Cybersecurity SME

Alpha Omega • Washington, DC

1d • $135,000 - $195,000 • Hybrid

About The Position

Alpha Omega is seeking a senior Cybersecurity Subject Matter Expert to support a federal client. The role serves as a senior technical expert and recognized cybersecurity leader, providing Information System Security Engineer (ISSE) services and cybersecurity compliance assessment, management, and reporting for client information systems and operational technology. The SME works with Government management, leads development of cybersecurity strategies and solutions, resolves complex problems, and advises on the effects of relevant legislation, mandates, regulations, technologies, and industry best practices.

The position leads the NIST SP 800-37 Risk Management Framework (RMF) lifecycle for assigned systems, develops and manages authorization packages in eMASS, supports vulnerability assessment and remediation, and maintains continuous monitoring and compliance. It also performs security impact and engineering analyses, integrates Zero Trust and OT/ICS security requirements into system designs, evaluates threats and supply-chain risks, tracks authoritative orders, and produces cybersecurity readiness reporting and briefings. The role provides technical leadership and mentorship to the ISSE/SME team. When dual-hatted as Task Order Project Manager, it additionally provides operational and technical oversight, scheduling, workload prioritization, quality control, and coordination of travel, training, and personnel onboarding and offboarding.

The position is hybrid, with routine telework authorized. On-site presence is required for classified work, SIPRNet access, certain meetings and events, training, and personnel onboarding or offboarding. Work takes place within a 0600–1800 window, Monday through Friday, and occasional CONUS travel may be requested, potentially including Alaska, Hawaii, or U.S. territories. An active final DoD SECRET clearance and U.S. citizenship are required.

Requirements

• Minimum 8 years of related, progressive cybersecurity experience in a technical field related to this labor category.
• Active DoD 8140/8570-qualifying CISSP-ISSAP or CISSP-ISSEP certification, current before the start of performance; waivers will not be granted.
• Active final SECRET personnel security clearance (Tier 3 / SF-86 investigation), ability to maintain eligibility for the task order, and execution of a Classified Information Non-Disclosure Agreement (SF-312).
• U.S. citizenship; favorably adjudicated background investigation and FBI fingerprint check; ability to obtain and maintain a DoD Common Access Card (CAC) as a condition of continued employment.
• Recognized cybersecurity expertise and technical leadership, exceptional oral and written communication skills, and ability to interface with all levels of Government management.
• Demonstrated RMF implementation experience, including system categorization, control selection, implementation, assessment, and continuous monitoring.
• Core knowledge of risk management processes; national and international cybersecurity laws, regulations, policies, and ethics; cybersecurity principles; cyber threats and vulnerabilities; networking concepts, protocols, and network security methodologies; and the operational impacts of cybersecurity lapses.
• Bachelor's degree from an accredited institution in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, or another related technical discipline. Experience cannot substitute for the education requirement.

Nice To Haves

• Experience with USCG/DoD security tools, including eMASS, ACAS/Nessus/Security Center, Elastic SIEM, HBSS, Tanium, Splunk, ServiceNow, and Burp Suite.
• Experience with OT/ICS/SCADA security, shipboard or aviation platform systems, and the DoD “Assess Only” process.
• Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF practices, and DevSecOps pipelines.
• Prior USCG, DHS, or DoD RMF support experience.

Responsibilities

• Serve as the designated ISSE for assigned information systems, operational technology, and hybrid cyber-physical platforms; lead the NIST SP 800-37 RMF lifecycle from categorization through continuous monitoring and decommissioning.
• Develop, maintain, and manage RMF authorization packages in eMASS, including SSPs, SCTMs, POA&Ms, Security Assessment Reports, contingency plans, incident response plans, risk assessments, hardware/software lists, network topology and boundary diagrams, and data flow diagrams.
• Perform Security Readiness Reviews; review and analyze ACAS/Nessus vulnerability scan results; assign, track, and validate remediation through patching cycles or POA&Ms, including false-positive management and DISA ticket coordination.
• Maintain continuous monitoring and ongoing compliance with DoD, DHS, and USCG security requirements and DISA STIGs; support cATO initiatives, automated evidence collection, and dashboard integration.
• Conduct Security Impact Assessments for proposed system changes and participate in change management boards, DHS SELC reviews, acquisition milestones, CONOPS working groups, and technical exchange meetings.
• Integrate Zero Trust principles, RMF controls, and OT/ICS-specific security requirements into system designs; conduct security engineering analyses, trade studies, and architectural risk assessments.
• Evaluate emerging threats, adversary TTPs, OT/ICS vulnerabilities, and supply-chain risks; recommend safeguards and mitigation strategies to reduce the cyber-attack surface and enhance resilience.
• Track and report authoritative orders from JFHQ-DoDIN, USCYBERCOM, and CGCYBER, including OPORDs, TASKORDs, FRAGOs, ALCOASTs, and TCTOs.
• Produce weekly, monthly, and quarterly cybersecurity readiness updates, metrics, executive-level briefings, and risk memorandums for Government leadership; respond to ad hoc cybersecurity data calls.
• Provide senior technical leadership and mentorship to the ISSE/SME team and submit continuous improvement recommendations to the COR regarding contracted operations.
• If dual-hatted as Task Order Project Manager, serve as the primary point of contact for the COR and provide day-to-day operational and technical oversight, personnel scheduling, workload prioritization, quality control, and coordination of travel, training, and onboarding/offboarding.

Benefits

• 15 days PTO, including paid parental, military, and bereavement leave.
• Eleven paid Federal holidays, five of which are floating holidays as designated by the company's annual holiday schedule.
• Health and dental insurance, including 100% employer-paid premiums for employee coverage under the HDHP health plan.
• Life insurance and STD/LTD term disability coverage with employer-paid premiums.
• 401(k) plan with a match that is 100% vested after two years of service.
• FSA/DFSA/HSA flexible benefit plans.
• Annual tuition and professional development reimbursement.
• Participation in retirement benefits, deferred compensation plans, health and insurance benefits, and other benefits specified in company policy and benefits manuals.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior