Cybersecurity SME Lead

The Cybersecurity Subject Matter Expert (SME) serves as the technical expert on our Cybersecurity Assessment Program, providing direction and solutions on complex cybersecurity assessment and compliance challenges. This role works independently under broad guidance, shaping assessment strategy and driving innovative solutions to unusually complex technical problems — including recommending tools, building product-specific STIGs from DISA SRGs, and guiding new methodologies from concept to execution.

Required Clearance:
- Active DoD SECRET, IT-II Non-Critical Sensitive / Tier 3 (T3)

Required Experience:
- 7+ years IT experience
- 5+ years Cybersecurity experience
- Proven experience with CCRI, vulnerability assessment, and penetration testing across networks, databases, applications, and IT frameworks

Required Certifications:
- CCRI certification (candidate must possess one of the following): Retina scan analysis, Operating Systems (Windows/Unix), Boundary Defense, Internal Defense (L2/L3 switch), DNS, HBSS, Traditional Security, or Wireless Communications
- Penetration testing certification (candidate must possess one of the following): LPT, CEPT, CEH, or GPEN
- DISA FSO Certified CCRI Team Lead
- Tenable Certified NESSUS Auditor

Technical Knowledge:
- DoD security regulations and DISA STIGs
- SCAP and RMF
- VULNERATOR, USCYBERCOM CTO Compliance Program
- Web services (IIS, Apache, Proxy), databases (SQL Server, Oracle), email (Exchange)
- Vulnerability scanning tools (NESSUS, SCCM)
- Wireless vulnerability assessment, phishing exercises, USB detection, physical security

Skills:
- Strong analytical and problem-solving ability for complex security issues
- Strong network implementation/configuration skills
- Exceptional written and verbal communication