Cloud Security & Information Assurance Specialist

SMX; Boston (MA); On-site; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX is seeking Information Assurance/Cybersecurity Specialists to support design and implementation of secure multi-cloud infrastructure for DoD mission systems. Roles span Junior to SME, requiring RMF awareness, 8570 compliance, and strong collaboration with architects and developers to embed security across the lifecycle.

The team focuses on securing cloud platforms, conducting risk assessments, and maintaining continuous compliance with RMF, NIST 800-53, and STIGs, while participating in

Qualifications

• Active DoD RMF and security framework experience required.
• DoD 8570-compliant certification (Sec+ or equivalent) required for role levels.
• Familiarity with RMF, NIST 800-53, STIGs and cloud security principles.
• Knowledge of Zero Trust and modern DevSecOps concepts.
• Experience with Windows operating environments.

Responsibilities

• Assist in maintaining RMF and other DoD cybersecurity frameworks compliance.
• Collaborate with architects and developers to embed security in the development lifecycle.
• Assess vulnerabilities, propose mitigations, and support incident response.
• Support vulnerability management and remediation tracking.
• Prepare and update security documentation including POA&Ms and ATO artifacts.
• Conduct ACAS scans and ensure continuous compliance posture.

Skills

Security clearance

DoD 8570 Sec+

RMF/NIST 800-53/STIGs

Zero Trust

Windows knowledge

Cloud security

Education

Bachelor’s degree or equivalent certification

High School diploma

Tools

ACAS

Job description

SMX is seeking Information Assurance/Cybersecurity Specialists to support design and implementation of secure multi-cloud infrastructure for DoD mission systems. Roles span Junior to SME, requiring RMF awareness, 8570 compliance, and strong collaboration with architects and developers to embed security across the lifecycle.

The team focuses on securing cloud platforms, conducting risk assessments, and maintaining continuous compliance with RMF, NIST 800-53, and STIGs, while participating in