Information Assurance SME - Cybersecurity

Analytic Solutions Group•Bethesda, MD

13h•$190,000 - $203,000

About The Position

The Information Assurance SME supports a large customer organization in the National Security Group. The position is located in Bethesda, Maryland, and requires a TS/SCI clearance with polygraph. The SME serves as the customer’s subject-matter expert for cybersecurity questions and concerns, contributes to cybersecurity policies, and translates cybersecurity needs and capabilities into requirements and detailed technical solutions. The role involves supporting Authority to Operate (ATO) processes and assessing programs’ ability to attain an ATO; developing and publishing baseline security requirements for common enterprise services; defining ATO integration expectations for IT services; and working with service providers to ensure systems can be integrated. The SME also develops and maintains cybersecurity architecture needs, dependencies, risks, and mitigation plans; analyzes best practices and identifies gaps and improvement opportunities; and provides security guidance and recommendations. Additional work includes responding to congressional cybersecurity inquiries, conducting critical path, risk, and task dependency analyses, and developing security requirements and constraints for foundational technical documents such as architectural artifacts, business cases, and concepts of operations. The position includes diagramming interim and future architectures for ICAM implementation, partnering across the Intelligence Community, and assisting in areas outside cybersecurity as needed. Familiarity with microelectronics is also noted.

Requirements

Active TS/SCI clearance with polygraph.
U.S. citizenship is required.
Typically, a bachelor's degree and 12–15 years of prior relevant experience; experience may be exchanged for degree requirements.
Experience in the cybersecurity responsibility areas listed in the posting.
Detail-oriented, with the ability to consistently provide concise, thorough, and accurate high-quality products.
Ability to adapt to shifts in customer priorities.
Expert knowledge of the ATO process.
Experience partnering across the Intelligence Community.
Experience in risk management.
Solid background in network security and experience deploying tools to various networks.

Nice To Haves

Leadership experience, including leading cross-functional teams and managing competing priorities in a fast-paced, deadline-driven environment.
Track record of leading process-improvement initiatives and driving team performance toward organizational objectives.
Experience mentoring staff to build technical proficiency and support career development.
Ability to train new team members on program-specific processes and standards.
Experience supporting business-development efforts, such as proposal writing, capture activities, or client relationship management.
Familiarity with identifying growth opportunities and contributing to strategic planning.
Familiarity with microelectronics.

Responsibilities

Respond to congressional inquiries on cybersecurity issues.
Translate cybersecurity needs and capabilities into requirements and detailed technical solutions.
Develop and maintain cybersecurity architecture needs, dependencies, risks, and mitigation plans.
Analyze cybersecurity best practices to identify gaps and opportunities for improvement.
Contribute meaningful input to cybersecurity policies.
Develop and publish baseline security requirements for common enterprise services to ensure compliance with cybersecurity directives and policies.
Conduct critical path, risk, and task dependency analyses.
Develop security requirements and constraints for foundational technical documents, including program architectural artifacts, business cases, and concepts of operations.
Assist with the Authority to Operate (ATO) process and assess programs’ ability to attain an ATO.
Provide guidance and recommendations on security-related issues.
Diagram interim and future architecture for ICAM implementation.
Define and communicate ATO integration expectations for IT services.
Work with service providers to ensure systems are integrable.
Act as the subject-matter expert for customer cybersecurity questions and concerns.
Assist in areas outside cybersecurity as necessary.