IA/Cybersecurity Specialist (Secret) (4499)

SMX•Tampa, FL

9d•$103,200 - $172,000•Hybrid

About The Position

SMX is seeking junior-, mid-, and senior-level Information Assurance/Cybersecurity Specialists to support the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services for enterprise cloud migration and mission-critical systems supporting the United States Air Force. The role supports or develops and implements cybersecurity strategies, helps achieve cloud accreditation, and integrates countermeasures to protect platforms and infrastructure from internal and external threats. The position involves designing, developing, engineering, and implementing integrated cloud security solutions to protect proprietary and confidential data and systems. Specialists gather information about organizational missions, goals, needs, existing security products, and ongoing computer security programs, then translate security and business requirements into technical designs. They configure and validate secure cloud systems, test security products and systems for weaknesses, and conduct audits to verify secure operations and implementation of policies and procedures. Duties also include architecture design, system and network analysis, vulnerability and risk assessments, and hardware and software security assessments. The role may involve firewall and cloud computing expertise, implementation and configuration, physical security analysis of facilities, security design for local and wide area networks, analysis of network operating systems and applications, continuity-of-operations planning, policy development, and disaster recovery. The position supports compliance with RMF and other DoD cybersecurity frameworks, vulnerability management, remediation tracking, incident response, security documentation, and continuous compliance activities.

Requirements

Active Secret security clearance.
DoD 8570-compliant CompTIA Security+ certification.
Relevant cybersecurity or information assurance experience appropriate to the level hired for.
Understanding of Zero Trust and modern DevSecOps concepts.
Knowledge of Windows operating environments.
Familiarity with RMF, NIST 800-53, STIGs, and cloud security principles.
Junior level: high school diploma or bachelor's degree and at least 1 year of experience.
Mid level: bachelor's degree or equivalent certification and 3–6 years of experience.
Senior level: bachelor's degree or equivalent certification and at least 7 years of experience.
SME level: bachelor's degree or equivalent certification and at least 10 years of experience.

Nice To Haves

Prior experience supporting United States Air Force or DoD cloud programs.
Understanding of C4I systems.

Responsibilities

Assist in maintaining compliance with RMF and other DoD cybersecurity frameworks.
Collaborate with architects and developers to integrate security measures into systems throughout the development lifecycle.
Assess existing and potential system vulnerabilities, propose mitigation strategies, and provide incident response.
Support day-to-day vulnerability management and remediation tracking.
Help prepare and update security documentation, including POA&Ms and ATO artifacts.
Integrate cybersecurity best practices and countermeasures to detect and mitigate threats to the platform and supporting cloud infrastructure.
Collaborate with mission stakeholders to align security controls with operational requirements.
Maintain continuous compliance through proactive vulnerability scanning, patch management, and incident response processes.
Assist with technical documentation, network diagrams, inventory control documentation, and security documentation.
Conduct or assist with Assured Compliance Assessment Solution (ACAS) scans.
Design, develop, engineer, and implement integrated cloud security solutions to protect proprietary and confidential data and systems.
Configure and validate secure cloud systems; test security products and systems to detect security weaknesses.
Conduct regular audits to verify secure system operations and implementation of computer security policies and procedures.
Perform architecture design, system and network analysis, vulnerability and risk assessments, and hardware and software security assessments.