Cybersecurity Lead with Security Clearance

Maximus is seeking a highly skilled Cybersecurity Technical Lead to support a contract with a Homeland Security customer. The successful candidate will provide strategic and technical leadership in cybersecurity, ensuring the integrity and security of mission-critical systems. This role requires hands-on expertise in cybersecurity, risk management, and compliance, as well as strong leadership capabilities. The candidate must be based within a commutable distance to Annapolis Junction, MD, and will participate in an on-call roster to support operational requirements.

This posting is intended to build and maintain a pipeline of qualified candidates to support potential future staffing needs. Candidates may be considered for future opportunities as positions become available based on program and mission needs. This position is onsite in Annapolis Junction, MD and requires an active secret clerance. Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS034, T4, Band 7
Job - Specific Essential Duties and Responsibilities:

• Serve as the primary cybersecurity technical lead for the contract, ensuring compliance with Homeland Security policies and directives.
• Develop and implement cybersecurity strategies, frameworks, and policies to enhance the security posture of critical systems.
• Lead Plan of Action and Milestones (POA&M) and Information System Vulnerability Management (ISVM) remediation efforts by tracking findings, coordinating corrective actions, validating closure evidence, and reporting status to stakeholders.
• Manage and coordinate co-located cybersecurity teams, ensuring effective collaboration, workload alignment, and consistent execution of mission priorities.
• Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.
• Provide guidance and mentorship to cybersecurity engineers and analysts.
• Lead security architecture reviews and technical assessments to identify and mitigate risks.
• Collaborate with stakeholders to ensure security requirements align with business and operational needs.
• Support continuous monitoring, security audits, and regulatory compliance efforts.
• Identify and coordinate the remediation of deprecated protocols, ensuring secure configurations align with federal cybersecurity standards and operational requirements.
• Communicate cybersecurity risks, remediation progress, and emerging issues to government leadership, providing timely updates, clear recommendations, and escalation support as needed.
• Serve as the primary point of contact for all security-related deliverables, coordinating inputs, and ensuring timely and accurate submissions.
• Provide cybersecurity updates during monthly Program Management Reviews (PMRs).
• Oversee vulnerability scanning activities, including scan scheduling, results analysis, remediation prioritization, and reporting.
• Oversee security risk assessments, vulnerability management, incident response, and threat intelligence activities.
• Provide guidance and mentorship to cybersecurity engineers and analysts.
• Lead security architecture reviews and technical assessments to identify and mitigate risks.

Collaborate with stakeholders to ensure security requirements align with business and operational needs.

• Support continuous monitoring, security audits, and regulatory compliance efforts.

Identify and coordinate the remediation of deprecated protocols, ensuring secure configurations align with federal cybersecurity standards and operational requirements.

• Communicate cybersecurity risks, remediation progress, and emerging issues to government leadership, providing timely updates, clear recommendations, and escalation support as needed.
• Serve as the primary point of contact for all security-related deliverables, coordinating inputs, and ensuring timely and accurate submissions.
• Provide cybersecurity updates during monthly Program Management Reviews (PMRs).
• Oversee vulnerability scanning activities, including scan scheduling, results analysis, remediation prioritization, and reporting.
• Provide oversight of Public Key Infrastructure (PKI) certificate management activities performed by the team, ensuring timely issuance, renewal, deployment, inventory tracking, and expiration monitoring.
• Participate in an on-call rotation to support security operations and incident response. Job - Specific Minimum Requirements:
• Active Secret clearance is required.
• Due to contract requirements, only US Citizens can be considered.
• 10+ years of experience in cybersecurity, IT security, or related fields.
• Strong knowledge of cybersecurity frameworks (e.g., NIST, RMF, FISMA) and best practices.
• Experience leading cybersecurity teams and managing large-scale security initiatives.
• Hands-on experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint security solutions.
• Strong communication and leadership skills, with the ability to work across technical and executive teams.
• Candidates must reside within a commutable distance for daily onsite work and on-call requirements.
• This contract supports systems that require 24x7x365 uptime. Candidates must be willing and able to meet recall requirements, including participation in a rotational on-call schedule.

TCS034, T4, Band 7

Preferred Skills and Qualifications

• DHS Suitability.
• Experience supporting Homeland Security or other federal agencies.
• CISSP certification is highly preferred (Additional certifications such as CISM, CISA, or CEH are a plus).