Cybersecurity Manager - Part-time

Copperhead Technologies is seeking a Cybersecurity Manager to support the operation of the Veterans Affairs (VA) Data Collection Tool (DCT) program. The Cybersecurity Manager owns the Authority to Operate (ATO) process for the VA Data Collection Tool (DCT) program. This role is responsible for achieving and maintaining an ATO for a federally implemented COTS product that collects sensitive health information, managing the full Risk Management Framework (RMF) lifecycle, coordinating required security scans, maintaining security controls documentation, developing threat models, and producing privacy risk assessments. This position supports an active VA program requiring ongoing coordination with government ISSOs, system stewards, and security assessment teams, with sustained ownership of authorization documentation and continuous monitoring activities to keep the DCT's ATO current throughout the period of performance.

Responsibilities may include, but are not limited to:   

• Own and manage the end-to-end ATO process for the DCT, applying RMF principles to achieve and sustain authorization for a COTS product requiring additional systems configuration to protect sensitive health information.
• Coordinate and oversee execution of required security assessments, including web application scans that examine the application for common vulnerabilities and vulnerable design patterns, penetration scans that examine infrastructure for common vulnerabilities and weak communication security, and database scans that examine database configurations and data management practices for vulnerabilities and weak protections, and reviews scan results, prioritizes remediation activities, and tracks findings through closure.
• Develop and maintain comprehensive security controls documentation, including access and policy documentation managed in coordination with the Information System Security Officer (ISSO) and system steward within eMASS, ensuring authorization evidence remains current, accurate, and audit ready.
• Develop and maintain a diagram-based threat model that maps system elements, devices, and connections to identify potential threats to the DCT environment, updating the model as the architecture evolves, and conducts comprehensive privacy reviews of DCT data elements, policies, and procedures to produce a privacy statement that identifies privacy risks and documents mitigation strategies, ensuring sensitive health information handling aligns with federal privacy requirements.
• Compile and organize authorization evidence packages to support ATO submission, renewal, and continuous monitoring activities, serving as the primary point of contact for security control assessments, audits, and RMF milestone reviews with VA stakeholders. 

This position is contingent on contract award.  

Expected hourly rate: $60.00 - $64.00

Work Environment:   

• Moderate noise (i.e. business office with computers, phone and printers) and /or occasional Loud noise (airfield, large equipment).
• Ability to sit at a computer terminal for an extended period of time.
• Ability to work in confined areas.

Physical Demands:   

• While performing the responsibilities of the job, the employee is required to sit, stand, talk, and hear.
• Employee is often required to sit and use their hands and fingers to operate a computer.
• Must be able to occasionally lift and/or move up to 50 pounds.

Travel:    

• 0-10% / Minimal travel expected: off-sites, meetings, training, a conference, etc. 

Copperhead Technologies, an operating firm of Command Holdings, is a tribally-owned firm providing management consulting services to U.S. government agencies.   

Pursuant to PL 93-638, as amended, preference will be given to qualified Native Americans and spouses in all phases of employment.   

At Copperhead Technologies, our employees are the embodiment of our success as a firm. Our team is comprised of a tenacious group of professionals located across the globe. It includes military veterans and spouses of active duty troops, former federal employees, policy experts, academics, attorneys, and technical and business experts, all of whom share a strong work ethic and the skills to succeed in both collaborative and independent environments. Copperhead Technologies is invested in the long-term success of both our clients and colleagues for the right reasons. Our dedication to putting good government into practice is underpinned by a merit-based culture that measures success by productivity and credibility. 

Copperhead Technologies will provide reasonable accommodations to applicants who are unable to utilize our online application system due to a disability. Please send your request to the

hr@wwcglobal.com

Copperhead Technologies is committed to equal employment opportunity based on merit. We recruit, employ, train, compensate, and promote without regard to race, religion, color, national origin, age, sex, disability, protected veteran status, or any other basis protected by applicable federal, state, or local law, and in accordance with EO 14173 and Federal Employment Laws: Equal Employment Opportunity and Employee Polygraph Protection Act.  

Copperhead Technologies’ Affirmative Action Program is available to any employee or applicant for employment for inspection upon request, to the extent required by federal regulations. The Affirmative Action Program can be accessed during normal business hours by making an appointment with the

hr@wwcglobal.com

Basic Qualifications   

• Bachelor's degree in cybersecurity, information assurance, computer science, or a related field.
• 8+ years of experience in cybersecurity, information assurance, or ATO/RMF management roles supporting federal government programs.
• Demonstrated experience achieving and maintaining an ATO for a federally implemented COTS product handling sensitive health information.
• Direct experience managing the ATO process, including coordination of web application, penetration, and database vulnerability scans.
• Experience developing and maintaining security controls documentation, including access and policy documentation within eMASS.
• Experience developing diagram-based threat models to identify and communicate system-level threats.
• Experience conducting privacy reviews and producing privacy statements addressing data elements, policies, procedures, and risk mitigation.
• Outstanding communication skills, influencing abilities, and client focus.
• Professional proficiency in English is required.
• Demonstrated proficiency in using all Microsoft Office applications.
• Ability to pass a Tier 1 federal background investigation including fingerprinting, more information can be found here: https://www.dcsa.mil/Personnel-Vetting/Background-Investigations-for-Security-HR-Professionals/Start-a-Background-Investigation/Case-Types-Forms/
• Ability to access federal facilities in compliance with Real ID. More information about Real ID can be found here: https://www.dhs.gov/real-id/about-real-id and at https://www.tsa.gov/travel/security-screening/identification.
• Applicants must be currently authorized to work in the United States on a full-time basis. Copperhead Technologies will not sponsor applicants for work visas for this position.

Preferred Qualifications   

• Master's degree in cybersecurity, information assurance, computer science, or a related field.

• Experience with VA security authorization processes and eMASS specifically. 

• Experience supporting COTS product configuration in federal cloud environments.

Benefits  

Copperhead Technologies offers a competitive benefits plan including:   

• Health, Dental, and Vision Insurance
• Flexible Spending Accounts
• Life and Disability Insurance
• 401(k)
• Paid Time Off
• Paid Holidays
• Employee Assistance Program
• Pet Insurance

*Eligibility requirements apply