Cyber & A&A Security Lead - Level IV

ATTAINX INC•Silver Spring, MD

4d•$135,000 - $158,000•Hybrid

About The Position

AttainX, Inc. is seeking an experienced and highly motivated Cybersecurity / Assessment and Authorization (A&A) Team Lead to support a federal cybersecurity program. This position provides leadership and technical oversight for Security Assessment and Authorization (SA&A) activities across multiple federal information systems and cloud environments. The successful candidate will lead teams performing Risk Management Framework (RMF) assessments, coordinate assessment activities with government stakeholders, evaluate security controls, develop authorization packages, and provide recommendations to support Authorization to Operate (ATO) decisions.

Requirements

Bachelor’s degree or higher in Information Systems, Cybersecurity, Information Technology, Computer Science, or related field. Four (4) years of combined relevant education and experience will be accepted in lieu of a degree.
Knowledge of DOC, NOAA, and NWS IT security policies and implementation standards or similar organizations.
Comprehensive understanding of NIST guidance, including NIST Special Publications and FIPS.
Experience leading teams of IT Security Specialists or Security Assessors.
At least 5 years of recent experience applying IT security concepts, methodologies, principles, procedures, and industry-standard security tools.
At least 5 years of recent experience with enterprise architecture methodologies, contingency planning, backup/recovery best practices, technical testing tools, and RMF assessments.
Robust verbal and written communication skills.
Effective interpersonal, project management, and organizational skills
Ability to work effectively in a team-oriented environment.
Must possess at least one (1) of the following certifications: CISSP, CISA, GSNA, CEH, ISC2 CGRC, CISM.

Nice To Haves

Bachelor’s degree or higher in Information Systems, Cybersecurity, Information Technology, Computer Science, or related field.
Experience assessing cloud-hosted systems in AWS, Azure, or GCP.
Experience supporting federal ATO decisions and Continuous Authorization programs.
Knowledge of High Value Asset (HVA) requirements.
Clear-cut attention to detail and ability to manage multiple priorities.

Responsibilities

Lead and oversee full lifecycle Security Assessment and Authorization activities.
Plan, coordinate, and manage assessment schedules, resources, and deliverables.
Conduct security control assessments in accordance with NIST RMF and NIST SP 800-53.
Review SAPs, SARs, VARs, POA&M recommendations, and ATO briefing materials.
Conduct risk analyses and evaluate security control effectiveness.
Assess cloud-hosted environments against federal cybersecurity requirements.
Serve as the primary liaison between assessment teams and government stakeholders.
Present assessment findings, risk determinations, and remediation recommendations.
Support executive-level briefings and ATO decision activities.
Mentor and guide cybersecurity personnel and assessment teams.
Recommend security measures to protect organizational information assets.
Implement process improvements that enhance assessment quality and efficiency.