Cybersecurity SME

Alpha Omega Integration • Washington, DC

2d • Hybrid

About The Position

Alpha Omega is seeking a senior Cybersecurity Subject Matter Expert to support a federal client. The role serves as a senior technical expert and cybersecurity leader, performing Information System Security Engineer (ISSE) services and cybersecurity compliance assessment, management, and reporting for information systems and operational technology. The SME works with Government management, leads cybersecurity strategies and solutions, resolves complex technical problems, and advises on the effects of legislation, mandates, regulations, technologies, and industry best practices.

The position is hybrid, with routine telework authorized and on-site attendance required for classified work, SIPRNet access, certain meetings and events, training, and personnel on/offboarding. Work follows Government staff requirements within a 0600–1800 window, Monday through Friday, including all core hours. Occasional CONUS travel may be requested, potentially including Alaska, Hawaii, or U.S. Territories.

The likely salary range is $135,000–$195,000; this is not a guarantee of compensation. Final pay may depend on experience, skills, certifications, competencies, education, and contract provisions. The application deadline is January 15, 2027.

Requirements

• At least 8 years of related, progressive cybersecurity experience in a technical field related to this labor category.
• Current DoD 8140/8570-qualifying professional certification: CISSP-ISSAP or CISSP-ISSEP. Certification must be current before performance begins; waivers will not be granted.
• Active final SECRET personnel security clearance based on a Tier 3/SF-86 investigation, with ability to maintain eligibility for the duration of the task order; execution of a Classified Information Non-Disclosure Agreement (SF-312) is required.
• U.S. citizenship; favorably adjudicated background investigation and FBI fingerprint check; ability to obtain and maintain a DoD Common Access Card (CAC) as a condition of continued employment.
• Recognized cybersecurity expertise and technical leadership, exceptional oral and written communication skills, and ability to interface with all levels of Government management.
• Demonstrated experience implementing RMF, including system categorization, control selection, implementation, assessment, and continuous monitoring.
• Core knowledge of risk management processes; national and international cybersecurity laws, regulations, policies, and ethics; cybersecurity principles; cyber threats and vulnerabilities; computer networking concepts, protocols, and network security methodologies; and operational impacts of cybersecurity lapses.
• Bachelor's degree from an accredited institution in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, or another related technical discipline. Experience cannot substitute for this education requirement.
• Ability to work within the Government staff schedule, including all core hours Monday through Friday within the 0600–1800 window, and report on-site when required for classified work and other specified activities.
• Ability to undertake occasional requested CONUS travel, potentially including Alaska, Hawaii, or U.S. Territories.

Nice To Haves

• Experience with USCG/DoD security tools: eMASS, ACAS/Nessus/Security Center, Elastic SIEM, HBSS, Tanium, Splunk, ServiceNow, and Burp Suite.
• Experience with OT/ICS/SCADA security, shipboard or aviation platform systems, and the DoD “Assess Only” process.
• Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF practices, and DevSecOps pipelines.
• Prior USCG, DHS, or DoD RMF support experience.

Responsibilities

• Serve as the designated ISSE for assigned information systems, operational technology, and hybrid cyber-physical platforms, leading the NIST SP 800-37 Risk Management Framework lifecycle from categorization through continuous monitoring and decommissioning.
• Develop, maintain, and manage RMF authorization packages in eMASS, including system security plans, security control traceability matrices, plans of action and milestones, security assessment reports, contingency plans, incident response plans, risk assessments, hardware and software lists, network topology and boundary diagrams, and data flow diagrams.
• Perform Security Readiness Reviews; review ACAS/Nessus vulnerability scan results; and assign, track, and validate remediation through patching cycles or POA&Ms, including false-positive management and DISA ticket coordination.
• Maintain continuous monitoring and compliance with DoD, DHS, and USCG security requirements and DISA STIGs; support cATO initiatives, automated evidence collection, and dashboard integration.
• Conduct Security Impact Assessments for proposed system changes and participate in change management boards, DHS SELC reviews, acquisition milestones, CONOPS working groups, and technical exchange meetings.
• Integrate Zero Trust principles, RMF controls, and OT/ICS-specific security requirements into system designs; perform security engineering analyses, trade studies, and architectural risk assessments.
• Evaluate emerging threats, adversary tactics, techniques, and procedures, OT/ICS vulnerabilities, and supply-chain risks; recommend safeguards and mitigations to reduce attack surface and improve resilience.
• Track and report authoritative orders, including OPORDs, TASKORDs, FRAGOs, ALCOASTs, and TCTOs, from JFHQ-DoDIN, USCYBERCOM, and CGCYBER.
• Produce weekly, monthly, and quarterly cybersecurity readiness updates, metrics, executive-level briefings, and risk memorandums for Government leadership, and respond to ad hoc cybersecurity data calls.
• Provide senior technical leadership and mentorship to the ISSE/SME team and submit continuous improvement recommendations to the COR regarding contracted operations.
• If dual-hatted as Task Order PjM, serve as the primary point of contact for the COR and provide day-to-day operational and technical oversight, personnel scheduling, workload prioritization, quality control, and coordination of travel, training, and personnel on/offboarding.

Benefits

• 15 days of PTO, including paid parental, military, and bereavement leave.
• Eleven paid Federal holidays, five of which are floating holidays designated by the company’s holiday schedule each year.
• Health and dental insurance, including 100% employer-paid premiums for employee coverage under the HDHP health plan.
• Life insurance and STD/LTD term disability coverage, with employer-paid premiums.
• 401(k) plan with a match that is 100% vested after two years of service.
• FSA/DFSA/HSA flexible benefit plans.
• Annual tuition and professional development reimbursement.
• Participation in retirement benefits, deferred compensation plans, health and insurance benefits, and other benefits provided under company policies and benefits manuals.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior