Apply on Employer Site

Aretum · 5 hours ago

Senior Cybersecurity Lead

Washington, DC

Full-time

Hybrid

Senior Level, Lead/Staff

$150K/yr - $165K/yr

8+ years exp

Aretum is a mission-driven organization committed to delivering innovative, technology-enabled solutions to customers across defense, civilian, and homeland security sectors. As a Senior IA/Cybersecurity Lead, you will be responsible for evaluating and strengthening security controls, conducting risk assessments, and managing compliance with Federal Information Security Management Act (FISMA) requirements.

ConsultingInformation Technology

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information

Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure

Respond to computer security breaches and viruses

Monitor DOD, and other sites (e.g. Army Cyber) for new standards, regulations and policies

Review contract deliverables for compliance

Support risk management framework (RMF) implementation

Assess Information Assurance Vulnerability Alert (IAVA) management plans and processes

Develop and maintain Plans of Actions and Milestones (POAMs) for security related activities

Manage DD2875 submissions and support provisioning activities

Lead a Cybersecurity team and support interaction with other IT teams

Qualification

DoD IA experienceActive TS/SCICISSP certificationNIST RMF experienceVulnerability managementPenetration testingFISMA complianceDoD project managementSOP writingCommunication skillsTeam leadership

Required

A minimum of ten years of DoD IA experience

Active TS/SCI Required

Possess one of the following certifications: GSLC, CISSP, CISM, and CISA, or another DoD 8570.01-M Level 3 authorized IAT/IAM certification

A minimum of eight years of experience analyzing, assessing, and implementing corrective actions based on vulnerability management and penetration testing tools and work efforts

A minimum of eight years of experience with the NIST RMF, NIST SP 800-53, STIGs, SCAP, IAVAs, and FISMA

A minimum of eight years of experience supporting DoD defensive cyber operational activities, including, but not limited to, information system protection, defense, response (incident handling), reporting, and recovery

A minimum of eight years of experience in managing complex DoD projects