Cybersecurity SME

Modern Technology Solutions Inc•Washington, DC

15h•$155,000 - $205,000

About The Position

MTSI is seeking a Cybersecurity Subject Matter Expert to support enterprise-level cybersecurity, compliance, and risk-management activities for mission-critical defense systems. The role supports continuous Risk Management Framework (RMF) compliance, cyber risk mitigation, and adherence to DoD and federal cybersecurity frameworks. The SME works with system owners, engineering teams, accrediting authorities, and mission partners to assess system posture, identify vulnerabilities, and develop remediation plans that strengthen cyber readiness. The position evaluates system evidence, reviews security controls, conducts formal compliance checks, and translates technical data into recommendations for decision-makers. It supports programs throughout their lifecycle, from initial system assessments through continuous monitoring and audit readiness, and requires strong analytical skills, familiarity with NIST and DoD frameworks, and the ability to lead and coordinate cybersecurity activities. The stated pay range is $155,000 to $205,000 per year. Base pay may vary based on government contract ranges, job-related knowledge, skills, experience, and other factors. MTSI offers medical, financial, and other benefits dependent on the position offered. Applications are accepted on an ongoing basis, and the posting will be renewed periodically until the position is filled.

Requirements

At least 5 years of experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security-control documentation.
Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans.
Experience conducting cyber risk assessments, evidence reviews, and compliance checks.
Experience with IA or cybersecurity policies and procedures, including Privacy, NIST, RMF, and FISMA.
Must possess a Top Secret/SCI clearance.
CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) certification.

Nice To Haves

DoD 8140- or CWF-aligned certifications.
Knowledge of industry-standard tools such as Tenable or Splunk.
Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities.

Responsibilities

Review test results, including scans and STIGs, POA&Ms, and other cybersecurity artifacts for quality and completeness.
Generate, update, or maintain system security documentation, including System Security Plans, System Inventory, CONOPS, Authorization Boundary Diagrams, PPSM, and security-related plans and procedures.
Conduct security control assessments in accordance with NIST SP 800-53.
Lead and support continuous RMF compliance cycles, ensuring documentation, processes, and controls remain current and effective.
Perform cyber risk assessments, artifact reviews, evidence evaluations, and compliance checks to validate system security posture.
Analyze cyber risks, system gaps, and vulnerabilities, and develop actionable remediation plans aligned with mission and compliance requirements.
Interpret and apply cybersecurity and IA policies, including NIST guidelines, RMF requirements, FISMA standards, and applicable privacy directives.
Collaborate with engineering teams, system owners, ISSOs, and mission stakeholders on secure system design, implementation, and sustainment.
Support audits, inspections, and formal security assessments by maintaining documentation and readiness artifacts.
Provide guidance on security-control inheritance, boundary definition, continuous monitoring, and governance workflows.