Senior Cybersecurity SME & RMF Architect

QinetiQ US; Chantilly (VA); On-site; USD 150,000 - 185,000; Full time

Job summary

QinetiQ US is seeking a highly technical Senior Cybersecurity Subject Matter Expert (SME) and Security Control Assessor (SCA). This role transcends traditional compliance validation and provides continuous risk determinations to support the CIO of SCO on secure, multi-domain systems.

You will lead engineering reviews, guide DevSecOps integrations, perform threat modeling, RMF tasks, and engage with DIB and SAP IT groups to align security with agency timelines and operational needs.

Qualifications

• Active Top Secret clearance with SCI and SAP access.
• Minimum of twelve (12) years of IT, cybersecurity engineering, and A&A experience.
• Experience with SAP and SCI Systems, PIT, Cloud, and Cross Domain Solutions.
• Certification aligned with DoD 8140/8570 Level III IAM/IAT (e.g., CISSP, CISM, GSLC, CASP+).

Responsibilities

• Engineering Technical Reviews: participate in SRR, PDR, and CDR with security baked in.
• DevSecOps Alignment: guide teams to integrate SAST/DAST and continuous compliance in pipelines.
• Threat Modeling: perform system-level threat modeling to identify attack vectors and mitigations.
• Technical Validation: review vulnerability scans, STIGs, and pentest reports and map to risk.
• RMF Execution: apply DoD/IC RMF policies and translate gaps into risk decisions.
• Diverse Architectures: evaluate security across PIT, hardware/software, networks, and satellites.
• Zero Trust Implementation: drive Zero Trust across portfolios.
• Cross Domain Solutions (CDS): design and implement CDS in classified environments.
• Emerging Technology Evaluation: monitor AI/ML, edge computing, and quantum-resistant crypto.
• Stakeholder Engagement: translate AO directives to engineers and challenges to AO.
• Community Representation: liaise with DIB and government cybersecurity entities.

Skills

Top Secret clearance with SCI and SAP

12+ years IT/cybersecurity experience

SAP and SCI systems experience

DoD 8140/8570 Level III IAM/IAT

Education

IAW 8140/8570 certification (CISSP/CISM/GSLC/CASP+)

Tools

SAST/DAST tools

ACAS/Nessus

STIG checklists

Penetration testing

Job description

QinetiQ US is seeking a highly technical Senior Cybersecurity Subject Matter Expert (SME) and Security Control Assessor (SCA). This role transcends traditional compliance validation and provides continuous risk determinations to support the CIO of SCO on secure, multi-domain systems.

You will lead engineering reviews, guide DevSecOps integrations, perform threat modeling, RMF tasks, and engage with DIB and SAP IT groups to align security with agency timelines and operational needs.