Security and Compliance Lead

Nexgen Technologies•Lakewood, CO

1d•$110,000 - $135,000

About The Position

NexGen Technologies, Inc. is a leading IT services firm specializing in delivering innovative, high‑quality solutions to our federal government clients. Our core competencies include IT professional support services, software development, cloud services, IT Operations, Agile project management, and GIS services. NexGen is seeking a Security and Compliance Lead who would be responsible for leading and directing a team of cyber analysts in the identification, analysis, and mitigation of cyber threats and vulnerabilities and the preparation of tailored mitigation recommendations focused on risk reduction. This individual would drive process improvements to enhance the organization's ability to identify, assess, and mitigate cybersecurity threats and would lead cybersecurity oversight, including vulnerability assessments, cyber threat diagnostics, and risk reduction. This position is central to analyzing cybersecurity trends and prioritizing risk mitigation efforts ensuring compliance with policies and operational requirements.

Requirements

6+ years of experience in cybersecurity monitoring, threat analysis, or security operations.
Demonstrated experience leading or mentoring cybersecurity teams.
Strong understanding of cybersecurity policies, monitoring requirements, and audit frameworks.
Proficiency with SIEM platforms, vulnerability assessment tools, and cybersecurity monitoring technologies.
Ability to synthesize complex technical data into clear, actionable recommendations.
Experience with Federal civilian A&A process (ATO/IATO).
Experience with FedRAMP Moderate compliance and documentation.
Experience with Zero Trust L2 implementation.
System Security Plan (SSP) authoring.
PIA, SORN, 508, FOIA, Records compliance.
Experience with 3PAO assessments.
Must have COMPLETED at least one federal ATO — not just contributed to.
Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
Strong communication, analytical, and problem‑solving skills.
Must be able to pass background screening prior to employment.
US Citizenship, legal permanent residence, or US work authorization with a minimum of 3 years of US presence is required due to federal contract requirements.
Reliable internet (50 Mbps down / 25 Mbps up) and a secure remote work environment.

Responsibilities

Develop and implement security monitoring strategies and procedures to improve the organization's overall security posture.
Provide actionable risk-reduction recommendations to stakeholders based on threat intelligence and analysis findings, contributing to proactive security improvements.
Ensures alignment with policies for monitoring and audits.
Manages the integration and configuration of cybersecurity tools, ensuring consistent coverage across all assets.
Analyzes system vulnerabilities and potential risks by synthesizing outputs from monitoring tools and incident data.
Prepares detailed reports on organizational risk posture, remediation recommendations, and trend analysis for leadership.
Other duties as assigned.