Cybersecurity SME

Avint•Hanscom AFB, MA

2d•$175,000 - $180,000

About The Position

Avint LLC is seeking a motivated, career- and customer-oriented Cybersecurity SME to serve as a cybersecurity and Risk Management Framework (RMF) expert within the technical domain and as a senior advisor to government cybersecurity and program leadership. The role supports the customer by maintaining system security, strengthening cybersecurity programs, and ensuring compliance with applicable policies and standards. Applicants must have an active Top Secret clearance. The Cybersecurity SME also provides direction and oversight to lower-level cybersecurity staff, helps manage their performance and professional development, and leads teams and working sessions to deliver complex work with minimal direction. The role collaborates with clients, peers, staff, security managers, and functional teams, and contributes to Avint’s growth initiatives and professional client presentations. Avint describes its offering as combining the personal touch of a small business with large-business benefits. The company offers competitive salaries, full health benefits, open time off, federal holidays, and reimbursement for professional development courses, exams, and tuition. The stated salary range is $170,000–$180,000.

Requirements

Active Top Secret clearance.
Master’s degree in a related field.
DoD 8570-compliant IAM Level III certification.
15 years of experience, including at least 5 years in the DoD.
Expert knowledge of the NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), and supporting industry publications and standards.
Expert knowledge of cybersecurity products, tools, and applications.
Exceptional verbal and written communication skills, including the ability to present complex ideas succinctly and effectively.
Ability to organize work and build project plans, resource plans, and schedules.
Demonstrated ability to build trusted relationships with clients, peers, and staff.
Ability to lead teams in executing complex tasks with minimal direction and produce high-quality results.
Ability to lead working sessions, develop innovative solutions, and promote collaboration across functional teams.

Responsibilities

Maintain the overall security posture of systems within the area of responsibility.
Assist in developing and streamlining the organization’s cybersecurity program, including its architecture, requirements, objectives, policies, processes, and procedures.
Support implementation of the Risk Management Framework (RMF) to ensure compliance with cybersecurity policies.
Support system and application authorization and accreditation (A&A), including assessing and guiding the quality and completeness of A&A activities, tasks, and artifacts required by governing DoD and Air Force policies.
Assist in developing and enhancing a common controls program to provide inheritance evidence to systems hosted in the environment.
Maintain and report technology systems’ assessment and authorization status and issues in accordance with DoD Component guidance.
Provide direction and oversight to lower-level cybersecurity staff to ensure they follow established cybersecurity policies and procedures.
Coordinate with the organization’s security manager to address issues affecting overall security.
Ensure Information Owners and stewards associated with DoD information are identified to establish accountability, access approvals, and special handling requirements.
Maintain a repository of organizational- or system-level cybersecurity documentation.
Monitor compliance with cybersecurity policy, as appropriate, and review monitoring results.
Ensure cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
Ensure implementation of information system security measures and procedures, including reporting incidents to the Authorizing Official and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures.
Prepare and record system security information in appropriate cybersecurity repositories as required by the Authorizing Official and program office, including eMASS.
Author, review, certify, and/or maintain information assurance and security management plans, including RMF Implementation Plans, System Security Management Plans, Information Support Plans, Program Protection Plans, Security Risk Analyses, and Security Vulnerability and Countermeasure Analyses.
Serve as Career Manager responsible for performance management and professional development of lower-level staff.
Proactively lead teams executing complex tasks with minimal direction and produce high-quality, error-free results.
Lead working sessions to solicit ideas and develop innovative solutions.
Promote collaboration across functional teams.
Develop and present professional presentations, complex ideas, solutions, and innovations to clients and Avint leadership.
Serve as an Avint brand ambassador and embody Avint’s core values.
Significantly contribute to growth initiatives.