Cybersecurity Assessment & Authorization SME

ADEPT Force Group Incorporated; Alexandria (VA); On-site; USD 110,000 - 125,000; Full time

Job summary

Adept Force Group Incorporated is seeking a Cybersecurity Assessment & Authorization SME to join our Alexandria team. The role focuses on executing RMF-based A&A processes for DoD/DLA information systems and maintaining ongoing authorization across large IT environments, including cloud and OT components.

The SME will determine residual risk, evaluate impacts on authorization status, and communicate progress and results to senior leadership.

Qualifications

• Five years of relevant C&A experience with RMF and NIST guidance.
• Experience supporting DoD security programs and RMF documentation.
• Active Secret clearance required at time of submission.

Responsibilities

• Execute DoD/DLA cybersecurity RMF processes to authorize information systems.
• Maintain authorization status and assess residual risk.
• Brief senior management on RMF progress and results.

Skills

RMF/NIST C&A

DoD cybersecurity

ATO packages

Active Secret clearance

Technical writing

Education

8570/8140 Baseline Certification IAM III

Tools

MS Office (Excel/Word/PowerPoint)

MS Project

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Assessment & Authorization SME

Full Time Alexandria, VA, US

26 days ago Requisition ID: 1038

Salary Range: $110,000.00 To $125,000.00 Annually

The Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert (SME) executes DoD/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, and serves as a Subject Matter Expert for systems undergoing the Risk Management Framework (RMF) process.

The Cybersecurity Assessment & Authorization SME possesses an understanding of how security controls identified in NIST SP 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA, including large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications, and outsourced IT processes. The SME determines the residual risk of identified vulnerabilities and evaluates the potential impact on a system's current or future authorization while briefing senior management on the progress and results of systems undergoing the RMF process.

Requirements

• Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DoD cybersecurity experience.
• Experience assessing security controls and conducting authorization reviews for large, complex organizations.
• Experience supporting Authorization to Operate (ATO) packages and RMF documentation preferred.
• DoD Approved 8570/8140 Baseline Certification: Category IAM Level III.
• Active Secret clearance with a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI investigation at the time of proposal submission.

Preferred Qualifications

• Excellent analytical and technical writing skills.
• Proficiency with Microsoft Office applications (Excel, Word, PowerPoint, MS Project, etc.).
• Experience supporting DoD and/or DLA organizations.

Location: Although position is remote, candidates must reside within 150 miles of one of the following DLA locations: Battle Creek, MI; Columbus, OH; New Cumberland, PA; Philadelphia, PA; Fort Belvoir, VA (HQ); or Richmond, VA.