Cybersecurity Lead - C

Telos•Ashburn, VA

5d•Hybrid

About The Position

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security. Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment! This position will be based at Ashburn/Remote - Travel 20%

Requirements

Bachelor’s Degree (preferred in Cybersecurity, IT, or related field)
5-7 years of experience
Secret security clearance
IAM Level III
Hands-on experience with ACAS (Nessus/Tenable Security Center), SCAP tools, and STIG compliance.
Familiarity with NIST 800-53, DoD RMF process, C-SCRM process, and system accreditation procedures.
Strong documentation and reporting skills.
Experience working with DoD or federal cybersecurity compliance programs.
Strong analytical and problem-solving skills.
The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Responsibilities

Implement and manage RMF processes to ensure compliance with NIST, DoD, and other applicable security guidelines.
Conduct vulnerability assessments using ACAS (Nessus/Tenable Security Center) and analyze scan results to identify and mitigate risks.
Utilize SCAP tools for automated security compliance checks and remediation.
Apply Security Technical Implementation Guides (STIGs) to configure and harden systems.
Develop and maintain RMF documentation, including System Security Plans (SSP), and Plan of Action and Milestones (POA&Ms).
Support system accreditation efforts, including security control assessments and risk analysis.
Demonstrate a robust understanding of DoD cybersecurity requirements including: Risk Management Framework (RMF): The methodology for developing and delivering the necessary documentation to support the Assessment and Authorization (A&A) process and achieve an Interim Authority to Test (IATT), Cybersecurity Supply Chain Risk Management (C-SCRM): The processes used to ensure full traceability of all hardware and software components and to verify compliance with the Trade Agreements Act (TAA), and Classified Operations: The technical and procedural controls that will secure the infrastructure and manage data at the NIPRNET and SIPRNET classification levels.
Work closely with project managers, system administrators, system development engineers and other cybersecurity professionals to implement security best practices.
Stay updated on evolving cybersecurity policies, regulations, and emerging threats.