It could take a year to secure the federal Obamacare online exchange, a cybersecurity expert told CNBC.