FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Cyber Security Lead
Concept Plus, LLCCybersecurity Lead securing Concept Plus’s federal Oracle OCI environments. Owning DoD RMF, ATO, incident response, cloud controls, and SOC 1 audit readiness.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in managing the DoD RMF lifecycle, including SSP development and ATO maintenance, while ensuring compliance with NIST SP 800-53 and DISA STIGs. Proficient in incident response, vulnerability assessments, and embedding security measures within CI/CD pipelines.
Highest-signal resume keywords
DoD RMF Lifecycle ManagementNIST SP 800-53 ComplianceCISSP CertificationIncident Response and Vulnerability ManagementCloud Security Controls
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Control AssessmentSSP DevelopmentPOA&M ManagementATO MaintenanceVulnerability AssessmentSecurity ScanningCI/CD Pipeline SecurityAudit Compliance SupportIncident DocumentationCloud Infrastructure Security
Soft Skills
LeadershipCommunicationAdvisory SkillsCollaboration
Tools & Technologies
ACASSCAPCloud OneOCI Cloud GuardOracle eBusiness SuiteOracle Fusion MiddlewareOracle Database Security
Certifications & Qualifications
CISSPDoD 8140/8570 IAM CertificationDoD Secret ClearanceTop Secret Clearance
Industry Keywords
DoDFederal EnvironmentCybersecuritySecurity ControlsDisaster RecoveryBusiness ContinuityFISCAMFFMIASOC 1 Type 2 AuditIL4/IL5 Authorization
Tech Stack
Tools & technologiesCloudCyber SecurityERPOracleVault
About the role
Key responsibilities & impact- Plan, implement, upgrade, and continuously monitor security measures for networks, systems, data, and cloud infrastructure within the Cloud One OCI authorization boundary
- Serve as contractor ISSO and own the DoD RMF package lifecycle
- Maintain security controls and compliance with NIST SP 800-53, DISA STIGs, and Cloud One requirements
- Lead and coordinate the ATO process with the AO, SCA, and ISSM
- Maintain the SSP, POA&M, and associated RMF artifacts
- Detect, respond to, and document cybersecurity incidents, breaches, and vulnerabilities
- Coordinate incident reporting and remediation with DISA, Cloud One, and the Government ISSM
- Support SOC 1 Type 2 audit compliance by providing control evidence, audit artifacts, and auditor liaison support
- Embed security scanning and RMF control validation into CI/CD pipelines
- Conduct vulnerability assessments, review ACAS/SCAP scan results, and track remediation to closure
- Monitor security controls and configurations for STIG, CCI, and Cloud One policy compliance
- Advise program leadership on cybersecurity risk, control gaps, and OCI security architecture decisions
- Support security-related deliverables, disaster recovery/business continuity security documentation, and posture reports
- Ensure Production-to-DR/COOP replication and failover configurations meet security and data protection requirements
- Coordinate FOCI considerations and COI disclosures
- Support cybersecurity awareness, training, and security-related onboarding
Requirements
What you’ll need- US Citizen
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related technical field
- 5+ years of progressive information security experience in a DoD or Federal environment
- Direct experience as an ISSO or equivalent role
- Active CISSP or higher relevant certification required at time of hire
- Hands-on experience managing the DoD RMF lifecycle, including SSP development, control assessment, POA&M management, and ATO maintenance
- Experience implementing, upgrading, and monitoring security measures for computer networks and information systems
- Experience responding to computer security breaches, vulnerabilities, and incidents in a DoD or Federal environment
- Familiarity with NIST SP 800-53, DISA STIGs, SCAP/ACAS scanning tools, and FedRAMP/DoD cloud security controls
- Active DoD Secret clearance required to start and maintainable for the duration of the program
- Preferred: active Top Secret clearance
- Preferred: DISA-managed or Cloud One ISSO experience and IL4/IL5 authorization familiarity
- Preferred: OCI Cloud Guard, Security Zones, OCI Vault, NSGs, and Bastion experience
- Preferred: SOC 1 Type 2 audit support and FISCAM/FFMIA familiarity
- Preferred: Oracle eBusiness Suite, Oracle Fusion Middleware, or Oracle database security experience
- Preferred: Oracle STIG implementation and automated compliance scanning experience
- Preferred: DoD 8140/8570 IAM- or IAT-level certifications
- Preferred: DESMF familiarity
- Preferred: AFLCMC, BES Directorate, or DoD ERP program experience
Benefits
Comp & perks- Competitive pay
- Comprehensive health insurance
- Dental insurance
- Vision insurance
- Paid life insurance
- Paid time off
- 11 paid holidays
- Performance bonuses
- Tuition reimbursement
- Unlimited training
- Collaborative, flexible, and innovative work environment