Cybersecurity Subject Matter Experts

Goldbelt, Inc.•Honolulu, HI

10d

About The Position

Nisga'a CIOPS is seeking Cybersecurity Subject Matter Experts to provide cybersecurity and RMF/FISMA support to PACAF mission owners. The position works directly with the Pacific Air Forces (PACAF) Defensive Cyber Operations and Mission Assurance Branch and coordinates with personnel throughout the PACAF area of responsibility. The role distributes current policy and provides guidance and mentorship to cyber forces to support compliance and mission defense. The SME supports PACAF Main Operating Bases (MOBs) and Geographically Separated Units (GSUs) in implementing and sustaining federal, DoD, and Air Force cybersecurity requirements. Work includes validating and maintaining Assessment and Authorization (A&A) packages; developing, updating, and submitting Risk Management Framework (RMF) products; synchronizing A&A data across government repositories; supporting circuit connection requests; preparing units for cybersecurity inspections; and advising personnel on vulnerability scanning, endpoint security, risk mitigation, and cyber readiness. The position requires travel to PACAF MOBs and GSUs, at a minimum of up to 40% of the time.

Requirements

2–3 years of experience and the skills required to execute Federal, National, DoD, USAF CIO, and U.S. State Department requirements to assess cyber risk, identify mission sets, and defend the mission.
2–3 years of experience applying, assessing, and advising MAJCOM staff and Wings on cybersecurity requirements.
DoD 8570.1-M certification at Information Assurance Technical (IAT) Level 3 through one of the following: CASP+ CE, CCNP-Security, CISA, CISSP or CISSP Associate, GIAC GCED, GIAC GCIH, or CCSP.
Top Secret (TS)/Sensitive Compartmented Information (SCI) security clearance.
Ability to travel to PACAF MOBs and GSUs, at a minimum of up to 40% of the time.
Ability to provide cybersecurity and RMF/FISMA support, distribute current policy, and provide guidance and mentorship to cyber forces.
Knowledge of congressional FISMA, DoD, and Air Force cybersecurity directives.
In-depth experience conducting A&A validation and reviews using National, DoD, and Air Force standards, such as DISA STIGs and NIST SP 800-12.
In-depth experience collecting and developing A&A artifacts.
Ability to maintain and sustain A&A packages and track or update products in CAP for SNAP, GIAP circuit management tools, eMASS, ITIPS, and CMRS.
Proficiency creating and maintaining RMF products for theater circuits and enclaves through eMASS.
Experience creating, consulting on, revising, finalizing, and submitting RMF deliverables.
Ability to provide updates through the Air Force central FISMA database repository, ITIPS.
In-depth experience ensuring A&A data is synchronized across Air Force and DISA repositories.
Knowledge of processing circuit connection requests through SGS and SNAP.
In-depth experience mentoring personnel.
Ability to train and assist personnel with DoD cybersecurity tools and technology.
Knowledge of resolving issues with DoD vulnerability scanning tools, including system credentials, access control lists, and identified network assets.
Knowledge of resolving issues with DoD-required endpoint security solutions for host devices in network enclaves.
In-depth experience preparing Wings for CCRIs and CCORIs on NIPRNet, SIPRNet, and supported information systems.
In-depth experience producing CCRI and CCORI scores and Risk Assessment Reports using DISA scoring and assessment tools.
Ability to recommend mitigations and follow-on actions, including POAMs.
Must initiate the following training upon hire: Level 1 Anti-Terrorist Training, Level A SERE Training, DoD Cyber Awareness Challenge, OPSEC Awareness, Derivative Classification IF103.16, and Force Protection.
USFK Training is required, with no time requirement; it only needs to be taken once.

Nice To Haves

Bachelor’s degree in a related field.

Responsibilities

Assist PACAF MOBs and GSUs in improving and maintaining implementation of congressional FISMA, DoD, and Air Force cybersecurity directives.
Conduct on-site and/or virtual A&A validation and reviews using National, DoD, and Air Force standards, including DISA STIGs and NIST SP 800-12.
Collect and develop A&A artifacts in accordance with the AO Office.
Assist MOBs and GSUs in maintaining and sustaining A&A packages, including tracking and updating documents and products in CAP for SNAP, GIAP circuit management tools, eMASS, ITIPS, and CMRS.
Assist in creating and maintaining comprehensive RMF products for theater circuits and enclaves through eMASS, consistent with applicable DoD and Air Force instructions.
Assist the Government with creating, consulting on, revising, finalizing, and submitting RMF deliverables, including System Security Plans, enclave Ports Protocol Services Matrices, control-validation artifacts, POAMs, and system topologies.
Provide updates through the Air Force central FISMA database repository, ITIPS.
Ensure A&A data is synchronized across Air Force and DISA repositories, including eMASS, ITIPS, SNAP, and GIAP.
Assist with processing circuit connection requests for main bases through the SIPRNet GIG Interconnection Approval Process System (SGS) and NIPRNet SNAP.
Prepare and mentor NAF, Wing, and cybersecurity forces through the CRR-M program.
Train and assist PACAF MOB and GSU personnel in using DoD security technical implementation tools and technology to maintain and improve cyber readiness.
Consult on and help resolve issues with DoD-required vulnerability scanning tools, including system credentials, access control lists, and identified network assets.
Consult on and help resolve issues with DoD-required endpoint security solutions for host devices in network enclaves.
Assist and prepare PACAF Wings for CCRIs and CCORIs on NIPRNet, SIPRNet, and supported information systems.
Create CCRI and CCORI scores and Risk Assessment Reports for MOBs and GSUs using DISA CCRI Scoring and Risk Assessment tools.
Recommend mitigations and follow-on actions, including POAMs.
Travel to PACAF MOBs and GSUs to conduct duties and responsibilities, at a minimum of up to 40% of the time.