Sign upLog in

Cybersecurity Assessment & Authorization SME

Nationwide IT Services

Fort Belvoir, VA

Apply
JOB DETAILS
JOB TYPE
Full-time
SKILLS
Analysis Skills, Cloud Computing, Communication Skills, Computer Security, Computer Systems, Control Systems, Decision Support, DoD Secret Clearance, Documentation, Emerging Technology, Government Contracts, Information Technology & Information Systems, Internet Security, Leadership, Microsoft Access Database, Microsoft Excel, Outsourcing, Power BI, Presentation/Verbal Skills, Problem Solving Skills, Risk, Risk Management Framework (RMF), Security Analysis, Security Clearance, Security Infrastructure, Security Monitoring, Systems Administration/Management, T-3 / DS3, Technical Support, Trend Analysis, U.S. National Institute of Standards and Technology (NIST), United States Department of Defense (DoD), Vulnerability Scanners, Writing Skills
LOCATION
Fort Belvoir, VA
POSTED
21 days ago

CYBERSECURITY ASSESSMENT AND AUTHORIZATION SUBJECT MATTER EXPERT (SME)

Location: The primary place of performance will be at the government site and/or Off-Site.
Security Clearance Requirement: Secret
Security Investigation Requirement: Required to possess a DOD SECRET Clearance and be eligible for an IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) upon assignment

Position Summary

Serves as a cybersecurity Subject Matter Expert (SME) regarding Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Possesses an understanding of how the security controls identified in NIST SP 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure, such as DLA’s, which comprises large and small enclaves, AIS applications, and outsourced IT processes.

Key Responsibilities

  • Updates and tracks POA&M entries by documenting findings, logging remediation actions, and keeping milestone dates current to ensure issues move toward closure.
  • Proven ability to work independently and collaboratively with minimal oversight
  • Ability to generate clear, accurate, and audit-ready cybersecurity reports, including vulnerability summaries, compliance status updates, and risk findings for technical and leadership audiences
  • Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization.
  • Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
  • Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Required Qualifications

  • Ten (10) years of relevant Risk Management Framework (RMF) and NIST A&A experience
  • DOD cybersecurity experience
  • Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
  • Strong research, analytical, and problem-solving skills
  • Strong understanding of DoD cybersecurity requirements, including documenting and developing artifacts for STIGs, TCG configuration guides, IAVMs, and Task Orders
  • Exceptional ability to develop, maintain, and validate RMF artifacts and cybersecurity Documentation
  • Proficiency with analytical tools such as Microsoft Excel, Access, Power BI, and Power Platforms
  • Experience producing detailed analytics and trend reports using data from vulnerability scanners, configuration tools, and security platforms to support decision-making and inspection readiness
  • Excellent written and verbal communication skills, including the ability to brief leadership and produce clear documentation
  • Experienced in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes.
  • Knowledgeable in the cybersecurity of emerging technology areas such as Cloud, information technology (IT), Industrial Control Systems (ICSs), or Operational Technology (OT) infrastructures.
  • Required to possess a DOD SECRET Clearance and be eligible for an IT-II Non-Critical Sensitive Security clearance or Tier 3 (T3) upon assignment.

Certification Requirements:

Required Training Certifications: ACAS, Tanium
Computing Environment: DLA-approved CE(D Account Access)
Current Requirement: DOD 8570 - IAT 3
Future Requirement: DOD 8140
Primary Cyber Work Role:
• Work Element: Cybersecurity (CS)
• Work Role: 722 - Information Systems Security Manager
• Proficiency Level: Advanced

Why Join Nationwide IT Services?

Nationwide IT Services is a trusted government contractor supporting Department of Defense customers. We offer the opportunity to work on high-impact cybersecurity missions alongside experienced professionals in a collaborative and growth-focused environment.

Our benefits package includes medical, dental, and vision insurance, life, and disability insurance, a 401(k) plan with employer match, paid holidays, PTO (sick/vacation), commuter benefits, employee assistance program (EAP), and educational reimbursement, along with Pet Insurance.

Nationwide IT Services, Inc. provides equal employment opportunities (EEO) to all qualified applicants regardless of race, color, religion, sex, national origin, sexual orientation, gender identity, genetics, disability, or protected veteran status.
 

Powered by JazzHR

About the Company

N

Nationwide IT Services

Resume Resources

Free Resume TemplatesFree Resume Builder