The Senior Cybersecurity Technical Subject Matter Expert (SME) will provide expert analysis and guidance on matters related to cybersecurity and cyber resilience for all CPE AVN systems. The SME will provide guidance to safeguard information, infrastructures, applications, and mission systems and processes against cyber threats. The SME will provide threat and vulnerability analysis and support to ensure vulnerabilities are identified, appropriately assessed, mitigated and documented for acceptance by the Authorizing Official (AO). The candidate will monitor systems for compliance with DoD and Army standards through the analysis of RMF artifacts to include diagrams, HW/SW lists, technical scan data, and other related materials. The candidate will be able to identify both baseline security requirements based on the system configuration as well as confirm that these baseline requirements are being met.
The SME will:
- Collaborate with cross-functional teams to understand the system and threat environment and advise on vulnerabilities, mitigations, and risks.
- Provide cybersecurity and cyber resiliency support to the CPE AVN AAMCAT team.
- Conduct threat and vulnerability analysis.
- Provide technical direction, interpretation, and alternatives to senior leaders.
- Stay informed of the latest cyber threat trends, advancements, and emerging threats in the field of cybersecurity and cyber resiliency and apply this knowledge to CPE AVN systems.
- Provide expert advice and guidance to decision-makers and stakeholders on all matters related to cybersecurity and cyber resilience for CPE AVN systems.
- Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Army cybersecurity requirements.
- Monitor and manage system Enterprise Mission Assurance Support Service (eMASS) records.
- Conduct cybersecurity testing analysis and provide overall vulnerability and risk assessment reports.
- Analyze Plans of Action and Milestones (POA&Ms).
- Analyze Change Requests for security impact.
- Work closely with internal and external personnel to address unique cybersecurity concerns to include the US Army CIO staff, NETCOM, DISA, and others.
- Communicate up and down within the organization; prepare detailed descriptions of issues, status updates, recommendations, and reports. Applicants must be well organized with an eye for detail.
- Work well in a team-oriented environment and self-manage their tasks to ensure success.
- Complete reviews of required cybersecurity documentation and artifacts to include: POA&Ms, SCA-V Reports, MOUs, MOAs, connection agreements, dataflow diagrams, network diagrams, PPPs, CSS, TEMPs, and other documents and make recommendations to the system owner, O-ISSM, P-ISSM, and AO as appropriate.
- Manage customer relationship with cyber teams, system owners, and customers.
Requirements
- 10+ years of related experience including both the development and analysis for compliance of RMF packages, analyzing vulnerabilities, mitigations, and residual risk for IT and OT environments.
- Strong analytical skills, excellent problem-solving abilities, and a deep understanding of the latest cybersecurity technologies and best practices.
- Bachelor’s degree in related technical field
- DoD 8570.01M IAM Level III Certification
- US Citizenship
- Active Secret preferred w/ability to obtain TS
Geeks and Nerds is an innovative technology company that encourages ingenuity, defies the norm, fosters teamwork, and defines the future for our community and nation. We are an Employee-Owned company which means our dedicated team members are also the owners of Geeks and Nerds. When you join GaN, you are not an employee; you are the future owner of Geeks and Nerds.
Come join the company that develops innovative solutions that makes a positive difference in our community and nation. Come join the exceptionally talented and dedicated co-owners. Join a company of significance!
GaN Corporation is an Equal Opportunity Employer. We are pleased to consider all qualified applicants for employment without regard to race, color, gender, sexual orientation, gender identity, religion, national origin, age, marital status, veteran status, disability, genetic information, or any other legally protected classifications. GaN Corporation participates in E-Verify.
Skills Required
- 10+ years related experience including development and analysis of RMF packages and evaluating vulnerabilities, mitigations, and residual risk for IT and OT environments
- Experience creating A&A packages and executing all RMF steps per DoD, DISA, and Army requirements
- Experience monitoring and managing eMASS records
- Bachelor's degree in a related technical field
- DoD 8570.01M IAM Level III Certification
- US Citizenship
- Strong analytical and problem-solving skills and deep understanding of current cybersecurity technologies and best practices
- Active Secret clearance preferred with ability to obtain Top Secret
What We Do
GaN Corporation (dba "Geeks and Nerds") is an employee-owned, Huntsville-based technology company that provides technical and management services to government and commercial customers in the areas of Cyber Security, Systems Engineering, Test & Evaluation, Software Engineering, and Information Technology. We are a nationally recognized company for our innovation (2012 Huntsville Chamber of Commerce Technology Business of the Year, 2013 IEEE and HASBAT Professional of the Year), leadership and customer service (2012-2016 U.S. Chamber of Commerce Top 100 Small Businesses in the U.S.). Our passionate employees, innovative culture, in-depth knowledge, and experience are a guaranteed recipe for highly successful programs for our customers (2009-2012 Inc. 500 Top 10 Fastest Growing Government Contractor in Alabama).
