Security and Authorization Lead

Concept Solutions, LLC

. Oversee security leadership and authorization activities supporting a Department of War program .

Posted 10/13/2026full-timeRemote • United StatesSenior💰 $100,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Information Systems Security Engineering, with a strong focus on leading Risk Management Framework (RMF) authorizations and managing security approaches, including OSCAL System Security Plans and vulnerability management. Proven ability to direct security teams and represent programs to key stakeholders while ensuring compliance with NIST standards.

Highest-signal resume keywords

Information Systems Security EngineeringRisk Management Framework (RMF)NIST SP 800-53 Revision 5Open Security Controls Assessment Language (OSCAL)CISSP or CISSP-ISSEP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementPlan of Action and Milestones (POA&M)Continuous Authorization to Operate (cATO)Security LeadershipThreat Modeling

Soft Skills

LeadershipCommunication

Tools & Technologies

AWS GovCloud

Certifications & Qualifications

CISSPCISSP-ISSEP

Industry Keywords

Department of War (DoW)Authorization PackageInformation System Security Manager (ISSM)Authorizing Official (AO)Active Secret Clearance

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Oversee security leadership and authorization activities supporting a Department of War program
Own the security approach and authorization package, including the system boundary, threat model, control inheritance, OSCAL System Security Plan (SSP), and pipeline-executed evidence plan
Direct the Information Systems Security Engineer (ISSE), Security Automation Engineer, Security Analyst, and Sustainment Application Security Engineer
Own vulnerability management and the Plan of Action and Milestones (POA&M) across both tracks
Represent the program to the customer's Authorizing Official (AO), assessors, and Information System Security Manager (ISSM)
Brief authorization status at every phase-exit review

Requirements

What you’ll need

12+ years of experience in information systems security engineering
Experience leading Department of War (DoW) Risk Management Framework (RMF) authorizations through authorization decisions
Knowledge of NIST SP 800-53 Revision 5
Experience with Open Security Controls Assessment Language (OSCAL)
CISSP or CISSP-ISSEP certification preferred
Experience with continuous Authorization to Operate (cATO) practices preferred
Experience with AWS GovCloud preferred
Active Secret clearance or higher preferred
U.S. citizenship required
Must be eligible to obtain and maintain a Department of War (DoW) security clearance
Ability to work full-time, 40 hours per week, Monday through Friday, during core hours 9:00 a.m.–3:00 p.m. Eastern

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life insurance
Comprehensive 401(k) plan with matching and immediate vesting
Positive culture centered on innovation, engagement, and career development
Career development opportunities