What are the responsibilities and job description for the Senior Cybersecurity Technical Subject Matter Expert (SME) position at Geeks & Nerds?
The Senior Cybersecurity Technical Subject Matter Expert (SME) will provide expert analysis and guidance on matters related to cybersecurity and cyber resilience for all PEO AVN systems. The SME will provide guidance to safeguard information, infrastructures, applications, and mission systems and processes against cyber threats. The SME will provide threat and vulnerability analysis and support to ensure vulnerabilities are identified, appropriately assessed, mitigated and documented for acceptance by the Authorizing Official (AO). The candidate will monitor systems for compliance with DoD and Army standards through the analysis of RMF artifacts to include diagrams, HW/SW lists, technical scan data, and other related materials. The candidate will be able to identify both baseline security requirements based on the system configuration as well as confirm that these baseline requirements are being met.
The SME will:
- Collaborate with cross-functional teams to understand the system and threat environment and advise on vulnerabilities, mitigations, and risks.
- Provide cybersecurity and cyber resiliency support to the PEO AVN AAMCAT team.
- Conduct threat and vulnerability analysis.
- Provide technical direction, interpretation, and alternatives to senior leaders.
- Stay informed of the latest cyber threat trends, advancements, and emerging threats in the field of cybersecurity and cyber resiliency and apply this knowledge to PEO AVN systems.
- Provide expert advice and guidance to decision-makers and stakeholders on all matters related to cybersecurity and cyber resilience for PEO AVN systems.
- Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Army cybersecurity requirements.
- Monitor and manage system Enterprise Mission Assurance Support Service (eMASS) records.
- Conduct cybersecurity testing analysis and provide overall vulnerability and risk assessment reports.
- Analyze Plans of Action and Milestones (POA&Ms).
- Analyze Change Requests for security impact.
- Work closely with internal and external personnel to address unique cybersecurity concerns to include the US Army CIO staff, NETCOM, DISA, and others.
- Communicate up and down within the organization; prepare detailed descriptions of issues, status updates, recommendations, and reports. Applicants must be well organized with an eye for detail.
- Work well in a team-oriented environment and self-manage their tasks to ensure success.
- Complete reviews of required cybersecurity documentation and artifacts to include: POA&Ms, SCA-V Reports, MOUs, MOAs, connection agreements, dataflow diagrams, network diagrams, PPPs, CSS, TEMPs, and other documents and make recommendations to the system owner, O-ISSM, P-ISSM, and AO as appropriate.
- Manage customer relationship with cyber teams, system owners, and customers.
Requirements
- 10 years of related experience including both the development and analysis for compliance of RMF packages, analyzing vulnerabilities, mitigations, and residual risk for IT and OT environments.
- Strong analytical skills, excellent problem-solving abilities, and a deep understanding of the latest cybersecurity technologies and best practices.
- Bachelor’s degree in related technical field
- DoD 8570.01M IAM Level III Certification
- US Citizenship
- Active Secret preferred w/ability to obtain TS
Geeks and Nerds is an innovative technology company that encourages ingenuity, defies the norm, fosters teamwork, and defines the future for our community and nation. We are an Employee-Owned company which means our dedicated team members are also the owners of Geeks and Nerds. When you join GaN, you are not an employee; you are the future owner of Geeks and Nerds.
Come join the company that develops innovative solutions that makes a positive difference in our community and nation. Come join the exceptionally talented and dedicated co-owners. Join a company of significance!
GaN Corporation is an Equal Opportunity Employer. We are pleased to consider all qualified applicants for employment without regard to race, color, gender, sexual orientation, gender identity, religion, national origin, age, marital status, veteran status, disability, genetic information, or any other legally protected classifications. GaN Corporation participates in E-Verify.
