NC3 Cyber Subject Matter Expert

Systems Planning and Analysis, Inc.; Alexandria (VA); On-site; USD 180,000 - 200,000; Full time

Job summary

Systems Planning and Analysis, Inc. (SPA) seeks a senior NC3 Cyber Analyst to lead cyber hardening across the NC3 enterprise for the Air Force, ensuring resilience and survivability so national leaders can exercise NC2 under all conditions.

The role requires 8+ years in cybersecurity operations within DoD or IC, strong RMF/eMASS/NIST-SP-800-53 experience, and an active TS/SCI clearance. Candidates should translate risk findings into policy and investment guidance.

Qualifications

• 8+ years of experience in cybersecurity operations, engineering, or cyber risk management, with DoD/IC focus.
• Strong understanding of NC3 or nuclear/strategic C2 environments and related risk mitigation.
• Familiarity with DoD cyber frameworks (RMF, eMASS, IAVM) and related guidance.
• Proven ability to connect cyber risk findings to program and budget decisions.
• Active TS/SCI clearance required.

Responsibilities

• Evaluate NC3 systems, architectures, and modernization efforts to assess cyber risk, survivability, and resilience across cyber, physical, and electromagnetic threats.
• Integrate AF/A10 objectives into NC3 cyberhardening PPBE activities to ensure cyber requirements and mitigations inform service and joint acquisitions and resourcing.
• Develop senior leader packages, talking points, and post-forum products; track actions and decisions.
• Collaborate with DAF CIO/CISO, MAJCOMs, and other stakeholders to align cyberhardening with strategic guidance and provide an enterprise-level view of NC3 cyber risk and mitigation priorities.

Skills

Cybersecurity operations

DoD frameworks

RMF/eMASS

NIST SP 800-53

PPBE analysis

Education

Bachelor's degree in cybersecurity, CS, IS, engineering

Job description

Overview

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.

The SLA Analysis Group's mission is to deliver objective analyses, plans and strategies to US Navy, US Marine Corps, USAF, other DoD, and Australian Defence Force clients to support technology development, acquisition, delivery and sustainment decisions. The group provides the core of SPA thought leadership on Undersea Strategy, Software Development and Cost Estimating, with additional benchmark capabilities in AI/ML & Decision Analytics, Modeling and Simulation, and Future Force Assessments. #MC

SPA has a need for a senior NC3 Cyber Analyst to lead analysis, integration, and advocacy for cyber hardening across the Department of the Air Force's Nuclear Command, Control, and Communications (NC3) enterprise. This role helps ensure that NC3 systems remain resilient, survivable, and secure so national leaders can exercise Nuclear Command and Control (NC2) under all conditions

Responsibilities

The NC3 Cyber Analyst evaluates NC3 systems, architectures, and modernization efforts to assess cyber risk, survivability, and resilience across cyber, physical, and electromagnetic threats, delivering decision-quality findings to AF/A10 and NC3 governance bodies. They integrate AF/A10 objectives into NC3 cyberhardening PPBE activities to ensure cyber requirements and mitigations inform Service and Joint requirements, acquisitions, and resourcing. They support AF/A10X in NC3 governance forums-such as NEORAG and NC3 cyber working groups-by developing senior leader packages, technical inputs, and talking points, and by tracking actions and decisions. The analyst collaborates with DAF CIO/CISO, MAJCOMs, AFNWC/AFLCMC, USSTRATCOM, and other stakeholders to increase transparency, align cyberhardening efforts with strategic guidance, and help provide an enterprise level view of NC3 cyber risk and mitigation priorities.

Qualifications

Required:

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related technical field.
• 8+ years of experience in cybersecurity operations, engineering, or cyber risk management, with a substantial portion focused on mission-critical or command-and-control systems in DoD or the Intelligence Community.
• Demonstrated experience assessing the resiliency and survivability of complex systems against cyber, physical, and electromagnetic threats, and translating those assessments into clear recommendations for policy, requirements, and investment.
• Familiarity with NC3 or other nuclear/strategic C2 environments, including how cyber vulnerabilities and mitigations intersect with mission assurance, survivability, and surety requirements.
• Strong understanding of DoD cybersecurity frameworks, including RMF, eMASS, IAVM, and application of NIST SP 80053 and related guidance to enterprise systems.
• Proven ability to support PPBE-related analysis and documentation, connecting cyber risk findings to program/budget positions and decision forums.
• Active TS/SCI clearance and the ability to maintain it throughout employment

Desired:

• Direct experience supporting AF/A10X or NC3 governance forums (e.g., NEORAG, NC3 cyber working groups, NLCC/CONLC3S related bodies), including preparation of readaheads, talking points, and postforum products.
• Experience using model-based or data-driven approaches (e.g., architecture models, dashboards, risk registers) to link cyber vulnerabilities and mitigations to NC3 mission threads and operational impacts.
• Background coordinating across Service, Joint, and interagency stakeholders (e.g., USSTRATCOM, DoD CIO, OSD, AFNWC/AFLCMC, MAJCOMs) on NC3 or other high-consequence cyber issues.
• Relevant advanced degree (e.g., in cybersecurity, systems engineering, or operations research) or advanced cybersecurity certification (e.g., CISSP, CISM, CASP+).

Pay Range Information

At SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Virginia, Pay Transparency Salary range: USD $180,000.00/Yr. - USD $200,000.00/Yr.