Cybersecurity and Mission Assurance Lead

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Engineering & Analysis, and Training. A Federal Law Enforcement agency is seeking motivated, mission-focused Cyber Security Lead to join our dynamic Information Technology Directorate (ITD) team. Serving as a database administrator you will play a key role in protecting and defending information systems.

As a Cyber Security Lead, you will manage a team of analysts to support, implement, and monitor cybersecurity and risk management frameworks, ensuring full compliance with Department of War (DoW)and Department of the Navy (DoN) directives. Performs senior-level cybersecurity analysis while coordinating contractor cybersecurity activities across operations, engineering, modernization, and governance. Integrates MDR, incident response, vulnerability management, RMF/A&A, continuous monitoring, STIG remediation, Zero Trust support, and cybersecurity evidence. Advises the Program Manager and applicable Government leads on cyber dependencies, mission impact, readiness, and corrective actions. This role provides technical coordination and escalation support but does not replace Government cybersecurity authorities or accept risk, approve architectures, authorize systems, or direct cyber operations. You'll work closely with IT, incident response, and accreditation teams to secure data, networks, systems, applications, and field operations, including responding to cyber incidents, ensuring accreditation/authorization, and maintaining information system security posture.

Coordinate cyber participation in incidents, changes, projects, and migration waves.
• Ensure cybersecurity requirements are identified before design and implementation decisions are finalized.
• Coordinate RMF, A&A,, ATO, POA&M, STIG, ACAS, and eMASS-related work.
• Link vulnerability and cyber conditions to affected mission services.
• Support MDR improvement, threat analysis, and incident-response coordination.
• Review cybersecurity impacts of cloud, application, data, and infrastructure changes.
• Maintain traceability between cyber findings, corrective actions, and Government decisions.
• Coordinate with government cybersecurity personnel, system owners, Government authorizing officials, and external providers.
• Serve as the contractor's working cyber authority for cross-MDA coordination.
• Remain directly productive in the applicable senior cybersecurity labor category
• Perform monthly vulnerability scans using DoW mandated tools (e.g., SCAP, ACAS).
• Monitor systems using detection suites (e.g., Firewalls, IDS/IPS, HBSS, SEM), and report vulnerabilities and incidents to Navy authorities.
• Participate in Insider Threat Program and support the Cyber Security Program's continuous improvement.
• Respond to and coordinate incident analysis, containment, and reporting within prescribed SLAs (e.g., response within two hours for mission-critical incidents).
• Ensure systems and applications comply with applicable STIGs, cyber security accreditation, and patch/update requirements.
• Maintain situational awareness of directives, deadlines, and reporting for cybersecurity training and certification.
• Continually assess security controls, recommend and implement improvements, and support accreditation and audit processes.
• Collaborate with IT, program, and external agency stakeholders to ensure an effective cybersecurity posture.

• US Citizenship Required
• TSSCI clearance
• Minimum of ten (10) years of progressive experience in Information Systems Security Engineering.
• At least three (3) years supervisory/management experience.
• Must meet Dow 8140.03 requirements.
• CISSP or GCIA or GICSP Certification preferred.
• Strong background in certification/accreditation (C&A) for IT systems.
• Experience with public key-based technologies, HBSS, MacAfee, Trellix, Splunk, Secure Network Analytics,
• Demonstrated leadership and experience guiding cybersecurity staff and implementing enterprise-wide cybersecurity doctrine and policies.
• Ability to apply information systems security engineering, threat mitigations, and lessons learned from attack scenarios.