Cybersecurity SME

Avint • Hanscom Air Force Base, MA

2d • $170,000 - $180,000

About The Position

The Cybersecurity SME serves as a cybersecurity and Risk Management Framework (RMF) expert within the technical domain and acts as a senior advisor to government cybersecurity and program leadership. Avint LLC is seeking a motivated, career- and customer-oriented professional to provide support to its customer.

The role maintains the security posture of systems in its area of responsibility and helps develop and streamline the organization's cybersecurity program, including its architecture, requirements, objectives, policies, processes, and procedures. It supports RMF implementation and system/application authorization and accreditation activities, including assessment of the quality and completeness of required activities and artifacts. The position also helps enhance common controls, tracks system assessment and authorization status, oversees lower-level cybersecurity staff, coordinates with the security manager, and maintains cybersecurity documentation and repository records.

The Cybersecurity SME monitors policy compliance, coordinates inspections and reviews, supports implementation of information-system security measures, and helps ensure appropriate incident reporting and responses. The position authors, reviews, certifies, or maintains information assurance and security management plans and related security analyses. It also serves as a career manager for lower-level staff, leads complex work and working sessions, promotes cross-functional collaboration, presents solutions to clients and Avint leadership, represents Avint, and contributes to growth initiatives.

Requirements

• Active Top Secret clearance.
• Master's degree in a related field.
• DoD 8570-compliant IAM Level III certification.
• 15 years of experience, including at least 5 years in the DoD.
• Expert knowledge of the NIST Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), and supporting industry publications and standards.
• Expert knowledge of cybersecurity products, tools, and applications.
• Exceptional verbal and written communication skills, including the ability to present complex ideas succinctly and effectively.
• Ability to organize work and build project plans, resource plans, and schedules.
• Demonstrated ability to build trusted relationships with clients, peers, and staff.
• Ability to lead teams in executing complex tasks with minimal direction and deliver high-quality, error-free results.

Responsibilities

• Maintain the overall security posture of systems within the area of responsibility.
• Assist in developing and streamlining the organization's cybersecurity program, including architecture, requirements, objectives, policies, processes, and procedures.
• Support implementation of the Risk Management Framework (RMF) to ensure compliance with cybersecurity policies.
• Support system/application authorization and accreditation (A&A), assessing and guiding the quality and completeness of required activities, tasks, and artifacts under governing DoD and Air Force policies.
• Assist in developing and enhancing a common controls program that provides inheritability evidence to systems hosted in the environment.
• Maintain and report technology systems' assessment and authorization status and issues in accordance with DoD Component guidance.
• Provide direction and oversight to lower-level cybersecurity staff to ensure they follow established cybersecurity policies and procedures.
• Coordinate with the organization's security manager to address issues affecting overall organizational security.
• Ensure Information Owners and stewards associated with DoD information on each DoD information system are identified to establish accountability, access approvals, and special handling requirements.
• Maintain a repository of organizational- or system-level cybersecurity documentation.
• Monitor compliance with cybersecurity policy and review monitoring results, as appropriate.
• Ensure cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
• Ensure implementation of information-system security measures and procedures, including incident reporting to the Authorizing Official and appropriate reporting chains, and coordination of system-level responses to unauthorized disclosures.
• Prepare and record system security information in appropriate cybersecurity repositories as required by the Authorizing Official and program office, such as eMASS.
• Author, review, certify, and/or maintain information assurance and security management plans and related materials, including RMF Implementation Plans, System Security Management Plans, Information Support Plans, Program Protection Plans, Security Risk Analyses, and Security Vulnerability and Countermeasure Analyses.
• Serve as Career Manager responsible for performance management and professional development of lower-level staff.
• Proactively lead teams executing complex tasks with minimal direction and produce high-quality results.
• Lead working sessions to solicit ideas and develop innovative solutions.
• Promote collaboration across functional teams.
• Develop and present professional presentations, complex ideas, solutions, and innovations to clients and Avint leadership.
• Serve as an Avint brand ambassador and embody Avint's core values.
• Significantly contribute to growth initiatives.

Benefits

• Competitive salaries.
• Full health benefits.
• Generous Open Time Off.
• Federal holidays.
• Reimbursement for courses, exams, and tuition to support professional development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior