Cybersecurity SME (Hanscom AFB)

Avint • Hanscom Air Force Base, MA

1d

About The Position

The Cybersecurity SME serves as a cybersecurity and Risk Management Framework (RMF) expert within the technical domain and acts as a senior advisor to government cybersecurity and program leadership. Avint LLC is seeking a motivated, career- and customer-oriented Cybersecurity SME to support its customer. Applicants must have an active Top Secret clearance with SCI eligibility.

The role maintains the security posture of systems within its area of responsibility and supports the development and streamlining of the organization’s cybersecurity program, including architecture, requirements, objectives, policies, processes, and procedures. It supports RMF implementation and system/application authorization and accreditation (A&A), including assessing and guiding the quality and completeness of required activities and artifacts under DoD and Air Force policies. The SME also supports common controls, tracks system assessment and authorization status, and provides direction and oversight to lower-level cybersecurity staff.

The position coordinates with the organization’s security manager and affected parties, monitors policy compliance, helps coordinate cybersecurity inspections and reviews, and supports incident reporting and system-level responses to unauthorized disclosures. It maintains cybersecurity documentation and repositories, records system security information in repositories such as eMASS, and authors, reviews, certifies, or maintains information assurance and security management plans.

The SME also serves as a Career Manager responsible for performance management and professional development of lower-level staff, leads complex work and collaborative working sessions, presents solutions to clients and Avint leadership, and contributes to growth initiatives while representing Avint’s brand and core values.

Requirements

• Active Top Secret clearance with SCI eligibility.
• Master’s degree in a related field.
• DoD 8570-compliant IAM Level III certification.
• 15 years of experience, of which 5 years must be in the DoD.
• Expert knowledge of the NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), and supporting industry publications and standards.
• Expert knowledge of cybersecurity products, tools, and applications.
• Exceptional verbal and written communication skills, including the ability to present complex ideas succinctly and effectively.
• Ability to organize work and build project plans, resource plans, and schedules.
• Demonstrated ability to build trusted relationships with clients, peers, and staff.
• Ability to lead complex tasks with minimal direction and deliver high-quality, error-free results.

Responsibilities

• Maintain the overall security posture of systems within the assigned area of responsibility.
• Assist in developing and streamlining the organization’s cybersecurity program, including cybersecurity architecture, requirements, objectives, policies, processes, and procedures.
• Support implementation of the Risk Management Framework (RMF) to ensure compliance with cybersecurity policies.
• Support system/application authorization and accreditation (A&A), assessing and guiding the quality and completeness of A&A activities, tasks, and required artifacts under DoD and Air Force policies.
• Assist in developing and enhancing a common controls program to provide inheritance evidence to systems hosted in the environment.
• Maintain and report technology systems’ assessment and authorization status and issues in accordance with DoD Component guidance.
• Provide direction and oversight to lower-level cybersecurity staff to ensure they follow established cybersecurity policies and procedures.
• Coordinate with the organization’s security manager to address issues affecting the organization’s overall security.
• Ensure Information Owners and stewards associated with DoD information on each DoD IS system are identified to establish accountability, access approvals, and special handling requirements.
• Maintain a repository of organizational- or system-level cybersecurity documentation.
• Monitor compliance with cybersecurity policy and review monitoring results, as appropriate.
• Ensure cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
• Ensure implementation of IS security measures and procedures, including incident reporting to the AO and appropriate reporting chains and coordination of system-level responses to unauthorized disclosures.
• Prepare and record system security information in appropriate cybersecurity repositories as required by the authorizing official and program office, including eMASS.
• Author, review, certify, and/or maintain information awareness and security management plans, including RMF Implementation Plans, System Security Management Plans, Information Support Plans, Program Protection Plans, Security Risk Analyses, and Security Vulnerability and Countermeasure Analyses.
• Serve as Career Manager responsible for performance management and professional development of lower-level staff.
• Proactively lead teams executing complex tasks with minimal direction and produce high-quality, error-free results.
• Lead working sessions to solicit ideas and develop innovative solutions; promote collaboration across functional teams.
• Develop and present professional presentations, complex ideas, solutions, and innovations to clients and Avint leadership.
• Serve as an Avint brand ambassador, embody Avint’s core values, and contribute significantly to growth initiatives.

Benefits

• Competitive salaries
• Full health benefits
• Generous Open Time off
• Federal holidays
• Reimbursement for courses, exams, and tuition
• Professional development support, including potential investment in classes, conferences, programs, or degrees

What This Job Offers

• Job Type: Full-time
• Career Level: Senior