Cybersecurity Lead, RMF

All Native Group, The Federal Services Division of Ho-Chunk Inc.

. Lead security authorization for a cloud-hosted maintenance management platform .

Posted 10/2/2026full-timeRemote • Kentucky • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in DoD cybersecurity, including leading RMF/ATO packages and implementing security controls for cloud-hosted platforms. Proficient in vulnerability management, incident reporting, and compliance with NIST SP 800-171 and CMMC standards.

Highest-signal resume keywords

DoD Cybersecurity ExperienceRMF/ATO Package LeadershipCISSP or CISM CertificationAzure Government Security ToolingVulnerability Scanning with ACAS/Nessus

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security AuthorizationVulnerability ManagementIncident ReportingSecurity Impact AnalysisIdentity and Access ControlsAudit Log ReviewNIST SP 800-171 ComplianceCMMC AssessmentOT/IoT SecurityRole Separation

Soft Skills

CommunicationLeadershipCollaborationProblem-Solving

Tools & Technologies

EMASSMicrosoft SentinelSplunkACASNessus

Certifications & Qualifications

CISSPCISMCompTIA Security+

Industry Keywords

Department of DefenseCloud SecuritySecurity Awareness TrainingAudit RecordsControl Evidence

Tech Stack

Tools & technologies

AzureCloudCyber SecurityIoTSplunk

About the role

Key responsibilities & impact

Lead security authorization for a cloud-hosted maintenance management platform
Prepare and manage SSP, POA&M and control evidence with the Mission Owner and Authorizing Official
Implement identity, access and data controls, including CAC/PIV federation, role separation, audit records and secrets management
Define OT segmentation for sensors, gateways and building controllers
Run vulnerability management, continuous monitoring and required incident reporting
Maintain NIST SP 800-171 evidence and support CMMC assessments
Deliver security awareness content for technicians and administrators
Run scheduled vulnerability scans and track remediation to closure
Review audit logs and security alerts and investigate suspicious activity
Perform security impact analysis on proposed system changes
Travel periodically to Fort Campbell for authorization meetings and OT walkdowns

Requirements

What you’ll need

7+ years of DoD cybersecurity experience
3+ years leading RMF/ATO packages (eMASS) through authorization
Authored ATO packages that were granted
Working knowledge of Azure Government or equivalent cloud security tooling
Bachelor's degree in Cybersecurity, Information Systems or a related field
CISSP or CISM (DoD 8140 IAM Level II/III) required
CompTIA Security+ required at minimum
Must be able to pass a background check and obtain installation access
NIST SP 800-171 and CMMC assessment experience preferred
Army authorization process experience preferred
OT/IoT security (NIST SP 800-82) experience preferred
ACAS/Nessus vulnerability scanning and DISA STIGs experience preferred
SIEM tools experience, such as Microsoft Sentinel or Splunk, preferred
Department of Defense installations, contracts or programs experience is a plus
Must be able to lift up to 25 lb
Must be able to perform prolonged periods of desk and computer work
Occasional walking of buildings and mechanical spaces during on-site security walkdowns

Benefits

Comp & perks

Drug-free workplace
Pre-employment drug screen
Random drug screens throughout employment
Remote or office-based work arrangement
Full-time and part-time positions available
Typical Monday–Friday daytime hours