Cybersecurity operations lead

Leads all Cybersecurity Operations (CSO) under U.S. Army Transportation Command (ARTRANS) C4ISR and distribution operations, directing RMF, vulnerability management, security tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

Key Tasks & Responsibilities

• Direct RMF documentation and Authorization to Operate (ATO) sustainment; submit RMF packages via eMASS and RMF Strategy
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP compliance reporting
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG)
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports

Education & Experience

• 6+ years of cybersecurity operations experience in a DoD environment (RMF, vulnerability management, incident response)
• Full DoDM 8140.03 foundational qualification prior to start. Residentially Qualified at the start of work for elevated access to any system, network, or enclave
• Experience achieving/sustaining ATO under RMF for Army systems; familiarity with USTCI 6600.01

Certifications

• DCWF Work Role 621 - Cyber Defense Analyst, Intermediate proficiency. Common qualifying certifications: CySA+, GCIA, CEH
• Advanced certification such as CISSP, GCIH, or CASP+

Security Clearance

Secret clearance