Senior Cybersecurity Specialist

The Stacia Group, LLC; Chantilly (VA); On-site; USD 194,000 - 237,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

The Stacia Group, LLC seeks a highly technical Senior Cybersecurity Subject Matter Expert and Security Control Assessor to support our agency as trusted advisor to the Authorizing Official and CIO. This in-person role secures multi-domain systems with intrinsic security from inception.

Salary starts at $215,000 per year with a benefits package including 401(k) and health, dental, vision, PTO. Ideal candidate brings deep DoD cybersecurity expertise, system integrator background, and proven

Qualifications

• Active TS clearance with SCI and SAP access.
• 12+ years of progressive IT/cybersecurity and A&A experience.
• Hands-on SAP/SCI systems experience across Platform IT and cloud.
• DoD 8140/8570-M IAT III or IAM III baseline cert (CISSP/CISM/GSLC/CASP CE).
• Defense-industry experience with rapid prototyping, test ranges, Platform IT.
• Systems integrator or cybersecurity engineer with enterprise networks/cloud.
• Strong RMF knowledge and security control assessment practices.
• Familiarity with AWS, Azure IL5/IL6, Kubernetes, Docker.
• Experience with ACAS, SCAP, STIG Viewer, Splunk/SIEM, CSPM, eMASS, Xacta.

Responsibilities

• Participate in System Requirements Reviews and Design Reviews to embed security.
• Guide teams in DevSecOps practices, automated security testing, and compliance.
• Perform system-level threat modeling to identify attack paths and mitigations.
• Validate vulnerability scans, STIG results, and pen tests; relate to risk.
• Execute RMF activities and translate gaps into risk decisions for the AO.
• Assess security/risk across Platform IT, hardware, software, networks, satellites.
• Drive DoD Zero Trust pillars across agency portfolios.
• Provide design/evaluation/implementation guidance for Cross Domain Solutions.
• Monitor emerging tech and threats (AI/ML, edge, quantum-resistant crypto).
• Serve as technical bridge between AO, engineering, SMEs, partners, and stakeholders.

Skills

Active TS Clearance

SCI Eligibility

Cross Domain Security

Cloud Security

RMF & CSAM Practices

Threat Modeling

Education

DoD 8570.01-M/IAT III or IAM III cert

CISSP / CISM / GSLC / CASP-CE

Tools

ACAS

SCAP

STIG Viewer

Splunk/SIEM

eMASS

Xacta

Job description

Requirements

Must have:

• We require an active Top Secret clearance with eligibility for Sensitive Compartmented Information and Special Access Program access.
• We require at least twelve years of progressive experience in IT, cybersecurity engineering, and Assessment & Authorization.
• We require substantial hands-on experience supporting SAP and SCI systems across Platform IT, cloud environments, and Cross Domain Solutions.
• We require an active baseline certification aligned to DoD 8140.01 / 8570.01-M for IAT Level III or IAM Level III, such as CISSP, CISM, GSLC, or CASP CE.
• We prefer experience in the defense innovation environment, including rapid prototyping, test ranges, and Platform IT systems.
• We prefer deep technical background as a systems integrator or cybersecurity engineer with enterprise networks, cloud platforms, or all-domain platform IT architectures.
• We expect strong knowledge of DoD, Federal, and Intelligence Community risk management frameworks and security control assessment practices.
• We value familiarity with cloud and container security, including AWS, Azure IL5/IL6, Kubernetes, and Docker.
• We value experience using tools and workflows such as ACAS, SCAP, STIG Viewer, Splunk or SIEM platforms, CSPM tools, eMASS, and Xacta.

Responsibilities:

• We participate in System Requirements Reviews, Preliminary Design Reviews, and Critical Design Reviews to ensure security is integrated early in the lifecycle.
• We guide project teams in adopting DevSecOps practices, including automated security testing and continuous compliance monitoring.
• We perform system-level threat modeling during design to identify attack paths and recommend mitigations before implementation.
• We conduct technical validation of vulnerability scans, STIG results, and penetration testing findings, then relate them to operational risk.
• We execute RMF activities and help translate technical compliance gaps into mission-focused risk decisions for the Authorizing Official.
• We assess the security, integrity, and residual risk of diverse environments, including Platform IT, hardware and software systems, networks, and satellite control systems.
• We drive implementation of DoD Zero Trust architectural pillars across agency portfolios.
• We provide expertise in the design, evaluation, and implementation of Cross Domain Solutions for classified and tactical environments.
• We monitor emerging technologies and evolving threats, including AI/ML, edge computing, and quantum-resistant cryptography.
• We serve as a technical bridge between the Authorizing Official, engineering teams, portfolio SMEs, defense industry partners, and government cybersecurity stakeholders.

Company:

We are hiring a highly technical Senior Cybersecurity Subject Matter Expert and Security Control Assessor to support our agency as a trusted technical advisor to the Authorizing Official and directly to our CIO. This is an in‑person role focused on securing complex, multi‑domain systems with intrinsic security built into mission capabilities from the earliest design stages. We offer a competitive salary starting at $215,000 per year and a benefits package that includes a 401(k), 401(k) matching, dental insurance, health insurance, paid time off, and vision insurance.