Cybersecurity Assessment and Authorization Subject Matter Expert (SME)
The Cybersecurity Assessment and Authorization (A&A) Subject Matter Expert (SME) serves as a senior cybersecurity authority responsible for supporting the authorization of information systems and ensuring compliance with Department of Defense (DoD) cybersecurity policies and procedures. The SME performs and supports the DoD cybersecurity authorization process, either as the system authorizing expert or as a subject matter expert for systems undergoing authorization.
This role requires a strong understanding of how security controls defined in NIST SP 800-53 are applied during the assessment and authorization process across large and complex enterprise environments such as those supporting the Defense Logistics Agency (DLA). These environments may include multiple enclaves, Automated Information Systems (AIS), enterprise applications, and outsourced IT services.
The SME evaluates vulnerabilities and determines the appropriate severity value for identified security control deficiencies. Additionally, the SME assesses potential impacts on system authorization status and provides recommendations for remediation. The role involves briefing senior leadership on the progress, risks, and outcomes of systems undergoing the Risk Management Framework (RMF) authorization process.
Minimum RequirementsMinimum five (5) years of experience supporting Risk Management Framework (RMF) and NIST Assessment and Authorization (A&A) processes.
Demonstrated DoD cybersecurity experience.
Experience assessing security controls and conducting authorization reviews for large, complex organizations.
Strong understanding of DoD cybersecurity authorization policies, procedures, and implementation processes.
Experience supporting the DoD RMF authorization lifecycle.
Knowledge of cybersecurity considerations related to emerging technologies, including:
Cloud environments
Industrial Control Systems (ICS)
Warehouse Execution Systems
Operational Technology (OT) infrastructures.
Must possess an active DoD Secret Clearance.
Must hold IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at the time of proposal submission.
Personnel assigned to the Defense Logistics Agency (DLA) Cyber Emergency Response Team (CERT) must meet the following requirements:
Active DoD Top Secret Clearance
IT-I Critical Sensitive security clearance or Tier 5 (T5) at the time of proposal submission
Personnel assigned as DLA CERT Analysts must maintain a CSSP Analyst certification
Founded in 1996, Horizon Industries Limited (Horizon) has grown into a team of highly qualified professionals providing full-cycle IT consulting and management support to both public and private sector clients.
Horizon fosters a culture that promotes work-life balance and offers a comprehensive benefits package, including:
Medical, dental, vision, and disability insurance
401(k) retirement plan with 100% vesting from day one and employer matching after 90 days
Educational Assistance Program
Student Loan Repayment Program
Gym Reimbursement Program
Horizon Industries Limited is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, citizenship status, or any other factor protected by law.
EOE / M / F / Vet / Disabled
Top Skills
What We Do
Horizon Industries is an IT services corporation serving Clients across the U.S. and internationally. Headquartered in Tysons Corner, Virginia, with offices in London, UK, Timisoara, Romania, and New Delhi, India, Horizon has over two decades of experience providing IT and Management consulting services to the U.S. Government and commercial clients around the globe. We focus on emerging capabilities in Cyber, Low Code, RPA, AI and Network Technologies. To meet the business objectives and needs of our clients, our teams deliver full life-cycle of support from business strategy analysis, business system development and deployment, and operations support.
Our Mission:
We place our customers’ missions first, and believe our own success will follow. Horizon builds excellent multidisciplinary teams that work together, contributing unique perspectives which maximize client results. Horizon’s culture ensures that each employee is constantly learning and acquiring new skills to continually improve the client experience.
