procedures, knowledge transfer, and repeatable Agile and DevSecOps practices.