Senior Cybersecurity SME: DoD RMF & Policy Lead

SMS Data Products Group, Inc; Springfield (VA); On-site; USD 170,000 - 189,000; Full time

Job summary

SMS Data Products Group, Inc. is seeking a Cybersecurity Specialist (SME) to provide high-level technical authority within a national security framework.

You will lead policy development, RMF cycles, and vulnerability remediation for DoD and defense contractor environments, coordinating with system owners and executives to ensure compliance and operational readiness. The role requires Top Secret clearance with SCI eligibility and 8–10+ years of cyber security experience, with expertise in NIST

Qualifications

• DoD Baseline Certification: DoD 8140 / 8570 IAT Level III or IAM Level III baselines (e.g., CISSP, CISM, GSLC, or equivalent)
• Active Top Secret clearance with SCI eligibility
• 8-10+ years of cyber security or information assurance in DoD/defense environments
• Deep expertise with NIST SP 800-53, FISMA, and RMF lifecycle

Responsibilities

• Policy & Strategy Development: author/refine agency-level cybersecurity policies and SOPs
• Lead RMF cycles to support A&A activities and maintain ATOs
• Evaluate STIG scans, analyze ACAS/Nessus outputs, engineer mitigations
• Incorporate security controls into software/infrastructure baselines from inception
• Oversee POA&M tracking and formal closure across software segments
• Coordinate incident response tracking and post-incident remediation

Skills

RMF lifecycle

Policy development

Vulnerability assessment

Executive communication

Education

Bachelor's Degree in CS/Cybersecurity

Master's Degree in technical discipline

Equivalency substitution: 12+ years cybersecurity exp

Tools

eMASS

ACAS

SCAP

Nessus

Job description

SMS Data Products Group, Inc. is seeking a Cybersecurity Specialist (SME) to provide high-level technical authority within a national security framework.

You will lead policy development, RMF cycles, and vulnerability remediation for DoD and defense contractor environments, coordinating with system owners and executives to ensure compliance and operational readiness. The role requires Top Secret clearance with SCI eligibility and 8–10+ years of cyber security experience, with expertise in NIST