Cybersecurity Subject Matter Expert

Cybersecurity Subject Matter Expert

Location Remote

Job Code 26-048

# of Openings 1

At Technatomy, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customer's success. We provide solutions to agencies and entities including the Department of Veterans Affairs, Department of Defense, Defense Logistics Agency, National Institute of Health, and more. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

If this sounds like an environment where you can thrive, keep reading !

The Cybersecurity Subject Matter Expert provides expert support, research, and analysis of exceptionally complex cybersecurity problems. Serves as technical expert to the Cybersecurity Assessment Program, providing technical direction, interpretation, and alternatives to complex cybersecurity challenges. Applies advanced technical principles, theories, and concepts and contributes to the development of new methodologies and technical solutions. Works under consultative direction toward predetermined long-range goals and objectives and determines and pursues courses of action necessary to obtain desired results.

DUTIES AND RESPONSIBILITIES:

• Serve as technical expert supporting the Cybersecurity Assessment Program, providing direction, interpretation, and alternatives to complex cybersecurity issues.

• Perform CCRI assessments, vulnerability assessments, and penetration testing on networks, databases, computer applications, and IT frameworks.

• Analyze security findings and provide expert-level recommendations to address complex cybersecurity vulnerabilities.

• Recommend cybersecurity software tools and assist in development of software tool requirements and selection criteria.

• Develop and tailor product-specific Security Technical Implementation Guides (STIGs) from applicable security requirement guides.

• Apply advanced technical principles and concepts to evaluate cybersecurity controls across enterprise environments.

• Support compliance evaluation activities consistent with DoD security regulations and DISA STIG requirements.

• Provide subject matter expertise across network components, operating systems, boundary defense systems, internal defense systems, DNS services, HBSS components, wireless communications, and traditional security domains.

• Utilize SCAP and RMF knowledge to support cybersecurity evaluations and security control implementation.

• Conduct and support cybersecurity evaluations utilizing tools and platforms including VULNERATOR, wireless vulnerability assessment tools, web services platforms, database platforms (SQL Server, Oracle), email services, vulnerability scanning tools (NESSUS, SCCM), phishing assessment tools, USB detection mechanisms, and physical security assessment tools.

• Lead penetration testing efforts consistent with recognized cybersecurity standards and CCRI team lead responsibilities.

• Develop technical documentation, reports, and briefings supporting cybersecurity assessment outcomes.

• Work independently to resolve unusually complex technical problems and develop innovative cybersecurity solutions.

KNOWLEDGE AND SKILLS REQUIRED:

• Seven (7) years of IT experience.

• Five (5) years of Cybersecurity experience.

• Five (5) years of Oracle EBS R12.2 platform experience.

• Proven proficiency performing CCRI / vulnerability assessment / penetration testing on networks, databases, computer applications, and IT frameworks.

• Strong analytical and problem-solving skills for resolving security issues.

• Strong skills implementing and configuring networks and network components.

• Command Cyber Readiness Inspection (CCRI) certification in at least one approved technical area.

• Knowledge and understanding of DoD security regulations and DISA STIGs.

• Strong knowledge of SCAP.

• Strong knowledge of RMF.

• Expert experience in cybersecurity and evaluations.

• Proficiency with VULNERATOR; wireless vulnerability assessment; web services (IIS, Apache, Proxy); database platforms (SQL Server, Oracle); email services (Exchange); vulnerability scanning tools (NESSUS, SCCM); phishing exercises; USB Detect; physical security tools.

• Relevant certification from a nationally recognized technical authority.

• DISA FSO certified CCRI Team Lead and recognized penetration testing certification (LPT, CEPT, CEH, GPEN or equivalent).

• Tenable Certified NESSUS Auditor.

KNOWLEDGE AND SKILLS DESIRED:

• Experience supporting large-scale enterprise cybersecurity environments.

• Experience supporting ERP-based systems within secure infrastructures.

• Experience developing executive-level cybersecurity briefings and technical reports.

EDUCATION:

• Bachelor's degree in Computer Science , Information Technology, Business, or related field (or equivalent experience).

CLEARANCE:

• Must possess a DoD Secret Clearance and be eligible for IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) upon assignment.

WORK LOCATION:

• Remote

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. This position requires U.S. citizenship or Greencard . This position is contingent upon contract award.

Technatomy Corporation is an Equal Opportunity Employer. It is the policy of Technatomy Corporation to afford equal employment opportunity regardless of race, color, religion, national origin, sex, age, marital status, disability or veteran status, or any other status protected by applicable law.