Test and Evaluation - CYBER SME

Powell Consulting Group•Washington, DC

17h•Hybrid

About The Position

Powell Consulting Group (PCG) is a Service-Disabled Veteran-Owned Small Business that delivers systems engineering, digital engineering, test and evaluation, cybersecurity, artificial intelligence, organizational transformation, and workforce development solutions to the Federal Government. Our mission is to align people, systems, and purpose to deliver measurable mission impact. We are seeking an experienced Test & Evaluation Subject Matter Expert with direct, hands-on AI/ML evaluation experience to support the Department of Homeland Security's Science and Technology mission. Position Summary Provide operational Test and Evaluation (T&E) expertise across a wide range of activities and missions supporting cybersecurity and cyber resilience, including requirements review, test planning, test execution, data management, and test reporting, with a strong focus on assessing the confidentiality, integrity, and availability (CIA) of systems and data against cyber threats. Perform T&E technical analysis on a multi-disciplinary team, providing technical advisory support and oversight to the Government T&E division lead, with a focus on cyber systems, industrial control systems (ICS), operational technology (OT) security, Cyber Table Top exercises (CTT), Cooperative Vulnerability and Penetration Assessment (CVPA) testing, and Adversarial Assessments (AA). Analyze and provide input to Test and Evaluation Master Plans (TEMPs), with an emphasis on cyber resilience, security controls validation (e.g., NIST SP 800-53), and compliance with cybersecurity regulations. Work with Government clients on T&E Working-Level Integrated Product Teams (WIPTs) to establish and monitor program execution toward milestones, key events, and significant accomplishment criteria, while identifying and mitigating cyber risks throughout the system lifecycle. Review and provide feedback on acquisition program documents such as the Mission Needs Statement, Operational Requirements Document, Concept of Operations, and TEMP, specifically addressing cybersecurity requirements, threat modeling, and security testing strategies. Provide cyber resilience testing input and updates to cyber resilience guidebooks, Letters of Assessment, and other T&E documents. Teach cyber resilience T&E topics in DHS T&E workshops or classes.

Requirements

Over 15 years of Test and Evaluation experience, or 10 years with an advanced degree, with a significant portion dedicated to cybersecurity testing and evaluation of complex IT, OT, and cloud-based systems
Experience with cyber resilience testing methodologies, including Cyber Table Tops (CTT), Cooperative Vulnerability and Penetration Assessments (CVPA), and Adversarial Assessments (AA)
Experience working on a DoD or DHS acquisition program performing cyber resilience testing
Ability to teach T&E topics, particularly in cybersecurity testing methodologies (Cyber Table Tops, Adversarial Assessment, cyber attack methods, and cyber threats)
Technical writing experience, with the ability to document complex cybersecurity test plans, penetration test reports, vulnerability assessment findings, and mitigation recommendations
Defense Acquisition University (DAU) or DHS Level III Test and Evaluation Certification or equivalency, or the ability to complete equivalent training during the initial period of employment
Secret clearance and DHS Suitability

Nice To Haves

Experience with DHS acquisition policy and the DHS systems engineering lifecycle
Experience with cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001), red teaming, and blue teaming methodologies
Experience assessing industrial control systems (ICS) and operational technology (OT) security
Knowledge of NIST SP 800-53 security controls validation
Ability to pay strict attention to detail
Possession of excellent organizational skills
Possession of excellent verbal and written communication skills

Responsibilities

Provide operational Test and Evaluation (T&E) expertise across a wide range of activities and missions supporting cybersecurity and cyber resilience, including requirements review, test planning, test execution, data management, and test reporting, with a strong focus on assessing the confidentiality, integrity, and availability (CIA) of systems and data against cyber threats.
Perform T&E technical analysis on a multi-disciplinary team, providing technical advisory support and oversight to the Government T&E division lead, with a focus on cyber systems, industrial control systems (ICS), operational technology (OT) security, Cyber Table Top exercises (CTT), Cooperative Vulnerability and Penetration Assessment (CVPA) testing, and Adversarial Assessments (AA).
Analyze and provide input to Test and Evaluation Master Plans (TEMPs), with an emphasis on cyber resilience, security controls validation (e.g., NIST SP 800-53), and compliance with cybersecurity regulations.
Work with Government clients on T&E Working-Level Integrated Product Teams (WIPTs) to establish and monitor program execution toward milestones, key events, and significant accomplishment criteria, while identifying and mitigating cyber risks throughout the system lifecycle.
Review and provide feedback on acquisition program documents such as the Mission Needs Statement, Operational Requirements Document, Concept of Operations, and TEMP, specifically addressing cybersecurity requirements, threat modeling, and security testing strategies.
Provide cyber resilience testing input and updates to cyber resilience guidebooks, Letters of Assessment, and other T&E documents.
Teach cyber resilience T&E topics in DHS T&E workshops or classes.