Cybersecurity Subject Matter Expert w/Secret Clearance

Job Description

Job Description

Overview

WORK ENVIRONMENT 

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job.  Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.   

• Location:  North Charleston, SC area (contractor facility within 15 miles of NIWC Atlantic). Remote/telework may be approved 
• Type of environment:  Office environment
• Noise level: Medium
• Work schedule: Core hours (0800-1700), Monday through Friday. Occasional extended hours during testing events
• Amount of Travel: Minimal (5-15%). Primarily CONUS support

WORK AUTHORIZATION/SECURITY CLEARANCE

U.S. Citizen

Secret clearance (ability to obtain TS preferred)

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

OTHER INFORMATION

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice

This position supports an upcoming government contract proposal and is contingent upon contract award and government approval. Candidates must meet all stated requirements and may be required to sign a Letter of Commitment (LOC).

Responsibilities

TekSynap is seeking a  Cybersecurity Subject Matter Expert to join our team at  Defense Health Agency to provide senior cybersecurity subject matter expertise supporting DHA cybersecurity assessment, RMF authorization, IV&V validation, and enterprise risk management activities across systems, enclaves, and sites supported by NIWC Atlantic.

REQUIRED QUALIFICATIONS  

Experience

• 15 years IT experience HIPAA/Medical Systems expertise 
• Senior DoD cybersecurity experience 
• RMF subject matter expertise 
• A&A authorization experience 
• IV&V cybersecurity validation experience 
• Enterprise cybersecurity architecture experience 
• Risk management expertise 
• DoD policy knowledge 
• Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations. Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.

Certifications

• IAM Level III Certification preferred (e.g., CISSP, CISM, CASP) 

Education

• Bachelor’s degree in Cybersecurity, IT, Engineering, or related field 
  Equivalent experience acceptable 

Clearance

• Secret clearance (ability to obtain TS preferred)

RESPONSIBILITIES  

• Serve as senior cybersecurity advisor for RMF and A&A execution 
• Provide subject matter expertise on DoD cybersecurity policy and guidance 
• Provide oversight of RMF lifecycle implementation across systems 
• Review and approve Security Assessment Plans and test strategies 
• Provide technical review of Security Assessment Reports 
• Provide expert analysis of residual risk and authorization recommendations 
• Provide oversight of IV&V cybersecurity validation activities 
• Provide expert guidance on STIG compliance and implementation 
• Support development of RMF strategies for enterprise systems 
• Provide guidance on cybersecurity architecture and control selection 
• Review system boundary definitions and enclave architectures 
• Provide oversight of vulnerability remediation strategies 
• Review POA&M development and risk mitigation approaches 
• Provide expert support for eMASS package development 
• Review authorization packages for completeness and accuracy 
• Provide consultation to system owners and program managers 
• Support validation readiness review decision-making 
• Provide guidance for continuous monitoring strategy implementation 
• Support development of cybersecurity SOPs and policies