IA/Cybersecurity Specialist (Secret) (4499)

SMX; Washington (District of Columbia); Hybrid; USD 103,000 - 172,000; Full time

Job summary

SMX seeks Information Assurance/Cybersecurity Specialists (Junior, Mid, and Senior) to design and implement secure multi-cloud infrastructure supporting USAF programs. You will contribute to RMF compliance, risk assessments, and vulnerability management, while aligning controls with mission requirements across Windows environments.

Roles require active Secret clearance and DoD 8570/CompTIA Sec+ certification, plus experience with RMF, NIST 800-53, and DevSecOps concepts.

Qualifications

• Bachelor's degree or equivalent certification required.
• Active Security Clearance: Secret.
• DoD 8570 compliant certification: CompTIA Sec+.
• Knowledge of RMF, NIST 800-53, and cloud security principles.
• Understanding of Zero Trust and DevSecOps concepts.
• Experience with Windows operating environments.

Responsibilities

• Assist in maintaining RMF and other DoD cybersecurity frameworks.
• Collaborate with architects to integrate security in the development lifecycle.
• Assess vulnerabilities, propose mitigations, provide incident response.
• Support vulnerability management and remediation tracking.
• Prepare security documentation including POAMs and ATO artifacts.
• Implement countermeasures to detect and mitigate threats in cloud infra.
• Coordinate with stakeholders to align controls with operations.
• Maintain continuous compliance via vulnerability scans and patching.
• Assist with security documentation and network diagrams.
• Conduct ACAS scans and related security assessments.

Skills

Zero Trust

DevSecOps

RMF

NIST 800-53

STIGs

Cloud security

Windows

Education

Bachelor's degree or equivalent certification

DoD 8570 / CompTIA Sec+ certification

Job description

SMX is seeking Information Assurance/Cybersecurity Specialists (Junior, Mid, and Senior) with a foundation in information systems, multi-cloud, network administration, systems administration, and cybersecurity. This role supports the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration and mission-critical systems for the United States Air Force. Responsible for supporting or actively developing and implementing cybersecurity strategies, ensuring cloud accreditation success, and integrating best practice countermeasures to defend the platform and infrastructure against internal and external threats Services performed include, but are not limited to, designing, developing, engineering, and implementing integrated cloud security solutions that will ensure proprietary/confidential data and systems are protected. Gathers and organizes technical information about an organization's mission goals, and needs, existing security products, and ongoing programs in computer security in the strategic design process to translate security and business requirements into technical designs. Configures and validates secure cloud systems; tests security products and systems to detect security weaknesses. Conducts regular audits to ensure that systems are being operated securely and computer security policies and procedures are being implemented as defined in security plans. Duties include architecture design, system/network analysis, vulnerability and risk assessments, and security assessment of hardware and software. Performs duties on tasks that require expertise in firewall, cyber, cloud computing, implementation/configuration, physical security analysis of facilities, security assessment/risk analysis, security design of local area networks and wide area networks, security analysis of network operating systems and applications, continuity of operations, planning, policy development and disaster recovery.

Essential Duties & Responsibilities

• Assist in maintaining compliance with RMF and other DoD cybersecurity frameworks

• Collaborate with architects and developers to integrate security measures into systems throughout the development lifecycle

• Assess existing and potential system vulnerabilities, propose mitigation strategies, and provide incident response

• Support day-to-day vulnerability management and remediation tracking

• Help prepare and update security documentation, including POA&Ms and ATO artifacts

• Integrate cybersecurity best practices and countermeasures to detect and mitigate threats to the platform and supporting cloud infrastructure

• Collaborate with mission stakeholders to align security controls with operational requirements.

• Maintain a continuous compliance posture via proactive vulnerability scanning, patch management, and incident response processes

• May assist with technical documentation, network diagrams, inventory control documentation, and security documentation

• Conduct or assist with Assured Compliance Assessment Solution (ACAS) scans

Required Skills & Experience

• Must have High School diploma or Bachelor’s degree and minimum 1 year experience for junior-level. Must have Bachelor's degree or equivalent certification plus 3-6 years' experience for mid-level. Must have Bachelor's degree or equivalent certification plus 7 years' experience for senior-level. Must have Bachelor's degree or equivalent certification plus 10 years' experience for SME-level.

• Active Security Clearance Required: Secret

• DoD 8570 compliant certification: CompTia Sec+ Relevant cybersecurity or IA experience for level being hired for

• Understanding of Zero Trust and modern DevSecOps concepts

• Knowledge of Windows operating environments

• Familiarity with RMF, NIST 800-53, STIGs, and cloud security principles

Desired Skills & Experience

• Prior experience supporting United States Air Force or DoD cloud programs

• Understanding of C4I systems

#CJPOST

#LI-hybrid

The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.

The proposed salary for this position is:

$103,200—$172,000 USD

At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.

We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.

SMX is an Equal Opportunity employer including disabilities and veterans.

Selected applicant may be subject to a background investigation and/or education verification.

SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).