Cybersecurity Specialist

SMS Data Products Group • Remote (Fort Belvoir, Virginia, United States) • 3w ago

Overview

SMS is seeking a Cybersecurity Subject Matter Expert (SME) and advisor to the Army’s Enterprise Cloud Modernization Agency (ECMA). This postition supports security control assessment and remediation, provides cyber system architecture and engineering expertise and operational support, technical advice, develops and reviews cyber security policy and threat models and supports expanding CSSP offerings and C5ISR efforts. The role may lead small teams and will provide mentoring and guidance to Cyber teammates.

As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity.

SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 45 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Submit your resume today!

Responsibilities

Providing expertise in selecting relevant technical solutions to ensure data is secure within all cloud service models. In this role, the Candidate provide expertise in selection and deployment of a Security Information and Event Management (SIEM) system that is user-friendly and relevant to mission-sets across the Army.
Supporting data security throughout the life-cycle in cloud environments (Create, Store, Use, Share, Archive and Delete)
Providing support to streamline inheritable controls from the Cloud Service provider down to Application owners
Providing recommendations to processes and procedures to further automate validation checks of STIGs, vulnerability detection, and static code analysis
Supporting business continuity activities to include continuity planning, conducting business impact assessments, creating systems and processes of prevention and recovery to deal with potential threats to the Army
Enabling on-going operations before and during service interruptions or actual execution of a disaster recovery operations
Creating spillage processes, ultimately enabling Army customers to immediately remediate.
Supporting the Risk Management Framework Cloud (RMFc) process and assisting with developing RMFc documentation for customers and application owners across all Cloud service models and shared services
Reviewing and making recommendations of customer RMFc documentation as required and assisting the authorizing official (AO) with the certification of all Army cloud instantiations
Using eMASS and the Security Control Assessment functions of eMASS.
Develop and ensure that plans of actions and milestones (POA&M) are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
Leading small project/task teams, providing taskings to team members, monitoring progress, reviewing work product, and guiding team efforts

Qualifications

Minimum Requirements

Must have expert knowledge of the SRG, IL’s
Direct and relevant experience in the above areas
Strong working knowledge of large, complex IT environments
Experience implementing solutions and services in a similar sized organization
Expert ability to communicate effectively in both oral and written forms with all levels of staff
5 or more years professional experience in a related field
Three or more years of experience in Army, DoD, or IC at the Headquarters, Department of the Army, or major command level (e.g. ARCYBER, NETCOM, 7^th Signal Command, Program Executive Office, etc.) or in industry implementing similar solutions
Experience in leading small teams
Currently possess, and retain, an active DoD TOP SECRET clearance
Must possess a minimum of a CompTIA Security+ CE

Preferred Requirements

Bachelor’s degree in a technical field (e.g. Cybersecurity, Computer Science, Cloud, or other IT degree)
CISM and CISSP preferred
Cloud certification (AWS, Microsoft, Google, etc.)
Project Management experience, Project Management Professional (PMP) certification