Cybersecurity SME

Zantech•Crystal City, VA

3d•Onsite

About The Position

Zantech is looking for a talented Cybersecurity Subject Matter Expert (SME) to serve as the Government’s point of contact. This role involves serving as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. The individual will execute DoW/DLA cybersecurity processes to authorize and maintain authorization of information systems, or act as an SME for systems undergoing the authorization process. A key aspect of this role is understanding how NIST 800-53 security controls apply to assessing and authorizing a large organization’s IT infrastructure, including various enclaves, Cloud Hosted Services, Operational Technology, AIS applications, and outsourced IT processes. The SME will determine the residual risk of identified vulnerabilities and their potential impact on system authorization, and brief senior management on the progress and results of systems undergoing the Risk Management Framework (RMF) process.

Requirements

Five (5) years of relevant C&A experience
Risk Management Framework (RMF) and NIST C&A experience
DOD cybersecurity experience
Experience in assessing security controls and conducting authorization reviews for large, complex organizations
Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI at the time of proposal submission.
Secret clearance
DoD Approved 8570 Baseline Certification: Category IAM Level III
US Citizenship and the ability to obtain and maintain an active DoD Secret or higher clearance, per contract requirements.

Nice To Haves

Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes.

Responsibilities

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.