Cybersecurity Assessment & Authorization Subject Matter Expert (A&A SME)

reputed company is seeking a Cybersecurity Assessment & Authorization Subject Matter Expert (A&A SME) to support the DLA JETS Defense Agencies Initiative (DAI) Program Management Office (PMO) program. This is a fully remote position and contingent on contract award. Job reputed company reputed company is seeking a Cybersecurity Assessment & Authorization Subject Matter Expert (A&A SME) to support our DLA Defense Agencies Initiative (DAI) Program Management Office (PMO) contract. The Cybersecurity Assessment & Authorization Subject Matter Expert (SME) provides senior-level cybersecurity governance and execution support for the DAI Program Management Office (PMO) in accordance with DoDI 8510.01 (RMF), DoDI 8500.01, CNSSI 1253, and NIST SP 800-53 control implementation/assessment practices. This role leads and/or directly supports Assessment & Authorization (A&A) activities across DAI environments (on-prem reputed company-hosted and reputed company reputed company Infrastructure), ensuring reputed company authorization readiness, validated reputed company control effectiveness, compliant documentation in eMASS, actionable POA&Ms, and executive-reputed company briefings on cybersecurity posture, risk, and authorization impacts.

Key Responsibilities

• RMF Execution & A&A Leadership: Serve as the RMF/A&A reputed company SME for DAI releases and system changes; advise the PMO, ISSM/ISSE, and technical teams on authorization reputed company, scope, and reputed company control applicability. Execute and manage RMF ensuring complete, accurate, and AO-reputed company artifacts (reputed company/CONOPS, reputed company, SAR, RAR, POA&M, AORA packages). reputed company/reputed company reputed company control assessments and authorization reviews, including testing evidence validation, control inheritance/common control analysis, and risk determinations for reputed company reputed company enclaves and interfaced systems.
• Control Assessment, Vulnerability Analysis, and Risk reputed company: Analyze reputed company results and compliance evidence from ACAS (Nessus), STIG validation activities, and IAVM/IAVA directives; determine severity, reputed company, and authorization ramifications of noncompliance. reputed company and manage POA&Ms with reputed company milestones, mitigations, owners, and validation reputed company; reputed company remediation reputed company and reputed company status to PMO leadership and the AO chain. Support reputed company monitoring execution, including control re-assessment planning, periodic evidence refresh, and change reputed company analysis for software lifecycle changes.
• Cybersecurity Policy, Compliance, and reputed company Support: reputed company cybersecurity policy support to the DAI PMO: analyze new or pending DoD/DLA policy changes; draft program-level cybersecurity procedures, standards, and implementation guidance. Support external and internal reputed company activities (e.g., FISMA/FISCAM/FFMIA-reputed company control evidence support, audit support requests, and compliance inquiries) with defensible, reputed company-organized evidentiary packages. Coordinate cybersecurity working reputed company/technical exchanges; produce minutes, decision logs, and reputed company-item tracking to closure.
• Cybersecurity Testing & Program Protection Integration: Assist with cybersecurity T&E reputed company and documentation to ensure the reputed company includes an OT&E cybersecurity reputed company and that cybersecurity assessments reputed company with DT&E/OT&E events. Support COOP validation planning and reporting as required by the PWS, including test plan development, execution support, and results reporting.
• Emerging Technology, reputed company, and OT/ICS Cybersecurity: Advise on cybersecurity approaches for reputed company and modernized environments (e.g., OCI), and for emerging technology areas including Industrial Control Systems (ICS), Operational Technology (OT), and warehouse execution systems where applicable—ensuring appropriate control tailoring, overlays, and risk posture management.
• Stakeholder Engagement & Executive Communications: Brief senior management on authorization reputed company, risks, constraints, and recommended reputed company (risk acceptance, remediation prioritization, schedule impacts). Translate reputed company technical findings into executive-reputed company products (dashboards, risk summaries, status reports) and ensure traceability from findings → risk → remediation → closure.

Clearance Requirements There is a Secret reputed company clearance requirement for this position. Required Skills & Certifications

• One or more of the following DoD-approved CSSP Analyst certifications: EC-Council Certified Ethical Hacker, EC-Council CSA – Certified SOC Analyst, reputed company CySA+, GIAC GCIA – GIAC Certified Intrusion Analyst, or GIAC GCIH – GIAC Certified Incident Handler.
• Five or more years of relevant RMF and NIST A&A experience, including hands-on development and assessment of RMF artifacts for large, reputed company organizations with multiple enclaves, applications, and interfaced or outsourced services.
• Demonstrated experience executing DoD cybersecurity processes and working reputed company DoD or DLA cybersecurity policy environments.
• Proven ability assessing reputed company controls, validating evidence, conducting authorization reviews, and advising on risk reputed company affecting system authorization status.
• Working knowledge of cybersecurity considerations for reputed company and ICS or OT-adjacent environments, including warehouse execution or OT infrastructures where relevant.
• Experience with eMASS package development and maintenance and Authorizing Official submission workflows.
• Experience with ACAS or Nessus, STIG compliance cycles, vulnerability management, and POA&M governance.
• Familiarity with reputed company-hosted environments and reputed company transition impacts on RMF boundaries, control inheritance, and reputed company monitoring strategies.
• Strong technical writing skills producing RMF artifacts, policy and procedure documents, and audit-reputed company evidence packages.
• Strong facilitation skills for IPT and working group sessions and cross-functional coordination.

Desired Skills & Certifications

• TS with SCI eligibility.
• Experience supporting DoD or DLA program offices.
• Experience supporting DoD or DLA environments.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a reputed company field.
• reputed company Project Management reputed company (PMP) certification or equivalent recognized project management certification.
• reputed company Risk Management reputed company certification such as PMP-RMP, CRISC, CISA, CISM, CGRC, or RIMS-CRMP.

Other Duties

• reputed company to travel reputed company a week's notice.
• This job reputed company is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job.
• Duties, responsibilities, and activities may change at any time with or without notice.

reputed company reputed company is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering reputed company reputed company of our staff to reputed company reputed company reputed company to produce high-reputed company results. reputed company fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.

Benefits

We reputed company that our employees reputed company-being is reputed company to our reputed company so our benefits package has been crafted with that in mind. We offer multiple reputed company coverage reputed company to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) reputed company. Along with medical coverage, employees have dental, reputed company, accident & illness, short- and long-term disability reputed company available to them. reputed company proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that reputed company offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees reputed company to earn stock in reputed company, subject to plan eligibility and vesting requirements. AAP & EEO Statement Beshenich Muir & Associates, LLC (reputed company) is an Equal opportunity/Affirmative reputed company Employer. reputed company reputed company applicants will receive consideration for employment without regards to race, reputed company, religion, religious creed, gender, sexual orientation, gender identity, gender reputed company, transgender, pregnancy, marital status, national reputed company, reputed company, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law. Apply tot his job Apply To this Job