Cybersecurity Engineer SME

Overview:

GovCIO is currently hiring for Cybersecurity Engineer SME to support advanced Air Force Intelligence Community (AF IC) Risk Management Framework (RMF) modernization initiatives. The successful candidate will serve as a technical lead for cybersecurity engineering, RMF automation, and AI-enabled compliance capabilities supporting classified information systems. This position will be located at Lackland AFB, TX and will be an onsite position.

Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.

• Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
• Provides timely and actionable sanitized intelligence to cyber incident response professionals.
• Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
• Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
• Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.

This position focuses on engineering and automating RMF processes, improving authorization efficiency, enhancing continuous monitoring, and integrating AI-assisted analysis into cybersecurity governance workflows. The position supports system owners, ISSMs, ISSOs, Authorizing Officials (AOs), and Security Control Assessors (SCAs) by developing automation capabilities and engineering solutions. The position does not perform independent security control assessments to preserve RMF assessment independence.

Primary Responsibilities

• Engineer cybersecurity solutions supporting DoD and Intelligence Community information systems.
• Design, implement, and document security controls consistent with NIST SP 800-53 Rev. 5 and CNSSI 1253 overlays, as applicable.
• Develop security architectures supporting Zero Trust, cloud, hybrid, and on-premises environments.
• Integrate cybersecurity requirements throughout the System Development Life Cycle (SDLC).
• Support Authority to Operate (ATO), Continuous Authorization (cATO), and Continuous Monitoring (ConMon) initiatives.
• Develop and maintain RMF authorization artifacts\
• Engineer automated evidence collection and validation processes.
• Develop reusable security control implementations and standardized control inheritance strategies.
• Support implementation of OSCAL-based RMF automation.
• Design and implement AI-assisted capabilities supporting RMF documentation, evidence management, and compliance analysis.
• Develop Retrieval-Augmented Generation (RAG) workflows for cybersecurity documentation.
• Implement Natural Language Processing (NLP) techniques to analyze RMF artifacts and identify documentation inconsistencies.
• Develop machine learning and rule-based models.
• Implement human-in-the-loop validation for all AI-generated outputs.
• Apply Responsible AI principles and AI governance throughout solution development.
• Develop automated RMF workflows.
• Integrate cybersecurity controls into CI/CD pipelines.
• Implement Security-as-Code and Policy-as-Code capabilities.
• Develop dashboards supporting cybersecurity metrics, authorization status, and continuous monitoring.
• Integrate automation with eMASS, Xacta, ServiceNow, Vuln Management platforms, and Enterprise asset inventories
• Engineer automated collection of cybersecurity evidence supporting continuous monitoring.
• Integrate security tooling.
• Develop automated compliance scoring and risk dashboards.
• Provide technical recommendations supporting authorization decisions.
• Support modernization of enterprise RMF processes across AF IC environments.

High School with 10+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: Top Secret/SCI

• DOD 8140 IAT II certification required: CISSP, ISSEP, ISSAP, CGRC.

• 10 years of experience in one or more of the following: Cybersecurity Engineering, Risk Management Framework implementation, Security Architecture, DevSecOps, Continuous Monitoring, Security Automation.

• Minimum five years supporting DoD or Intelligence Community cybersecurity programs.

• Experience with eMASS, Xacta, NIST RMF, DoD RMF, AF IC cybersecurity processes, Classified information systems.

• Demonstrated experience with NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5. NIST SP 800-53A Rev. 5, NIST SP 800-137, NIST SP 800-30, FIPS 199 and 200, DoD RMF, CNSSI, ICD 50, OSCAL implementation and machine-readable RMF artifacts, Zero Trust Architecture, Continuous Authorization (cATO), Security engineering principles, DevSecOps, Security automation.

• Programming Experience developing automation using: Python, PowerShell, REST APIs, JSON/XML, GIT, CI/CD Platforms, integrating with enterprise APIs and cybersecurity platforms

• Experience implementing AI-assisted cybersecurity capabilities using Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Natural Language Processing, Prompt engineering, Vector databases, Document intelligence, AI governance, Human-in-the-loop validation.

Preferred Skills and Experience

• Experience with the Space Force's network environment.

#DSG #NSS #MAVERICK #TMK #TM