Cybersecurity Specialist (Subject Matter Expert / SME)

SMS is seeking a Cybersecurity Specialist (SME) to provide high-level technical authority and critical advisory and assistance services (A&AS) in support of the Defense Threat Reduction Agency (DTRA). Operating within a fast-paced national security framework, the SME leads the development of agency-level cybersecurity policies, remediation plans, and countermeasures designed to protect sensitive and classified weapon systems, enterprise architectures, and foreign partner information systems from emerging global threats. This role acts as a primary technical advisor to system owners, authorizing officials, and senior agency executives to optimize compliance, perform vulnerability mitigations, and ensure continuous operational readiness.

Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com .

Submit your resume today!

Job Responsibilities

• Policy & Strategy Development: Author and refine agency-level cybersecurity policies, standard operating procedures (SOPs), and governance frameworks aligned with Department of Defense (DoD), National Institute of Standards and Technology (NIST), and federal standards.
• Risk Management Framework (RMF): Lead the execution of comprehensive RMF cycles to support Assessment and Authorization (A&A) activities, working directly to secure and maintain critical Authorizations to Operate (ATO) without operational lapses.
• Vulnerability & Compliance Auditing: Evaluate Security Technical Implementation Guide (STIG) scans, validate manual STIG checklists, analyze ACAS/Nessus vulnerability output, and engineer robust mitigation approaches.
• Lifecycle Security Engineering: Collaborate with system engineers and application developers to incorporate advanced security controls, cloud-native architecture principles, and defensive countermeasures into software and infrastructure baselines from inception.
• POA&M Governance: Oversee the structural tracking, generation, and formal closure of Plans of Action and Milestones (POA&Ms) across designated software segments and technical mission components.
• Incident Response Oversight: Coordinate technical tracking, situational awareness reports, and after-action remediation paths following detected network vulnerabilities or intrusion events.
• Stakeholder Engagement: Facilitate strategic technical exchange meetings, translate highly complex technical vulnerabilities into executive-level risk determinations, and interface with federal agency officials and international technical teams.

Required Qualifications

• DoD Baseline Certification: DoD 8140 / 8570 IAT Level III or IAM Level III baselines (e.g., CISSP, CISM, GSLC, or equivalent)
• Must possess an active Top Secret clearance with SCI eligibility.
• Core Technical Experience: 8-10+ years of dedicated cyber security or information assurance experience directly supporting Department of Defense or defense contractor environments.
• Framework Mastery: Deep, demonstrable expertise working with NIST SP 800-53 security controls, FISMA requirements, and the complete RMF lifecycle.
• Tool & Process Proficiency: Hands-on experience managing remediation tokens within eMASS, ACAS, or automated SCAP compliance engines.
• Communication Metrics: Superior technical writing skills with direct experience compiling System Security Plans (SSP), Security Assessment Reports (SAR), and risk acceptance packages for senior government sign-off.

Education and Experience Requirements

• Bachelor's Degree in Computer Science, Cybersecurity, Information Systems, or a related technology field paired with a minimum of 8 years of specialized engineering experience.
• Master's Degree in a complementary technical discipline paired with a minimum of 6 years of high-level cyber operational or policy experience.
• Equivalency Substitution: In lieu of a formal degree, 12+ years of specialized cybersecurity experience managing RMF pathways and advanced technical architecture within the defense sector may be considered.

Salary : $170,000-189,000

SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.