PREFERRED QUALIFICATIONS

• Master’s degree in Cybersecurity, Information Assurance, or related field preferred
  Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin

Required Experience

• Bachelor’s degree in Cybersecurity, Information Assurance, or related field
• 7-9 years of related experience including leading or performing Blue Team/defensive assessments on DoD or federal systems, including hands-on use of ACAS/Nessus, SCAP, STIG Viewer, and Windows/Linux hardening
• Active TS/SCI security clearance
• Demonstrated experience creating test plans and writing final reports for security events
• Working knowledge of RMF and enterprise compliance processes
• Experience administering and analyzing phishing campaigns and compiling results
• Proficiency with Windows Server (2012/2016/2019), Windows 10, and Linux (Red Hat/CentOS/Ubuntu)
• Strong communication skills across technical and non-technical stakeholder

ABOUT THE ROLE

We’re seeking a Cybersecurity Test Lead to plan and execute Blue Team security assessments for U.S. Army programs and enterprise systems. You’ll lead CTAT Blue Team activities end-to-end—from test planning and scoping through execution, reporting, and remediation support—while collaborating with engineering teams, government stakeholders, and system owners. Occasional travel for test events.

WHAT YOU’LL DO

• Own test events: Lead and coordinate CTAT/Blue Team engagements to identify vulnerabilities, misconfigurations, and process gaps across Army systems; deliver clear, actionable findings and final reports.
• Develop test plans: Define scope, objectives, scenarios, timelines, data needs, and success criteria; ensure alignment with RMF controls and NETCOM/enterprise guidelines.
• Execute technical validation: Run and interpret Nessus/ACAS and SCAP scans; review STIG Viewer results; validate mitigations and verify closure of critical/high findings.
• Phishing & social engineering: Plan and conduct phishing campaigns (scenario design, system setup, execution, metrics, and stakeholder communication) and compile campaign reporting.
• Guide remediation: Partner with system owners and engineering leadership to prioritize and track fixes; clarify risk, residual impact, and timelines.
• Coordinate assessments: Schedule events, prepare artifacts, and lead validation activities against RMF controls; work with government leads to complete post-work tasks within established guidelines.
• Stakeholder communication: Brief technical and executive audiences; produce concise after-action reports and dashboards.
• Mentor & lead: Provide day-to-day direction to assessment team members and uplift Blue Team tradecraft and process maturity.
  At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here.

Required Experience

• Bachelor’s degree in Cybersecurity, Information Assurance, or related field
• 7-9 years of related experience including leading or performing Blue Team/defensive assessments on DoD or federal systems, including hands-on use of ACAS/Nessus, SCAP, STIG Viewer, and Windows/Linux hardening
• Active TS/SCI security clearance
• Demonstrated experience creating test plans and writing final reports for security events
• Working knowledge of RMF and enterprise compliance processes
• Experience administering and analyzing phishing campaigns and compiling results
• Proficiency with Windows Server (2012/2016/2019), Windows 10, and Linux (Red Hat/CentOS/Ubuntu)
• Strong communication skills across technical and non-technical stakeholders