Cybersecurity Lead

Mano Lani•Quantico, VA

5d•$90,000 - $124,000

About The Position

Mano Lani is looking for a Cybersecurity Lead to provide dedicated information assurance and Cyber compliance oversight for all Marine Corps PKI information technology systems, including Certificate Validation Infrastructure, Certificate Authorities, PKI virtualization systems, RA workstations, and the Alternate Token Issuance Management System. This position serves as the contractor's single point of contact for all PKI Cyber Security Support tasks and interfaces directly with the MCCOG Information System Security Manager and Vulnerability Management Team.

Requirements

Must be a U.S. citizen and able to obtain and maintain a government security clearance
Bachelor's degree in Cybersecurity, Computer Science, or Information Technology
CISSP required
Current DoD/DISA ACAS Training Certification required
CompTIA Security+ CE or equivalent DoD 8570/8140 IAM baseline certification
Experience with DoD/NSS and Only-Locally-Trusted PKI operations, maintenance, and cybersecurity compliance
Working knowledge of DoD/USMC Risk Management Framework, STIG/SRG application, and IAVM processes
Experience with DISA SCAP benchmarks, ACAS/Nessus vulnerability scanning, and POA&M management

Nice To Haves

Experience supporting USMC or DON cybersecurity programs
Familiarity with MCCAST, E-ITSM/Remedy, and MCCOG security monitoring tools
Experience with Microsoft Defender for Identity in a DoD environment

Responsibilities

Serve as the contractor's cybersecurity single point of contact, providing technical oversight and guidance to all cyber support staff
Ensure all Marine Corps PKI systems maintain current Assessment and Authorization documentation; coordinate annual re-certification and Risk Management Framework projects
Oversee ongoing evaluation of assets against DISA-approved SCAP benchmarks and manual STIG checks; ensure compliance with DoD and USMC assessment schedules
Direct remediation of STIG/SRG findings within DoD prescribed timelines; manage POA&M development and tracking for unmitigable vulnerabilities
Ensure full compliance with the DoD Information Assurance Vulnerability Management system; resolve or document IAVM findings with POA&Ms submitted to the Vulnerability Management Team within required reporting periods
Support all DCDC Cyber Inspections including Command Cyber Readiness Inspections and RA audits; provide PKI metrics and supporting documentation to the ISSM
Provide ISSO support for DoD/NSS PKI Registration Authority workstations, maintaining required separation of duties from the RA Workstation Administrator
Prepare and submit monthly Cyber Security Management Reports covering vulnerability management, patching status, A&A updates, STIG/SCAP results, and IAVM findings
Leverage MCCOG-provided monitoring tools including ACAS and Microsoft Defender for Identity for proactive security event management
Coordinate with Active Directory GPO managers as needed to resolve security configuration deviations