Cyber Security SME

Overview

SMS is seeking a Security Control Assessor-Validator (SCA-V). In this role, the Candidate shall provide senior cybersecurity assessment, audit and verification expertise, technical advice, develop and review cyber security policy and threat models and make recommendations to expand and improve cybersecurity posture efforts.

As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity.

SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 40 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Submit your resume today!

Responsibilities

The Candidate shall have knowledge of and have proven performance with the following:

• Must have expert knowledge of the SRG, IL’s, CCRI, and vulnerability assessments
• Under general supervision, performs Assess and Authorization (A&A) or other RMF and cybersecurity Compliance and Auditing processes and inspections for DoD enterprise systems and networks
• Ensures validity and accuracy review of all associated documentation
• Performs compliance reviews of computer security plans, performs risk assessments, and performs security test evaluations and audits
• Analyzes security requirements for information protection for enterprise systems and networks
• Assists in the development of security policies
• Analyzes the sensitivity of information and performs vulnerability and risk assessments on the basis of defined sensitivity and information flow
• Assess security risk, research and recommend countermeasures in accordance with Army and DoD requirements, conduct formal security engineering assessments and security assessments.
• Be an integral member of the team of cybersecurity validators to ensure that Army systems are compliant with NIST Special Publication 800-53 rev4 cybersecurity controls
• Other duties as assigned

Qualifications

Minimum Requirements

• Direct and relevant experience in the above areas
• Strong working cybersecurity knowledge of large, complex IT environments
• 5 or more years professional experience in a related field
• Three or more years of experience in Army, DoD, or IC at the Headquarters, Department of the Army, or major command level (e.g. ARCYBER, NETCOM, 7th Signal Command, Program Executive Office, etc.) or in industry implementing similar solutions
• Deep experience with eMASS, ACAS, and other tools
• Background in Army RMF Security Control Assessment
• Knowledge of DIACAP to RMF transition process
• Active Secret Clearance (or higher) required at the time of hire (U.S. CITIZENS ONLY)

Preferred Requirements

• Bachelor’s degree in a technical field (e.g. Cybersecurity, Computer Science, Cloud, or other IT degree)
• Additional cybersecurity certifications (GIAC, CISA, etc.)
• Cloud certification (AWS, Microsoft, Google, etc.)

SMS is a veteran-owned network integrator established in 1976.  With an employee retention rate averaging over 5 years, our ability to hire quality people and retain them in a rapidly evolving IT market proves why we are a world-class information technology company. At SMS, we place a high value on quality of service, customer satisfaction, and best-of-breed policies and practices. As a result, SMS is proud to be ISO 9001:2008 Registered and a CMMI Level 3 certified company, ensuring that we continue to meet and exceed the expectations of our customers, partners and employees. 

SMS is an Equal Opportunity Employer.