Senior Cybersecurity SIGINT SME (5339) (TS/SCI CI Poly) (Ft. Belvoir, VA )

SMX•Fort Belvoir, VA

31d•$170,000 - $185,000•Onsite

About The Position

SMX is seeking a Cybersecurity SME Senior SIGINT to support GISA at Fort Belvoir, VA. The successful candidate will have experience working as an ISSO on large Department of Defense contracts and leading a team of other cyber security professionals in support of project and client goals and objectives. This is a full-time onsite position in Ft. Belvoir, VA.

Requirements

PhD in an area of Science, Technology, Engineering or Mathematics with at least 15 years’ experience as a cybersecurity professional OR a Master's degree in an area of Science, Technology, Engineering or Mathematics with at least 18 years’ experience as a cybersecurity professional OR a Bachelor’s degree in an area of Science, Technology, Engineering or Mathematics with at least 20 years’ experience as a cybersecurity professional
Required Clearance: TS/SCI with CI Poly and NATO read-on prior to starting work
Ability to obtain and maintain all required NSA access.
Meet the DoD requirements for a privileged user on a TS/SCI information system prior to starting work - DoD 8140 / 8570.01-m requirements
15 years’ experience with the assessment and accreditation activities of national security systems (NSSs)
10 years’ experience validating system security controls
10 years’ experience with vulnerability management
8 years’ experience with RMF
5 years’ experience with POA&M tracking and resolution

Nice To Haves

5 years of experience performing RMF functions under the guidance and direction of NSA
5 years of ISSM or ISSO experience in Xacta

Responsibilities

Self-Test Security Controls are completed and updated annually.
Diagrams updated.
Hardware/Software Lists updated.
Scans in artifacts or in CyborgBunny system are updated.
Ensure POA&M Elements for Security Controls in XACTA are updated, completed by ISSO, or closed by DAO.
RMF documents updated within 12-18 months (Incident Response, Contingency Plan, Configuration Plan, Disaster Recovery Plan, Privileged User Guide, General User Guide).
Monitor and review Auditing (UAM) activities using SEAR.
Review and approve IAVA POA&Ms (only for SSPs without O-ISSM) through Biscotti.
CONOPS (updated annually).
Mandatory System Owner training and iAgree form signed (annually) using CUE.
ISSM and ISSO orders in BoE.
Review Security Relevant Changes are updated.
System Security Plan (SSP) updated annually and complete.
Work with ISSO to update any discrepancies and complete Readiness Report in IGGY Then complete ISSM Readiness Report in IGGY system when ready to move forward.
Send email to System Owner, ISSO and DAO that system is ready to move to DAO for review.
Review, approve or disapprove IAVA POA&M in Biscotti system for SSPs without O-ISSMs assigned on monthly basis.
Review, monitor and approve (systems without O-ISSM) CIVET and Staffing Processing Forms (SPF) tickets through DOCHound system and reach out to ISSO when CIVET tickets expired, and no response has been made.
Review alerts in LATTEART system – reach out to ISSOs to clear alerts and ensure system health score is within NSA requirements.
Review and approve DTA ticket requests through help desk CHD.
Review and approve decommission requests of systems out of XACTA.
Review and update DAO on extension requests for expiring system for DAO decisions.
Ensure Computer Security Incident Reports (CSIRs) through FREEZFRAME or emails are handled within 3 business days. Follow up on weekly basis and escalate cases without responses after 30 days.
Work and monitor to ensure System Owners and ISSOs to address and update any expired POA&Ms. POA&M extension requests need DAO approval.
Attend meetings, complete ad hoc tasks, and answer emails on questions from ISSMs and ISSOs.
Assist ISSOs with policy and procedures especially with questions on changes.
Review DARKROAST or ROCBLASTER for any new registered systems (weekly) or I review XACTA messages of new system added to XACTA.
Review Satellite system for tracking SSPs and what queue is the SSPs are in.