Cybersecurity SME

Location: This is a US-based remote position, with candidates in the Tampa Bay area preferred.

• Tampa-based employees may have the possibility of transitioning to a hybrid schedule in the future, requiring periodic onsite presence at our Tampa, FL location. 

Employment Type: Full-Time Core business hours with on-call availability
Security Clearance: minimum T3 required

Job Summary 

We are seeking an experienced Cybersecurity professional to oversee all information assurance and cybersecurity compliance activities for a federal government IT program. You will manage DoD RMF authorization packages, direct vulnerability remediation, serve as the S-ISSO for enterprise systems, and lead a team of security professionals ensuring the continuous security posture of a mission-critical environment.

Key Responsibilities 

●    Perform all cybersecurity operations and RMF compliance activities for a federal enterprise IT environment

●    Manage DoD RMF ATO packages using eMASS across the full system authorization lifecycle

●    Direct vulnerability management including IAVM patching, ACAS/STIG scanning, and POA&M management

●    Develop and implement patch management and remediation plans meeting DoD timelines

●    Support cybersecurity audits, penetration tests, red team exercises, and incident response

●    Provide annual Privacy Impact Assessments and ongoing privacy compliance support

●    Ensure cybersecurity workforce meets DoD 8140 qualification requirements

●    Collaborate with CSSP, government ISSM, and DMDC Cybersecurity Division on all IA activities

Required Qualifications 

•  U.S. Citizenship required
• Security Clearance: minimum T3 required
• Bachelor's degree in a related field or CISSP certification
• Minimum 7 years of federal cybersecurity or IA experience with 2+ years in a lead/ISSO role
• Solid knowledge of NIST SP 800-53, RMF, and DoD security compliance requirements
• Hands-on eMASS experience for ATO package development and management
• Experience with ACAS, SCC/SCAP, and STIG implementation

Preferred Qualifications 

●    CISSP, CASP+, or CEH certification

●    Cloud security certification (AWS, Azure, Red Hat OpenStack, or equivalent)

●    Experience with cloud infrastructure security at DoD IL4/IL5

●    Knowledge of privacy compliance frameworks including Privacy Act and PIAs

Certifications

●    CISSP or equivalent required or qualifying degree

●    DoD 8570/8140 baseline certification required

●    Cloud platform certification required