Cyber Security Subject Matter Expert

Nisga'a TEK, LLC; United States; On-site; USD 105,000 - 155,000; Full time

Job summary

Nisga'a Tek is seeking a cybersecurity Subject Matter Expert (A&A) to support RMF and DoD cybersecurity processes. The role involves assessing security controls for large, complex environments including enclaves, cloud services, and OT.

You will brief senior management on RMF progress and work toward authorization decisions. The position requires contributing to vulnerability assessments, developing cybersecurity concepts, and ensuring compliance with DoD regulations.

Qualifications

• Five years of C&A experience with RMF and NIST C&A practices.
• Experience assessing security controls and performing authorization reviews for large, complex organizations.
• DoD cybersecurity experience and a valid SECRET clearance or higher.

Responsibilities

• Conduct in-depth research to support cybersecurity strategies and solutions.
• Support selection of cybersecurity software tools and develop product-specific STIGs.
• Perform vulnerability assessments, penetration testing, and RMF-related evaluations.

Skills

C&A experience

RMF

NIST C&A

DoD cybersecurity

Education

Bachelor's degree

Tools

STIGs

Job description

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Summary:

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes. Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system's current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Responsibilities

Essential Job Functions:

• Conduct in-depth research and analysis to support the development of cybersecurity strategies and solutions.
• Recommend and assist in the selection of cybersecurity software tools, including the development of product-specific STIGs based on applicable DISA SRGs.
• Perform vulnerability assessments, penetration testing, and CCRI evaluations across networks, databases, applications, and IT frameworks.
• Apply advanced technical principles, theories, and methodologies to solve unusually complex problems.
• Develop and guide the implementation of new cybersecurity concepts and technologies.
• Work independently under consultative direction to achieve long-range objectives.
• Produce high-quality written reports and deliver oral briefings to stakeholders and leadership.
• Ensure compliance with DoD cybersecurity regulations and standards.

Qualifications

Necessary Skills and Knowledge:

• Strong analytical and problem-solving skills for resolving security issues.
• Strong skills implementing and configuring networks and networks components.
• Expert experience in cybersecurity and evaluations.

Minimum Qualifications:

• Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience.
• Experience in assessing security controls and conducting authorization reviews for large, complex organizations
• Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI at the time of proposal submission.
• Clearance: Secret
• 8570/8140: DoD Approved 8570 Baseline Certification: Category IAM Level III

Preferred Qualifications:

• Bachelor's degree in a relevant field.

Pay and Benefits

The annual salary range for this position is $105,000 to $155,000.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.