Cyber security SME

Flatter, Inc.; Utah; On-site; USD 110,000 - 160,000; Full time

Job summary

Flatter, Inc. in Utah seeks a Cybersecurity Professional (ISSM, ISSO or ISSE) to support full lifecycle IT and cyber services for ICBM enterprise environments across on‑premises, cloud, and hybrid architectures.

The role delivers scalable, compliant security, maintaining mission readiness, with RMF authorization, continuous monitoring, vulnerability management, and incident preparedness across diverse environments.

Qualifications

• BS degree in Cyber Security or related field with 15 years of experience
• MS degree with 12 years of experience
• PhD with 9 years of experience
• 6+ years of progressive technical leadership
• Certifications as established per DoD 8570/AFMAN17-1303
• Knowledge of AFMAN17-1303, DoDI 8570 and security requirements

Responsibilities

• Establish and maintain system-level cybersecurity programs, architectures, policies, procedures, controls and risk awareness for assigned systems.
• Apply NIST controls, least privilege, RBAC, encryption, secure configuration and other government security requirements.
• Prepare RMF artifacts (SSP, SAR, ISCP, POA&M) and support ATO/IATT status across lifecycle stages.
• Coordinate authorization activities to achieve and sustain ATO/IATT throughout development, testing, deployment, sustainment, and decommissioning.
• Monitor vulnerability and compliance status, implement or validate STIGs, track findings, and support continuous monitoring directives.
• Develop, test, and maintain incident response and IT recovery strategies and coordinate responses to cybersecurity events.
• For ISSM/ISSO roles, oversee cybersecurity operations and approve subordinate IT product connections; for ISSE, capture requirements and support security testing.

Skills

RMF expertise

NIST controls

Incident response

Security engineering

Policy development

Risk assessment

Authorization processes

Education

BS degree in Cyber Security, IT, CS, or related field

MS degree

PhD

Job description

Description

Position Summary

Flatter, inc. (Flatter) is hiring a Cybersecurity Professional (ISSM, ISSO or ISSE) to support full lifecycle IT and cyber services required to operate and coordinate for the support, defense, and sustainment of ICBM enterprise IT environments across on-premises, cloud, and hybrid architectures. The Cybersecurity Professional will deliver scalable, resilient, and compliant services that maintain security, availability, and mission readiness as ICBMSD enterprise needs evolve. The Cybersecurity Professional will provide proactive and reactive support across the functional areas.

Provides cybersecurity management, operations, engineering, and assessment support across the system lifecycle. Depending on the assignment, the professional serves as an ISSM, ISSO, or ISSE and supports secure design, RMF authorization, continuous monitoring, vulnerability management, and incident preparedness.

Essential Duties And Responsibilities

• Establish and maintain system-level cybersecurity programs, architectures, policies, procedures, control implementation, and risk awareness for assigned systems or enclaves.
• Apply NIST controls, least privilege, role-based access control, encryption, secure configuration, and other Government-directed security requirements.
• Prepare, submit, and maintain RMF and Assessment and Authorization evidence, including SSP, SAR, ISCP, POA&M, audit trails, and other Body of Evidence artifacts.
• Coordinate authorization activities needed to achieve and sustain ATO or IATT status throughout development, integration, testing, deployment, sustainment, and decommissioning.
• Monitor vulnerability and compliance status, implement or validate STIGs, track findings, and support applicable TCTO, MTO, TCNO, and continuous-monitoring directives.
• Develop, test, and maintain incident response and IT recovery strategies and coordinate response to cybersecurity events and unauthorized disclosures.
• For ISSM or ISSO assignments, oversee cybersecurity operations, validate secure configurations, coordinate incident reporting, and approve or recommend approval of subordinate IT products and connections.
• For ISSE assignments, capture and trace cybersecurity requirements, integrate controls into system design, support acquisition and systems engineering, and perform security test and evaluation and vulnerability assessment.

Security Compliance and Performance Expectations

• Perform work within authorized Government policies, plans, processes, tools, and environments across on-premises, cloud, and hybrid architectures.
• Protect Government systems and data at the assigned classification and impact level, and maintain the required clearance, special access, privileged-access approval, and DoD 8140/8570-aligned certification.
• Document work, decisions, risks, issues, and resolutions in Government-approved systems and support audits, quality reviews, and monthly status reporting as directed.
• Participate in Government-directed training, modernization initiatives, working groups, surge support, and continuous process improvement activities.
• This position is in support of a proposal

Requirements

Required Education and Experience:

• BS degree in Cyber Security, Information Technology, Computer Science, Electrical Engineering or related field and 15 years of experience, OR,
• MS degree and 12 years of experience, OR,
• PHD and 9 years of experience
• 6+ yrs of progressive responsibility in providing technical leadership
• Relevant core and advanced certifications as established/required per local, national and international industry standards or as necessitated by performance expectations associated with level of appointment
• Knowledge, skill and abilities run in conjuction with current versions of AFMAN17-1303, DoDI 8570, and stated educational requirements
• High degree of experience and knowledge in security disciplines required
• Principal skill set includes ability to perform all stated/implied duties within this tier and those reasonably derived from preceding tiers
• Certified in one or more- ISSO, ISSE or ISSM