This role serves as the senior cybersecurity and DevSecOps lead responsible for integrating security, risk management, and compliance across data, AI, and software delivery efforts. The position ensures Government security requirements are translated into actionable engineering practices, oversees RMF and authorization support activities, and directs continuous security monitoring throughout the system lifecycle. Working closely with technical leads, regional teams, and Government stakeholders, this role drives secure implementation, risk-informed decision-making, and enterprise-wide consistency in support of mission-critical capabilities.

• Translate Government security requirements into contractor engineering practices, security acceptance criteria, and reusable control evidence across the enterprise hub, regional teams, and resident command teams.
• Identify and assess risks introduced by data and AI capabilities. Direct threat modeling and security testing covering data and model integrity, unauthorized disclosure, adversarial manipulation, and software supply-chain dependencies.
• Lead Risk Management Framework (RMF) artifact development with Information Systems Security Officers and Security Control Assessor Representatives. Coordinate assessments and prepare evidence supporting authorization to test, connect, and operate.
• Direct implementation and management of continuous integration and continuous delivery (CI/CD) security capabilities supporting DevSecOps. Embed vulnerability detection, automated security testing, and remediation verification into delivery workflows.
• Coordinate with the Data Operations Technical Lead on data protection, access controls, and secure infrastructure, and with the Data Science and Analytics Technical Lead and other task leads on AI-specific risks, experimentation, release readiness, and sustainment.
• Oversee continuous security-control monitoring and risk reassessment. Maintain actionable remediation priorities, control evidence, and security transition information for each supported capability.
• Provide technical direction and coaching to assigned cybersecurity, RMF, and DevSecOps personnel. Work through regional management teams to correct security nonconformance and align local execution with enterprise requirements.
• Report security risks, authorization dependencies, and remediation status to the Program Manager and Government stakeholders. Recommend corrective action and document security concurrence for contractor release reviews.

Minimum Qualifications

• Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
• Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
• Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
• Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
• Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
• Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.