Cybersecurity Lead

American Operations Corporation • Montgomery, AL

1d

About The Position

Leads cybersecurity governance, RMF execution, vulnerability management, continuous monitoring, release security validation, and cybersecurity compliance activities across the BMx FoS. The Cybersecurity Lead integrates cybersecurity directly into Agile execution, DevSecOps pipeline governance, release management, cloud migration, modernization sequencing, and operational sustainment activities. The Cybersecurity Lead defines release security gates, manages vulnerability triage, coordinates STIG validation, oversees ACAS compliance activities, supports cATO readiness, and ensures cybersecurity evidence generation remains synchronized with release execution and RMF reporting requirements. This role works closely with the DevSecOps Platform Lead, Independent Test Lead, System Architect, Product Owners, and Cloud Engineers to ensure cybersecurity controls are integrated into pipeline execution and modernization governance from backlog refinement through production release. The Cybersecurity Lead also supports POA&M management, operational risk analysis, continuous monitoring activities, and cybersecurity reporting required for Government oversight and compliance.

Requirements

• Must possess DoD Secret Clearance.
• RMF
• STIGs
• ACAS
• SAST/DAST
• Vulnerability management
• Continuous monitoring
• eMASS
• Security architecture
• Zero Trust concepts
• Security+ certification
• 10+ years cybersecurity experience.
• Experience supporting DoD RMF environments.

Nice To Haves

• CISSP certification
• CASP+ certification
• CCSP certification

Responsibilities

• Leads cybersecurity governance, RMF execution, vulnerability management, continuous monitoring, release security validation, and cybersecurity compliance activities.
• Integrates cybersecurity into Agile execution, DevSecOps pipeline governance, release management, cloud migration, modernization sequencing, and operational sustainment.
• Defines release security gates.
• Manages vulnerability triage.
• Coordinates STIG validation.
• Oversees ACAS compliance activities.
• Supports cATO readiness.
• Ensures cybersecurity evidence generation remains synchronized with release execution and RMF reporting requirements.
• Supports POA&M management.
• Supports operational risk analysis.
• Supports continuous monitoring activities.
• Supports cybersecurity reporting required for Government oversight and compliance.

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability

What This Job Offers

• Job Type: Full-time
• Career Level: Senior