Cybersecurity Subject Matter Expert

Matlock is looking for a Cybersecurity Subject Matter Expert (SME) to provide technical assistance to Headquarters Pacific Air Forces (HQ PACAF) Defensive Cyber Operations and Mission Assurance Branch. The Cybersecurity SME works directly for the PACAF Defensive Cyber Operations and Mission Assurance Branch but works with various PACAF AOR personnel to execute their duties and responsibilities.

Typical Responsibilities:

• Deliver Cybersecurity and RMF/FISMA support to PACAF mission owners; distribute current policy and provide guidance, and mentorship to the cyber forces to ensure compliance

• Assist PACAF Main Operating Bases (MOBs) & Geographically Separated Units (GSUs) improve & maintain implementation of congressional FISMA, DoD, and AF cybersecurity directives

• Conduct (on-site and/or virtual) A&A validation and reviews, using National/DoD/AF standards (e.g., DISA Security Technical Implementation Guides (STIGs), National Institute of Standards and Technology (NIST) SP 800- 12)

• Collect and develop A&A artifacts in accordance with AO Office

• Assisting MOBs and GSUs maintain and sustain A&A packages, including tracking/updating A&A documents/products in the following databases:

o Connection Approval Process (CAP) for SNAP o GIAP circuit management tools

o eMASS and ITIPS

o Continuous Monitoring Risk Scoring (CMRS) efforts

• Assist MOB and GSUs create and maintain comprehensive RMF products for the theater circuits/enclaves via eMASS as required. Products must include all requirements IAW applicable DoD and AF Instructions

Assist the Government in the creation, consultation, revision, finalization, submission of the deliverables for RMF to include but not limited to the following:

o System Security Plan

o Ports Protocol Services Matrix (enclave)

o Artifacts for control validation (STIG results, Policies, Scans, Charters, etc., unit provided)

o Plan of Actions and Milestones (POAMs) o System Topology

• Provide up-dates through AF central FISMA database repository, ITIPS

• Ensure A&A data are synchronized across AF and DISA repositories (eMASS, ITIPS, SNAP, and GIAP)

• Assist processing circuit connection requests for all the main bases through SIPRNet Global Information Grid (GIG) Interconnection Approval Process (GIAP) System (SGS) and the NIPRNet SNAP

• Prepare and mentor NAF, Wing and cybersecurity forces through the CRR-M program

• Train and assist PACAF MOBs & GSUs personnel in the use of DoD security technical implementation tools and technology to maintain & improve cyber readiness

• Consult to resolve any issues with DoD required vulnerability scanning tools, including system credentials, access control list, and identified network assets

• Consult to resolve any issues with DoD required endpoint security solutions for all host devices in the network enclaves

• Assist and prepare PACAF Wings for CORAs & CCORIs on NIPRNet, SIPRNet and supported information systems

• Create CORA and CCORI scores and Risk Assessment Report for the MOBs & GSUs using DISA CORA Scoring and Risk Assessment tools

• Provide recommendations for mitigations & follow-on actions to include POAMs

Required Qualifications: The successful candidate will have extensive information technology experience to include:

• Top Secret (TS) / Sensitive Compartmented Information (SCI) security clearance

• DoD 8570.1-M certified at Information Assurance Technical (IAT) Level 3 - Anyone (1) of the following:

o CompTIA Advanced Security Practitioner Continuing Education (CASP CE) o Cisco Certified Network Professional-Security (CCNP-Security) o Certified Information Systems Auditor (CISA)

o Certified Information Systems Security Professional (CISSP) (or Associate - this means the individual has qualified for the certification except for the number of years’ experience)

o Global Information Assurance Certification (GIAC) Certified Enterprise Defender

(GCED) o GIAC Certified Incident Handler (GCIH) o Certified Cloud Security Professional (CCSP) Have 2-3 years of experience and the skills required to execute Federal, National, DoD, USAF CIO, and US State Department Requirements to be able to assess cyber risk, identify mission sets, and defend the mission

• Have 2-3 years of experience of applying, assessing, and advising MAJCOM staff and Wings on cybersecurity requirements

• Understand the AF Cyber architecture and PACAF MOBs and GSUs roles.

• Ability to travel to PACAF MOBs and GSUs to conduct duties and responsibilities at a minimum up to 40% of the time

• Proficiency in Microsoft Office Suite products and SharePoint collaborative tools.

• Certificates of completion for the following training o Level 1 Anti-Terrorist Training - within the past year

• https://jkodirect.jten.mil/html/COI.xhtml?course_prefix=JS&course_numb er=-US007

o Level A Survival, Evasion, Resistance, and Escape (SERE) Training - within the past 1-2 years

• https://jkodirect.jten.mil/html/COI.xhtml?course_prefix=J3T&course_nu mber=A-US1329

o USFK Training - no time requirement (only required to be taken once)

• https://jkodirect.jten.mil/html/COI.xhtml?course_prefix=USFK&course_n umber=-US171

o DoD Cyber Awareness Challenge - within the past year

• https://jkodirect.jten.mil/html/COI.xhtml?course_prefix=DOD&course_nu mber=-US1364-23

o Operations Security (OPSEC) Awareness - within the past year

• https://jkodirect.jten.mil/html/COI.xhtml?course_prefix=PAC&course_nu mber=-US017

o Derivative Classification IF103.16 - within the past year

• https://www.cdse.edu/Training/eLearning/IF103 o Force Protection - within the past year

• https://lms-jets.cce.af.mil/moodle/enrol/index.php?id=12739

• Have 2-3 years of experience conducting RMF/FISMA/ATO A&A

• Have 2-3 years of experience maintaining accreditation at a level consistent with AF, DoD and FISMA requirements for all base enclaves and providing situational awareness of assigned systems at MOBs and GSUs

• Have 2-3 years of experience with DISA Connection Approval Process vehicles (e.g., SNAP, SGS, GIAP, and CDS-approval)

• Expertise with FISMA compliance vehicle – AF centralized repository for FISMA reporting is ITIPS

• Expertise with AF System A&A process vehicles (e.g., eMASS, AF PPSM, AF Software Approval) to produce ATO, ATC, Interim Authority to Connect (IATC)

• Have 2-3 years of experience of conducting assessments of SIPRNet/NIPRNet network, enclave, and system security posture providing guidance, mitigation recommendations and familiarization to personnel on cyber security to include prepare/advise pre-, post-, and during-inspections

• In-depth experience with DISA STIGs and by-product analysis

• CORA & CCORI Support Requirements

Have 2-3 years of experience of conducting CORA & CCORI inspections.

• Expertise with CORA process vehicles

• Expertise with CCORI process vehicles (e.g., MADSS, ELICSAR, etc.)

• Expertise with USCYBERCOM/DISA CORA Scoring Tools (option to utilize the AF “Cyber Ready 365”)

Location: Joint Base Pearl Harbor – Hickam, HI

Job Type: Full-time, on-site

Period of Performance: The Period of Performance is for a period of one (1) base year, plus four (4) option year periods, comprising the period 30 September 2025 to 29 September 2030.

PLEASE NOTE THAT A CONTINGENCY OFFER WILL BE MADE TO THE SUCCESSFUL CANDIDATE. UPON AWARD OF THE CONTRACT THAT MATLOCK IS BIDDING ON, WE WILL HIRE THE CANDIDATE.

Benefits: Matlock and Associates offers a variety of benefit options, including the following:

• Health insurance

• Paid time off

• Dental insurance

• 401(k)

• Vision insurance

• Tuition reimbursement

• 401(k) matching

• Referral program

• Flexible spending account

• Health savings account

• Parental leave

• Professional development assistance

About Matlock

A leader in custom software solutions, IT infrastructure, and austere environment operations, Matlock & Associates is at the nexus of mission sets critical to both the public and private sectors. Founded in 2011, it stands out as uniquely positioned to realize bespoke technological solutions that are tailor-made to meet its clients’ most pressing operational needs. Matlock’s experience in some of the world’s most challenging environments deepens its capabilities, bridging gaps between processes, technology, and infrastructure.

Job Type: Full-time

Pay: $180,000.00 - $224,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Parental leave
• Professional development assistance
• Referral program
• Tuition reimbursement
• Vision insurance

Schedule:

• 8 hour shift
• Monday to Friday

Ability to Commute:

• Joint Base Pearl Hbr Hickam, HI 96853 (Required)

Ability to Relocate:

• Joint Base Pearl Hbr Hickam, HI 96853: Relocate before starting work (Required)

Work Location: In person

Salary : $180,000 - $224,000