Senior Cybersecurity Lead

Chameleon Integrated Services•Linthicum Heights, MD

3d•Onsite

About The Position

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance. Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

Requirements

Must hold a certified Information Systems Security Manager (ISSM) or equivalent credential compliant with DoD 8140/8570 requirements (e.g., CISSP, CISM, or GSLC).
Proven track record executing the end-to-end RMF lifecycle and submitting packages through eMASS.
Demonstrated experience writing, reviewing, or consolidating enterprise SSPs, POA&Ms, and STIG compliance documentation.
Direct experience advising an Authorizing Official (AO) or senior government program manager on risk acceptance boundaries.
Strong understanding of operational cybersecurity environments, including standard tools or workflows for penetration testing, threat hunting, and incident response.
U.S. Citizenship required.

Nice To Haves

Active TS/SCI security clearance.
Familiarity with continuous monitoring automation or cATO transition models inside a DoD enterprise.

Responsibilities

Manage and maintain the overarching enterprise RMF package, validating the security compliance of all interconnected agency systems.
Execute dual RMF tracks: Steady-State Continuous Monitoring for systems with existing valid ATOs, and ATO Attainment ("Get-Well") authoring for newly onboarded systems.
Author and compile initial System Security Plans (SSPs), Security Assessment Plans, and coordinate AO-ready eMASS packages delivered within rigid 180-day windows.
Consolidate, manage, and track the enterprise-level Plan of Action and Milestones (POA&M) on behalf of the government, providing formal Risk Acceptance recommendations to the AO.
Guide the rapid evolution of agency networks away from a static ATO process and toward an automated Continuous ATO (cATO) framework.
Direct and coordinate teams of Information System Security Officers (ISSOs) and technical assessors.
Interface directly with live cyber operations to ensure vulnerability scans, automated patching windows, Infrastructure as Code (IaC) change repositories, and incident response procedures are fully compliant with DoD mandates.