Contract Microsoft Cybersecurity Jobs in Virginia

Summary

Are you a proven cybersecurity leader with deep Department of Defense (DoD) expertise and a passion for protecting mission-critical systems? We are seeking a highly skilled Cybersecurity Manager to lead cybersecurity operations, compliance, and risk management activities supporting complex federal and defense environments.

** This position is contingent upon contract award ** 

Responsibilities

• Lead and manage cybersecurity personnel supporting federal and DoD programs.
• Provide oversight of cybersecurity operations, risk management, compliance, and authorization activities.
• Direct the implementation and execution of the DoD Risk Management Framework (RMF) lifecycle.
• Manage Assessment and Authorization (A&A) efforts to obtain and maintain Authority to Operate (ATO) decisions.
• Serve as the primary advisor to program leadership on cybersecurity risks, compliance requirements, and security posture.
• Oversee the development, maintenance, and review of cybersecurity documentation, including System Security Plans (SSPs), POA&Ms, security assessments, and authorization packages.
• Ensure compliance with applicable DoD, NIST, federal, and agency-specific cybersecurity policies and standards.
• Manage cybersecurity activities within the Enterprise Mission Assurance Support Service (eMASS).
• Direct continuous monitoring activities and vulnerability management programs utilizing tools such as ACAS, Trellix HBSS, Microsoft Defender, and related security technologies.
• Coordinate internal and external cybersecurity assessments, audits, inspections, and accreditation activities.
• Develop cybersecurity policies, procedures, and operational standards to strengthen enterprise security posture.
• Monitor emerging threats and recommend mitigation strategies to safeguard systems and mission operations.
• Provide leadership, mentoring, workforce planning, and professional development for cybersecurity staff.
• Support proposal efforts, strategic planning, and business development activities as needed.
• Other duties as assigned

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related discipline. Equivalent experience may be considered.
• Minimum 10 years of demonstrated experience in Information Security with strong knowledge of DoD and Federal Government Cybersecurity/Information Assurance policies and procedures.
• Minimum 5 years of demonstrated experience leading Cybersecurity Teams.
• Minimum 10 years of demonstrated experience with the Risk Management Framework (RMF) including DoD authorization, accreditation, and assessment activities.
• Minimum 5 years of demonstrated experience utilizing: Enterprise Mission Assurance Support Service (eMASS), Host-Based Security Systems (HBSS/Trellix, Microsoft Defender, or equivalent technologies), Assured Compliance Assessment Solution (ACAS)
• Current training certificates for: eMASS, HBSS/Trellix or equivalent, ACAS
• Current DoD 8570.01-M IAM Level III certification
• Active TS clearance. 
• Successfully pass background and drug screening

 

Preferred Qualifications:

• Experience supporting classified environments and high-impact systems.
• Experience managing cybersecurity support across multiple programs or contracts.
• Knowledge of NIST 800-series publications, CNSSI requirements, and DoD cybersecurity directives.
• Master's degree in Cybersecurity, Information Systems, Information Assurance, Engineering, or a related field.
• Additional advanced cybersecurity certifications such as CISSP, CISM, CASP+, CCSP, or GSLC.

 

Knowledge, Skills and Abilities:

• Knowledge of security architectures, network defense, vulnerability management, and enterprise cybersecurity frameworks.
• Knowledge of classified information systems security requirements and procedures for securing high-impact systems.
• Knowledge of Assessment and Authorization (A&A) activities, continuous monitoring strategies, and ATO maintenance.
• Knowledge of cybersecurity governance, risk management principles, and compliance management practices.
• Skill in leading and managing cybersecurity teams supporting multiple programs, contracts, or enterprise environments simultaneously.
• Skill in implementing and overseeing Risk Management Framework (RMF) activities across complex organizations.
• Skill in developing cybersecurity strategies, policies, procedures, and implementation plans.
• Skill in analyzing security risks and recommending effective mitigation strategies.
• Skill in conducting security assessments, vulnerability analyses, and compliance reviews.

Estimated Salary/Wage
USD $164,504.36/Yr.Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related discipline. Equivalent experience may be considered.
• Minimum 10 years of demonstrated experience in Information Security with strong knowledge of DoD and Federal Government Cybersecurity/Information Assurance policies and procedures.
• Minimum 5 years of demonstrated experience leading Cybersecurity Teams.
• Minimum 10 years of demonstrated experience with the Risk Management Framework (RMF) including DoD authorization, accreditation, and assessment activities.
• Minimum 5 years of demonstrated experience utilizing: Enterprise Mission Assurance Support Service (eMASS), Host-Based Security Systems (HBSS/Trellix, Microsoft Defender, or equivalent technologies), Assured Compliance Assessment Solution (ACAS)
• Current training certificates for: eMASS, HBSS/Trellix or equivalent, ACAS
• Current DoD 8570.01-M IAM Level III certification
• Active TS clearance. 
• Successfully pass background and drug screening

 

Preferred Qualifications:

• Experience supporting classified environments and high-impact systems.
• Experience managing cybersecurity support across multiple programs or contracts.
• Knowledge of NIST 800-series publications, CNSSI requirements, and DoD cybersecurity directives.
• Master's degree in Cybersecurity, Information Systems, Information Assurance, Engineering, or a related field.
• Additional advanced cybersecurity certifications such as CISSP, CISM, CASP+, CCSP, or GSLC.

 

Knowledge, Skills and Abilities:

• Knowledge of security architectures, network defense, vulnerability management, and enterprise cybersecurity frameworks.
• Knowledge of classified information systems security requirements and procedures for securing high-impact systems.
• Knowledge of Assessment and Authorization (A&A) activities, continuous monitoring strategies, and ATO maintenance.
• Knowledge of cybersecurity governance, risk management principles, and compliance management practices.
• Skill in leading and managing cybersecurity teams supporting multiple programs, contracts, or enterprise environments simultaneously.
• Skill in implementing and overseeing Risk Management Framework (RMF) activities across complex organizations.
• Skill in developing cybersecurity strategies, policies, procedures, and implementation plans.
• Skill in analyzing security risks and recommending effective mitigation strategies.
• Skill in conducting security assessments, vulnerability analyses, and compliance reviews.

Education:UNAVAILABLEEmployment Type: FULL_TIME