Cybersecurity SME Lead Secret or Top Secret

S2i2•Fort Belvoir, VA

1d•$140,000 - $190,000•Onsite

About The Position

The Cybersecurity SME-Lead serves as the senior technical authority for the DLA TFS Vulnerability Management program. This individual provides expert-level cybersecurity direction to the Cybersecurity Engineers, leads preparation for DoD inspections (CCRI, CORA, Blue Team), manages end-to-end POA&M lifecycle, and briefs senior DLA leadership. This is an ON-SITE position at a DLA primary MSC location (Fort Belvoir VA, Columbus OH, or Philadelphia PA area).

Requirements

10 years of IT experience
10 years of DoD Cybersecurity experience
10 years of Risk Management Framework (RMF) and NIST A&A experience
Demonstrated expertise leading and mentoring cybersecurity teams with direct quality oversight
Proven hands-on experience preparing enterprise environments for CCRI, CORA, and Blue Team assessments
SME-level ability to assess security controls and conduct authorization reviews for large, complex organizations
Expert knowledge of DoD cybersecurity requirements: STIGs, TCG configuration guides, IAVMs, Task Orders
Oversees end-to-end POA&M lifecycle management including documentation, tracking, and remediation closure
Ability to interpret new and evolving DoD cybersecurity documentation and produce high-quality artifacts even when guidance is ambiguous
Skilled in producing authoritative system documents: SSP, CONOPS, Incident Response Plan, Contingency Plan, Configuration Management Plan
Expert-level scripting and automation: PowerShell, Python - reviews and validates engineers' scripts
Leads risk assessments and provides risk-based recommendations to leadership for prioritizing mitigation
Creates dashboards, analytics, and trend reports using Power BI, Power Platform, and enterprise data sources
Knowledgeable in emerging technology areas: Cloud, ICS, OT infrastructures
Active Secret (Tier 3 / T3) or Top-Secret accepted
CISSP , or CASP+, or CISA
Active ACAS training certification
Active Tanium training certification
One of the Below Certifications: ICS-300 or equivalent OT/ICS cybersecurity certification (e.g., GICSP, ISA/IEC 62443) ISA/IEC 62443 Cybersecurity Certificate GRID (GIAC Response and Industrial Defense) GCIP (GIAC Critical Infrastructure Protection) CSSA (IACRB Certified SCADA Security Architect)

Responsibilities

Provide technical leadership and day-to-day direction to Cybersecurity Engineers
Develop and execute the organization's vulnerability management strategy, ensuring alignment with DoD requirements
Oversee team scanning, reporting, and remediation workflows to maintain continuous compliance and inspection readiness
Lead preparation and response for CCRI, CORA, Blue Team, and other DoD cybersecurity inspections
Manage end-to-end POA&M lifecycle: documentation, status tracking, remediation closure
Serve as primary cybersecurity liaison to DLA leadership, mission owners, and external assessment teams
Establish governance processes for patch management, configuration compliance, and change control
Provide senior-level expertise on network security architecture, segmentation, and zero-trust principles
Produce executive-level briefings and actionable recommendations from complex technical findings
Ensure consistent, high-quality reporting on vulnerabilities, compliance status, and risk posture