Cybersecurity Lead

American Operations Corporation • Montgomery, AL

9d

About The Position

Leads cybersecurity governance, RMF execution, vulnerability management, continuous monitoring, release security validation, and cybersecurity compliance activities across the BMx FoS. The Cybersecurity Lead integrates cybersecurity directly into Agile execution, DevSecOps pipeline governance, release management, cloud migration, modernization sequencing, and operational sustainment activities.
The Cybersecurity Lead defines release security gates, manages vulnerability triage, coordinates STIG validation, oversees ACAS compliance activities, supports cATO readiness, and ensures cybersecurity evidence generation remains synchronized with release execution and RMF reporting requirements. This role works closely with the DevSecOps Platform Lead, Independent Test Lead, System Architect, Product Owners, and Cloud Engineers to ensure cybersecurity controls are integrated into pipeline execution and modernization governance from backlog refinement through production release.
The Cybersecurity Lead also supports POA&M management, operational risk analysis, continuous monitoring activities, and cybersecurity reporting required for Government oversight and compliance.

Requirements

• DoD Secret Clearance
• RMF
• STIGs
• ACAS
• SAST/DAST
• Vulnerability management
• Continuous monitoring
• eMASS
• Security architecture
• Zero Trust concepts
• Security+ certification
• Bachelor’s degree
• 10+ years cybersecurity experience
• Experience supporting DoD RMF environments

Nice To Haves

• CISSP certification
• CASP+ certification
• CCSP certification

Responsibilities

• Lead cybersecurity governance, RMF execution, vulnerability management, continuous monitoring, release security validation, and cybersecurity compliance activities.
• Integrate cybersecurity into Agile execution, DevSecOps pipeline governance, release management, cloud migration, modernization sequencing, and operational sustainment activities.
• Define release security gates.
• Manage vulnerability triage.
• Coordinate STIG validation.
• Oversee ACAS compliance activities.
• Support cATO readiness.
• Ensure cybersecurity evidence generation remains synchronized with release execution and RMF reporting requirements.
• Support POA&M management, operational risk analysis, continuous monitoring activities, and cybersecurity reporting.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability

What This Job Offers

• Job Type: Full-time
• Career Level: Senior