Cybersecurity Lead (DoD/Army)

Location: Huntsville, Alabama; on-site

Salary: $106,000–$148,000 per year

Company

hirify.global delivers cybersecurity, development, IT infrastructure, supply chain management, system design, and continuous improvement services to the federal government. The company is an SBA-certified Service-Disabled Veteran-Owned Small Business with offices in Northern Virginia and Huntsville, Alabama.

What you will do

• Lead the contract cybersecurity program supporting PAE Fires OCIO IMAS across systems engineering, software integration, testing, training, and lifecycle support.
• Coordinate cybersecurity activities with Government cybersecurity leadership, assessors, authorizing officials, engineers, developers, administrators, and program management.
• Lead RMF assessment and authorization activities and support ATO, ATC, and IATT decisions.
• Develop and maintain cybersecurity architecture, configuration, threat, vulnerability, and risk assessment documentation.
• Oversee software and hardware assurance, including third-party and FOSS risk, SBOM activities, static analysis, STIG implementation, and OWASP Top 10 mitigation.
• Lead vulnerability management, security scanning, IAVA/IAVM tracking, RMF artifact delivery, and prioritization of remediation activities.

Requirements

• TS/SCI security clearance required.
• Bachelor’s degree in cybersecurity, computer science, information technology, information assurance, engineering, or a related field; equivalent relevant experience may be accepted where permitted.
• Senior experience leading DoD/Army cybersecurity programs, RMF assessment and authorization, security engineering, and continuous risk management.
• Expert knowledge of NIST SP 800-37, NIST SP 800-53, DoDI 8510.01, DoD/DoDD 8500-series requirements, DISA STIGs, and Army cybersecurity policy.
• Experience producing SSPs, PPSM information, POA&Ms, risk and vulnerability assessments, security-control evidence, and authorization packages.
• Experience leading vulnerability management, security scanning, patch assessment, IAVM/IAVA processes, remediation prioritization, and technical risk reporting.

Nice to have

• CISSP, CGRC/CAP, Security+, or another certification aligned with the assigned DCWF role.
• Experience as an ISSM, ISSE, cybersecurity manager, or senior RMF lead for Army or DoD systems.
• Experience with Tenable Nessus, Tenable Security Manager, STIG Viewer, Evaluate STIG, Trellix, or comparable platforms.
• Experience supporting classified systems, SAP environments, software assurance, and Government Change Control Board processes.

Culture & Benefits

• Eleven federal holidays and paid time off accrued each pay period.
• Parental leave and continuing education assistance.
• Medical, dental, and vision insurance with employer contributions.
• Company-paid short- and long-term disability, life, and AD&D insurance.
• 401(k) plan with matching and vesting schedule, plus flexible spending accounts.
• Wellness, employee assistance, legal, pet, and 529 college savings benefits.