Senior Cybersecurity Subject Matter Expert (SME)

Cybersecurity Specialist

Required Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Equivalent years of demonstrated experience will be considered in lieu of a degree.
• Experience:
  • Minimum of five years of experience in cybersecurity roles such as Cybersecurity Engineer, Cybersecurity Manager, or Cybersecurity Analyst.
  • Proficiency in cybersecurity solutions, risk assessments, and security best practices.
  • Experience conducting security maturity and system assessments using the NIST Cybersecurity Framework (NIST CSF) and preparing assessment reports.
  • Hands-on experience in remediating risks and vulnerabilities using industry-standard cybersecurity practices.
• Travel Requirement: Ability to travel to jurisdictions within Maryland as needed.

Preferred Qualifications:

• Master’s degree in Cybersecurity or a related field.
• Expertise in NIST CSF implementation and cybersecurity compliance frameworks.
• Relevant cybersecurity certifications (e.g., CISSP, CISM, CEH, Security+).

Key Responsibilities:

• Assessment & Analysis:
  • Conduct comprehensive security assessments of local networks, cybersecurity architecture, tools, policies, and incident response plans.
  • Identify vulnerabilities, gaps, and risks in existing security controls.
  • Prioritize security risks and recommend mitigation strategies.
• Remediation & Security Enhancement:
  • Collaborate with stakeholders to remediate vulnerabilities and strengthen security posture.
  • Develop, refine, and implement cybersecurity policies, best practices, and security frameworks.
  • Recommend tailored security solutions based on the needs of local government agencies.
• Training & Capacity Building:
  • Provide cybersecurity training to local government IT teams.
  • Foster knowledge-sharing and skill development to improve security awareness and response.
• Reporting & Risk Management:
  • Prepare detailed reports outlining assessment findings, risks, and prioritized recommendations.
  • Ensure alignment between cybersecurity requirements, compliance standards, and organizational objectives.