Cyber security SME
About The Position
Flatter, Inc. is hiring a Cybersecurity Professional serving as an ISSM, ISSO, or ISSE to support lifecycle IT and cybersecurity services for the operation, coordination, defense, and sustainment of ICBM enterprise IT environments across on-premises, cloud, and hybrid architectures. The role provides proactive and reactive support to deliver scalable, resilient, and compliant services that maintain security, availability, and mission readiness as enterprise needs evolve. This position supports a proposal. The professional provides cybersecurity management, operations, engineering, and assessment support across the system lifecycle. Depending on assignment, the role supports secure design, Risk Management Framework (RMF) authorization, continuous monitoring, vulnerability management, and incident preparedness. Work is performed within authorized Government policies, processes, tools, and environments, with protection of Government systems and data at the assigned classification and impact level.
Requirements
- Bachelor’s degree in Cyber Security, Information Technology, Computer Science, Electrical Engineering, or a related field and 15 years of experience; or a master’s degree and 12 years of experience; or a Ph.D. and 9 years of experience.
- At least 6 years of progressive responsibility providing technical leadership.
- Relevant core and advanced certifications as established or required by local, national, and international industry standards or by the performance expectations associated with the level of appointment.
- Knowledge, skills, and abilities aligned with current versions of AFMAN 17-1303 and DoDI 8570, as well as the stated educational requirements.
- High degree of experience and knowledge in security disciplines.
- Ability to perform all stated or implied duties within this tier and duties reasonably derived from preceding tiers.
- Certification in one or more of ISSO, ISSE, or ISSM.
- Maintain the required clearance, special access, privileged-access approval, and DoD 8140/8570-aligned certification.
Responsibilities
- Establish and maintain system-level cybersecurity programs, architectures, policies, procedures, control implementation, and risk awareness for assigned systems or enclaves.
- Apply NIST controls, least privilege, role-based access control, encryption, secure configuration, and other Government-directed security requirements.
- Prepare, submit, and maintain RMF and Assessment and Authorization evidence, including SSP, SAR, ISCP, POA&M, audit trails, and other Body of Evidence artifacts.
- Coordinate authorization activities to achieve and sustain ATO or IATT status throughout development, integration, testing, deployment, sustainment, and decommissioning.
- Monitor vulnerability and compliance status, implement or validate STIGs, track findings, and support applicable TCTO, MTO, TCNO, and continuous-monitoring directives.
- Develop, test, and maintain incident response and IT recovery strategies, and coordinate responses to cybersecurity events and unauthorized disclosures.
- For ISSM or ISSO assignments, oversee cybersecurity operations, validate secure configurations, coordinate incident reporting, and approve or recommend approval of subordinate IT products and connections.
- For ISSE assignments, capture and trace cybersecurity requirements, integrate controls into system design, support acquisition and systems engineering, and perform security test and evaluation and vulnerability assessment.
- Document work, decisions, risks, issues, and resolutions in Government-approved systems, and support audits, quality reviews, and monthly status reporting as directed.
- Participate in Government-directed training, modernization initiatives, working groups, surge support, and continuous process improvement activities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
