{"id":620894,"url":"https://alion.io/job/conceptplus-cyber-security-lead","title":"Cyber Security Lead","company":{"id":672958,"name":"Concept Plus","domain":"conceptplus.com","url":"https://alion.io/company/conceptplus","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"B","score":78,"open_postings":6,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":119000,"max_usd":235000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":103},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"FedRAMP","optional":false},{"name":"Oracle","optional":false},{"name":"IAM","optional":true},{"name":"Oracle ERP","optional":true}],"status":"live","first_seen_at":"2026-08-05T19:27:05Z","employer_posted_date":"2026-08-05","last_verified_at":"2026-10-28T13:59:29Z","board_verified":true,"closed_at":null,"days_open":83,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":83},"description":"About Concept Plus\nConcept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm.\nRecognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty.\nWe offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment.\nFor more information, visit www.conceptplus.com.\nAbout the role\nConcept Plus LLC is seeking an experienced Cybersecurity Lead to plan, implement, upgrade, and monitor security measures for the protection of all common services and cloud environments in support of an Oracle eBusiness, OCI hosted common services program. In this role, you will ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure hosted on the Cloud One Oracle Cloud Infrastructure (OCI) platform and will serve as the contractor's primary ISSO responsible for maintaining the program's Authorization to Operate (ATO), managing the DoD Risk Management Framework (RMF) lifecycle, and sustaining SOC 1 Type 2 audit readiness. You will respond to computer security breaches, vulnerabilities, and incidents affecting the environment and embed security practices throughout the DevSecOps pipeline. A CISSP certification or higher, and demonstrated RMF experience are required. An active Secret clearance is required to start.\nWhat you'll do\nPlan, implement, upgrade, and continuously monitor security measures for the protection of all networks, systems, data, and cloud infrastructure operating within the Cloud One OCI authorization boundary \nServe as the contractor ISSO, owning the DoD RMF package lifecycle including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring for all information systems \nEnsure appropriate security controls are in place and operating effectively to safeguard digital files, financial management data, and vital electronic infrastructure across all environments, in compliance with NIST SP 800-53, DISA STIGs, and applicable Cloud One security requirements \nLead and coordinate the ATO process with the Authorizing Official (AO), Security Control Assessor (SCA), and ISSM; maintain and update the System Security Plan (SSP), Plan of Action and Milestones (POA&M), and all associated RMF artifacts on a continuous basis \nDetect, respond to, and document cybersecurity incidents, breaches, and vulnerabilities affecting environments; coordinate with DISA, Cloud One, and the Government ISSM as required for incident reporting and remediation \nSupport SOC 1 Type 2 audit compliance for Federal Financial Management systems migrating to OCI, providing control evidence, audit artifacts, and liaison support to external auditors \nCollaborate with the DevSecOps Lead to embed security scanning (SAST, DAST, container image scanning) and RMF control validation into CI/CD pipelines for continuous ATO compliance \nMaintain the enterprise security posture across all environments, conducting regular vulnerability assessments, reviewing ACAS/SCAP scan results, and tracking remediation to closure within approved timelines\nMonitor security controls and system configurations for compliance with applicable STIGs, CCIs, and Cloud One security policies; generate and track POA&M items to resolution \nAdvise the Program Manager and Technical Lead on cybersecurity risk, control gaps, and security architecture decisions, including OCI-native security services (Cloud Guard, Security Zones, OCI Vault, Bastion) \nSupport the development and maintenance of security-related deliverables including Security/RMF Artifacts, DR/COOP security design documentation, and recurring posture reports \nEnsure near real-time Production-to-DR/COOP data replication and failover configurations meet security and data protection requirements \nCoordinate foreign ownership, control, and influence (FOCI) considerations and organizational conflict of interest (COI) disclosures with program leadership as required \nSupport cybersecurity awareness and training to program team members and support security-related onboarding for all incoming personnel\nRequired Qualifications\nUS Citizen\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, or related technical field \n5+ years of progressive information security experience in a DoD or Federal environment, including direct experience as an ISSO or equivalent role \nActive CISSP (Certified Information Systems Security Professional) or higher relevant certification required at time of hire \nDemonstrated, hands-on experience managing the DoD Risk Management Framework (RMF) lifecycle, including SSP development, control assessment, POA&M management, and ATO maintenance \nExperience implementing, upgrading, and monitoring security measures for the protection of computer networks and information systems, including ensuring appropriate controls are in place to safeguard digital files and electronic infrastructure \nExperience responding to computer security breaches, vulnerabilities, and incidents in a DoD or Federal environment \nFamiliarity with NIST SP 800-53, DISA STIGs, SCAP/ACAS scanning tools, and cloud security controls applicable to FedRAMP/DoD cloud environments \nActive DoD Secret clearance required to start; must be maintainable for the duration of the program\nPreferred Qualifications\nActive Top Secret (TS) security clearance; candidates holding an active TS clearance will be given strong preference as the program's operational scope and data sensitivity may require TS access \nExperience as an ISSO for systems operating within a DISA-managed or Cloud One environment, including familiarity with IL4/IL5 authorization requirements and Cloud One tenancy security controls \nHands-on experience with OCI security services including Cloud Guard, Security Zones, OCI Vault, Network Security Groups (NSGs), and OCI Bastion \nExperience supporting SOC 1 Type 2 audits for Federal Financial Management systems, including evidence collection, auditor liaison, and FISCAM/FFMIA compliance familiarity \nFamiliarity with Oracle eBusiness Suite (eBS), Oracle Fusion Middleware, or Oracle database security hardening and patching \nExperience with STIG implementation and automated compliance scanning for Oracle database and middleware products \nAdditional DoD 8140/8570 IAM-level certifications (e.g., CISM, GSLC, CCISO) or IAT-level certifications (e.g., CASP+ CE, CISA) are a strong plus \nFamiliarity with the DoD Enterprise Services Management Framework (DESMF) and service management security considerations \nPrior experience supporting AFLCMC, BES Directorate, or a DoD ERP program of record\nConcept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.","description_format":"text","description_chars":7582,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Digital Government","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-09-10T18:44:53Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.715,"p_room":0.44,"age_days":83,"expected_fill_days":69,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/conceptplus-cyber-security-lead","json_url":"https://alion.io/job/conceptplus-cyber-security-lead.json","meta":{"generated_at":"2026-10-28T17:00:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23124,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":672958},"rest":"https://alion.io/mcp/rest/get_company?id=672958"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconceptplus-cyber-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconceptplus-cyber-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconceptplus-cyber-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/conceptplus-cyber-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconceptplus-cyber-security-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":620894}},{"tool":"search_jobs","arguments":{"company":"conceptplus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":620894},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}