Cybersecurity Manager - Part-time

Cybersecurity Manager
- Part-time
- Veterans Affairs

Copperhead Technologies, an operating firm of Command Holdings, is seeking a Cybersecurity Manager to support the operation of the Veterans Affairs (VA) Data Collection Tool (DCT) program. The Cybersecurity Manager owns the Authority to Operate (ATO) process for the VA Data Collection Tool (DCT) program. This role is responsible for achieving and maintaining an ATO for a federally implemented COTS product that collects sensitive health information, managing the full Risk Management Framework (RMF) lifecycle, coordinating required security scans, maintaining security controls documentation, developing threat models, and producing privacy risk assessments.

This position supports an active VA program requiring ongoing coordination with government ISSOs, system stewards, and security assessment teams, with sustained ownership of authorization documentation and continuous monitoring activities to keep the DCT's ATO current throughout the period of performance.

Responsibilities may include, but are not limited to:

• Own and manage the end-to-end ATO process for the DCT, applying RMF principles to achieve and sustain authorization for a COTS product requiring additional systems configuration to protect sensitive health information.
• Coordinate and oversee execution of required security assessments, including web application scans that examine the application for common vulnerabilities and vulnerable design patterns, penetration scans that examine infrastructure for common vulnerabilities and weak communication security, and database scans that examine database configurations and data management practices for vulnerabilities and weak protections, and reviews scan results, prioritizes remediation activities, and tracks findings through closure.
• Develop and maintain comprehensive security controls documentation, including access and policy documentation managed in coordination with the Information System Security Officer (ISSO) and system steward within eMASS, ensuring authorization evidence remains current, accurate, and audit ready.
• Develop and maintain a diagram-based threat model that maps system elements, devices, and connections to identify potential threats to the DCT environment, updating the model as the architecture evolves, and conducts comprehensive privacy reviews of DCT data elements, policies, and procedures to produce a privacy statement that identifies privacy risks and documents mitigation strategies, ensuring sensitive health information handling aligns with federal privacy requirements.
• Compile and organize authorization evidence packages to support ATO submission, renewal, and continuous monitoring activities, serving as the primary point of contact for security control assessments, audits, and RMF milestone reviews with VA stakeholders.

This position is contingent on contract award.

Expected hourly rate: $60.00 - $64.00

• Moderate noise (i.e. business office with computers, phone and printers) and /or occasional Loud noise (airfield, large equipment).
• Ability to sit at a computer terminal for an extended period of time.
• Ability to work in confined areas.

Physical Demands:

• While performing the responsibilities of the job, the employee is required to sit, stand, talk, and hear.
• Employee is often required to sit and use their hands and fingers to operate a computer.
• Must be able to occasionally lift and/or move up to 50 pounds.

Travel:

• 0-10% / Minimal travel expected: off-sites, meetings, training, a conference, etc.

Copperhead Technologies, an operating firm of Command Holdings, is a tribally-owned firm providing management consulting services to U.S. government agencies.

Pursuant to PL 93-638, as amended, preference will be given to qualified Native Americans and spouses in all phases of employment.

At Copperhead Technologies, our employees are the embodiment of our success as a firm. Our team is comprised of a tenacious group of professionals located across the globe. It includes military veterans and spouses of active duty troops, former federal employees, policy experts, academics, attorneys, and technical and business experts, all of whom share a strong work ethic and the skills to succeed in both collaborative and independent environments.

Copperhead Technologies is invested in the long-term success of both our clients and colleagues for the right reasons. Our dedication to putting good government into practice is underpinned by a merit-based culture that measures success by productivity and credibility.

Copperhead Technologies will provide reasonable accommodations to applicants who are unable to utilize our online application system due to a disability. Please send your request to the Human Resources Team .

Copperhead Technologies is committed to equal employment opportunity based on merit.

We recruit, employ, train, compensate, and promote without regard to race, religion, color, national origin, age, sex, disability, protected veteran status, or any other basis…