Cyber Security Manager

Leidos is seeking an experienced Cyber Security Manager to lead cybersecurity engineering, risk management, authorization, and security operations support for the United States Coast Guard’s Command, Control, Communications, Computers, Cyber, and Intelligence Service Center (C5ISC) in Alexandria, VA.

The Cyber Security Manager will be accountable for the quality, timeliness, and execution of cybersecurity activities across the USCG Cloud Modernization program. The role combines technical cybersecurity leadership, direct people management, integrated delivery planning, customer engagement, and continuous improvement.

Primary Duties:

• Lead, coach, recruit, and evaluate a multidisciplinary cybersecurity team of ISSOs, ISSEs, security engineers, and incident response personnel
• Oversee NIST Risk Management Framework (RMF) execution and Authorization to Operate (ATO) activities across multiple cloud and enterprise authorization boundaries
• Direct cybersecurity engineering across AWS and Azure environments, partnering with Cloud Engineering and Cloud Operations on secure architecture, configuration baselines, identity/access controls, encryption, network security, Zero Trust, and DevSecOps integration
• Own a disciplined vulnerability and remediation program covering vulnerability scans, STIG compliance, findings triage, Plan of Action and Milestones (POA&M) tracking, corrective-action ownership, due dates, verification, and risk escalation
• Oversee continuous security monitoring, security control health, log and alert visibility, incident detection and response coordination, incident documentation, and corrective actions with appropriate Coast Guard stakeholders
• Build integrated cybersecurity work plans, Jira backlogs, schedules, milestones, capacity forecasts, risks, and dependencies
• Conduct technical and quality reviews of security plans, control narratives, architecture diagrams, assessment artifacts, contingency/incident response documentation, vulnerability evidence, and other authorization deliverables
• Coordinate with government ISSOs, security control assessors, authorizing officials, CISO representatives, program leadership, vendors, and cross-functional delivery teams to resolve findings and maintain transparent status
• Lead cybersecurity readiness reviews, tabletop exercises, remediation reviews, and operational process improvements
• Provide clear, decision-oriented briefings on ATO status, security risks, POA&M aging, vulnerabilities, remediation progress, staffing constraints, and recommended mitigations to technical and executive stakeholders
• Foster a proactive security culture through mentoring, technical standards, documented procedures, knowledge transfer, and repeatable Agile/DevSecOps delivery practices

Basic Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline
• 8+ years of progressively responsible cybersecurity engineering, information assurance, security operations, or RMF/ATO experience
• 4+ years of direct technical people management or cybersecurity team leadership
• Deep practical knowledge of NIST RMF, NIST SP 800-53 security controls, FISMA, ATO packages, security assessment evidence, POA&Ms, and continuous monitoring
• Experience leading vulnerability management, scan review, STIG remediation, control validation, incident response coordination, and security risk reporting
• Strong technical understanding of securing AWS and/or Azure cloud environments, enterprise identity, network/security architecture, and infrastructure security controls
• Experience managing integrated schedules, staffing/capacity plans, Jira or comparable work tracking, delivery dependencies, quality reviews, and risk mitigation using Agile and disciplined project management practices
• Ability to lead technical investigations and communicate cybersecurity findings, architecture tradeoffs, remediation priorities, and executive-level recommendations clearly

Clearance Requirement:

• Current and active Public Trust, consistent with the existing USCG Cloud Modernization position requirements

Preferred Qualifications:

• Experience supporting DHS, U.S. Coast Guard, DoD, or large federal civilian cloud modernization programs
• Experience managing cybersecurity teams of 10+ personnel across ISSO, ISSE, cyber engineering, and incident response functions
• CISSP, CISM, Security+, CCSP, CAP/CGRC, or comparable cybersecurity certification
• Experience with eMASS, federal security assessment and authorization workflows, FedRAMP, DoD Impact Level requirements, and cloud authorization boundaries
• Experience with ACAS/Nessus, DISA STIGs, SIEM/log monitoring, vulnerability remediation dashboards, and incident response processes
• Knowledge of Zero Trust, cloud security automation, infrastructure as code, DevSecOps, and security governance
• PMP, Certified ScrumMaster, or comparable project/delivery management credential