IA/Cybersecurity Specialist (Secret) (4499)

SMX; Boston (MA); On-site; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement plan

Job summary

SMX is seeking Information Assurance/Cybersecurity Specialists (Junior, Mid, and Senior) with a foundation in information systems, multi-cloud, network and systems administration, and cybersecurity. This role supports secure, scalable cloud migrations and mission‑critical systems for the United States Air Force.

The responsibilities include RMF compliance, collaborating with architects and developers to embed security into the lifecycle, conducting vulnerability assessments, incident response,

Qualifications

• Bachelor's degree or equivalent certification; junior: 1 year experience, mid: 3–6 years, senior: 7+ years, SME: 10+ years
• Active Secret security clearance required
• DoD 8570 certification: CompTIA Sec+
• RMF, NIST 800-53, STIGs familiarity

Responsibilities

• Assist in maintaining RMF and DoD cybersecurity framework compliance
• Collaborate with architects and developers to embed security across the development lifecycle
• Assess vulnerabilities, propose mitigations, and provide incident response
• Support vulnerability management and remediation tracking
• Prepare security documentation including POA&Ms and ATO artifacts
• Conduct ACAS scans and continuous compliance activities

Skills

Zero Trust

DevSecOps

RMF/NIST

Windows OS

Cloud security

Education

Bachelor's degree or equivalent certification

Tools

Secret clearance

Job description

SMX is seekingInformation Assurance/Cybersecurity Specialists (Junior, Mid, and Senior)with a foundation in information systems, multi-cloud, network administration, systems administration, and cybersecurity. This role supports the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration and mission-critical systems for the United States Air Force. Responsible for supporting or actively developing and implementing cybersecurity strategies, ensuring cloud accreditation success, and integrating best practice countermeasures to defend the platform and infrastructure against internal and external threats Services performed include, but are not limited to, designing, developing, engineering, and implementing integrated cloud security solutions that will ensure proprietary/confidential data and systems are protected. Gathers and organizes technical information about an organization's mission goals, and needs, existing security products, and ongoing programs in computer security in the strategic design process to translate security and business requirements into technical designs. Configures and validates secure cloud systems; tests security products and systems to detect security weaknesses. Conducts regular audits to ensure that systems are being operated securely and computer security policies and procedures are being implemented as defined in security plans. Duties include architecture design, system/network analysis, vulnerability and risk assessments, and security assessment of hardware and software. Performs duties on tasks that require expertise in firewall, cyber, cloud computing, implementation/configuration, physical security analysis of facilities, security assessment/risk analysis, security design of local area networks and wide area networks, security analysis of network operating systems and applications, continuity of operations, planning, policy development and disaster recovery.

• Assist in maintaining compliance with RMF and other DoD cybersecurity frameworks
• Collaborate with architects and developers to integrate security measures into systems throughout the development lifecycle
• Assess existing and potential system vulnerabilities, propose mitigation strategies, and provide incident response
• Support day-to-day vulnerability management and remediation tracking
• Help prepare and update security documentation, including POA&Ms and ATO artifacts
• Integrate cybersecurity best practices and countermeasures to detect and mitigate threats to the platform and supporting cloud infrastructure
• Collaborate with mission stakeholders to align security controls with operational requirements.
• Maintain a continuous compliance posture via proactive vulnerability scanning, patch management, and incident response processes
• May assist with technical documentation, network diagrams, inventory control documentation, and security documentation
• Conduct or assist with Assured Compliance Assessment Solution (ACAS) scans

Required Skills & Experience

• Must have High School diploma or Bachelor’s degree and minimum 1 year experience for junior-level. Must have Bachelor's degree or equivalent certification plus 3-6 years' experience for mid-level. Must have Bachelor's degree or equivalent certification plus 7 years' experience for senior-level. Must have Bachelor's degree or equivalent certification plus 10 years' experience for SME-level.
• Active Security Clearance Required: Secret
• DoD 8570 compliant certification: CompTia Sec+
• Relevant cybersecurity or IA experience for level being hired for
• Understanding of Zero Trust and modern DevSecOps concepts
• Knowledge of Windows operating environments
• Familiarity with RMF, NIST 800-53, STIGs, and cloud security principles

Desired Skills & Experience

• Prior experience supporting United States Air Force or DoD cloud programs
• Understanding of C4I systems

The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.

The proposed salary for this position is:: $103,200 USD - $172,000 USD

At SMX, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.

We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.

SMX is an Equal Opportunity employer including disabilities and veterans.

Selected applicant may be subject to a background investigation and/or education verification.

SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).