Cybersecurity SME

Diaconia LLC•Bath Township, OH

6d•$90,000 - $125,000

About The Position

This position is posted for future opportunities and is not an active opening. The Cybersecurity SME supports the maintenance and administration of Department of Defense and Air Force computing systems and networks, including classified and unclassified systems. The position requires obtaining and maintaining classified system administrative privileges for SIPRNet and other systems, performing trusted system downloads and classified CD burning, and maintaining and updating host systems. The role provides cybersecurity and systems security engineering expertise across Anti-Tamper, trusted systems and networks, hardware/software/firmware assurance, supply chain risk management, acquisition security, cyber resiliency, and information protection. It supports systems engineering milestone reviews, test planning, certification and accreditation packages, and the Information Systems Security Manager. The SME also helps ensure that supported PIT, PITI, and non-PIT systems comply with applicable DoD and Air Force security directives and guidance. The position develops, reviews, and coordinates cybersecurity and Risk Management Framework (RMF) documentation, including PIT determination packages, cybersecurity strategies, System Security Plans, control traceability matrices, risk assessment reports, plans of action and milestones, security assessment plans, and program-review and RFP artifacts. It assists with security design evaluations, independent verification and validation, site audits, testing, authorization activities, software assurance, and Supply Chain Risk Management planning and implementation. The role also provides expertise for rapid acquisition, capability development planning, and technical solutions involving commercial, non-developmental, and other non-traditional products.

Requirements

Advanced degree (MA/MS) and the stated experience requirement of 12 (15) years in the relevant discipline, including five years in DoD; alternatively, a BA/BS and 15 (18) years in the discipline, including five years in DoD; or 20 (24) years of IT and cybersecurity experience. The posting contains these parenthetical discrepancies as written.
Minimum of 10 years of cybersecurity experience, including five years in the U.S. Department of Defense.
SME expertise in rapid acquisition activities, including rapid prototyping and fielding under AFGM 2018-63-146-01 or subsequent publication.
Proficiency with Windows operating systems, Windows Group Policy Objects, DoD cybersecurity, NIST RMF, STIGs, Endpoint Security System/Host-based Security System, and DoD PKI.
Understanding of security directives applicable to supported PIT, PITI, and non-PIT systems, including DoDI 8500.01, DoDI 8510.01, JSIG, NIST 800-53, and guidance identified in DoDI 5000.02.
Experience developing and managing PIT determination packages and associated cybersecurity and RMF documents.
System-related experience with appropriate certifications as described in the Functionally Aligned Job Descriptions; the posting states eight years must be in DoD.
U.S. citizenship.
Ability to obtain and maintain a Secret DoD security clearance; the posting also requires an active Secret clearance and ability to obtain and maintain DoD TS/SCI clearance after starting.
Experience managing, planning, documenting, and conducting IV&V of weapon-system security requirements.
Experience identifying and documenting software assurance pedigree and QA issues.
Ability to provide and document SCRM plans and implementation activities.
Already possess or be willing to obtain within six months of hire the appropriate DoD 8570 baseline certification and continuing education for the assigned position category or specialty and level.
Advanced knowledge and recognized expertise in the technical or professional field, including the ability to perform tasks and oversee junior and journeyman personnel.
Advanced knowledge of the technical or professional discipline and comprehensive understanding of how to apply associated standards, procedures, and practices.

Nice To Haves

Active DoD 8570 certification.
Active TS/SCI clearance.

Responsibilities

Maintain and support DoD and Air Force computing systems and networks, both classified and unclassified.
Obtain and maintain classified systems administrative privileges for SIPRNet and other systems; perform trusted downloads, burn classified CDs, and maintain and update host systems.
Support systems engineering milestone reviews, test planning, and certification and accreditation packages.
Assist the Information Systems Security Manager and provide expertise in project management, system security engineering, system administration, and network administration.
Support compliance with applicable security directives for PIT, PITI, and non-PIT systems.
Develop, modify, review, and coordinate cybersecurity documentation, including PIT determination packages, cybersecurity strategies, SSPs, control traceability matrices, risk assessment reports, plans of action and milestones, security assessment plans, and program-review and RFP artifacts.
Provide RMF expertise for PIT and other products; review program-office artifacts and recommend actions to support cybersecurity RMF analysis.
Assist in evaluating the technical implementation and performance of security software, hardware, and firmware features.
Document and report IV&V test plans, results, anomaly reports, recommendations, activity reports, and other required reports.
Assist with cybersecurity site audits, architecture and control verification, mitigation review, testing and evaluation, and support for IATT, IATO, ATO, and ATC approvals.
Identify software assurance pedigree, including platform software, and QA issues; document results.
Assist the Government with Supply Chain Risk Management.
Develop and document SCRM plans and implementation activities in acquisition and security documents, including acquisition strategy, SEP, PPP, and SSP.
Manage, plan, document, and conduct IV&V of security requirements for weapon systems.
Provide subject matter expertise for rapid acquisition, capability development planning, and technical solutions involving COTS products, commercial items, non-developmental items, and technologies from non-traditional contractors.
Conduct arrangement of Science and Technology.