Cybersecurity Lead

DecisionPoint | Cortek

2h•Remote

About The Position

DecisionPoint seeks a Cybersecurity Lead to manage and enforce cybersecurity posture, compliance, and continuous monitoring for a cloud-based enterprise environment supporting Department of Defense (DoD) missions. This senior technical role integrates data protection architecture, Zero Trust enforcement, and continuous RMF evidence generation across AWS GovCloud IL4/IL5 environments. The Cybersecurity Lead will serve as the key authority ensuring systems meet or exceed all DoD cybersecurity mandates, including DISA STIG/SRG compliance, RMF authorization, and Zero Trust alignment. This position is fully remote. Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Requirements

Must hold an active Top Secret clearance (SCI eligibility preferred).
Bachelor’s degree in Cybersecurity, Computer Science, or a related technical discipline.
Minimum 7 years of experience in DoD cybersecurity, compliance, or RMF program management.
Hands-on experience managing A&A activities within eMASS and implementing RMF controls in IL4/IL5 cloud environments.
Proven ability to lead cross-functional cybersecurity programs and automation initiatives.
Strong understanding of DoDI 8510.01 (RMF), DISA STIG/SRGs, and DoD Cloud Computing SRG.
Familiarity with Zero Trust architecture and continuous monitoring implementation.
Proficiency in AWS GovCloud, container security (Kubernetes, Docker), and CI/CD security integration.
Knowledge of FedRAMP, NIST SP 800-171/53, and CMMC frameworks.
Experience with vulnerability scanning, log management, and compliance validation tools.
Required: CompTIA Security+ CE (DoD 8570 IAT II baseline).
Excellent leadership and coordination skills across technical and compliance teams.
Strong analytical, documentation, and communication capabilities.
Proven ability to assess risk, prioritize mitigations, and drive secure operational outcomes.
Commitment to continuous improvement, automation, and mission assurance.

Nice To Haves

Preferred: CISSP, CISM, or CEH.
Preferred: AWS Certified Security – Specialty or equivalent.

Responsibilities

Lead the design and implementation of the program’s cybersecurity framework across multiple IL environments (IL2–IL5).
Perform RMF lifecycle management, including control identification, tailoring, inheritance, and mapping to DoDI 8510.01.
Develop and maintain continuous RMF evidence generation through automated compliance and monitoring pipelines using eMASS, Tenable ACAS, AWS Inspector, or similar tools.
Design and implement data protection and encryption strategies aligned with DoD cloud security and NIST standards.
Manage cybersecurity architecture documentation including network diagrams, system boundaries, and data flow mappings.
Oversee vulnerability management, penetration testing, and remediation tracking through POA&M management.
Ensure alignment with DISA STIGs, SRGs, and PPSM compliance requirements; perform periodic audits and assessments.
Coordinate with security assessors and system engineers to maintain accreditation and Authorization to Operate (ATO) compliance.
Lead continuous cyber risk assessments and control mapping to ensure evolving compliance with DoD and program directives.
Manage the DevSecOps Plan and ensure continuous security integration into all development and deployment pipelines.
Support implementation of Zero Trust architecture through identity management, segmentation, and telemetry.
Oversee the generation and maintenance of security documentation, including SSPs, SARs, IRPs, and contingency plans.
Lead incident response and remediation coordination, ensuring timely logging, root cause analysis, and reporting.
Mentor cybersecurity staff and communicate compliance posture, risk levels, and readiness metrics to leadership.