Cybersecurity SME (5753) (TS/SCI) (Ft. Belvoir, VA)

About the role

SMX is seeking a Cybersecurity Subject Matter Expert to support at Ft. Belvoir as a trusted advisor to senior leadership, providing expert guidance on information assurance and cybersecurity. This is a full-time onsite position in Ft. Belvoir, VA. Application deadline: November 30, 2026.

Responsibilities

• Perform the duties of an Information System Security Officer (ISSO) as defined in AR 25-2, DA 25-2-14, and the NIST SP 800-53 security controls when organizationally defined personnel include the ISSO.
• Actively manage the organization’s Risk Management Framework (RMF) processes including: validating security controls and associated artifacts; assessing security scan results and STIGs; performing POA&M updates, tracking, and resolution; leading continuous monitoring activities.
• Manage the day-to-day activities and professional development of the Cybersecurity Analysts.
• Collaborate with the O-ISSM on all assessment and authorization activities to ensure information systems maintain an Authority to Operate (ATO) on all applicable DoD/IC networks.
• Maintain up-to-date status on all assigned systems and communicate status to Government leads.
• Maintain complete records of communications, submit written status reports as required, perform peer-review as directed, and attend weekly meetings.
• Correspond with the Government customer and system administrators to communicate unacceptable risks and correct deficient POA&M items to meet DoD and IC standards.
• Coordinate with the Security Control Assessor (SCA) to analyze overall risk level the system poses to enterprise networks and mission data.
• Create and maintain cybersecurity policies and standards.
• Ensure cybersecurity plans, controls, processes, standards, policies, and procedures align with cybersecurity standards.
• Ensure security scans and STIG checklists are updated according to DA G2 policy.
• Produce actionable, risk-based reports on security assessment results.
• Assist with vulnerability remediation when necessary.
• Develop and maintain security plans and security testing plans.
• Periodically update and improve risk models, metrics, reports, processes, and activities to stay compliant with evolving DoD and IC standards.
• Ensure the user community understands and adheres to necessary procedures to maintain security posture of the information systems.
• Provide guidance in the creation and maintenance of Standard Operating Procedures (SOPs), Tactics, Techniques, and Procedures (TTPs), and other similar documentation.

Requirements

• Bachelor’s degree in Science, Technology, Engineering, or Mathematics with at least 5 years’ experience as a cybersecurity professional.
• Active TS security clearance and eligible for SCI and NATO read-on prior to starting work.
• Meet DoD requirements for a privileged user on a TS/SCI information system prior to starting work – DoD 8140 / 8570.01-M requirements (IAT Level II).
• 7 years’ experience with assessment and accreditation activities of national security systems (NSSs).
• 5 years’ experience validating system security controls.
• 5 years’ experience with vulnerability management.
• 4 years’ experience with DISA Security Technical Implementation Guides (STIGs), DISA Security Requirements Guide (SRG), and vendor-specific security guides.
• 4 years’ experience with RMF and eMASS.
• 2 years’ experience with POA&M tracking and resolution.
• 1 year’s experience performing continuous monitoring of system security controls.

Qualifications

• 5 years’ experience as an ISSO on Army Intel programs.
• 1 year’s experience with AC2SP tenant assessment and accreditation activities.

Pay

The proposed salary for this position is $135,000 – $165,000 USD.

Benefits

• Health insurance
• Paid leave
• Retirement

Schedule

Full-time, onsite at Ft. Belvoir, VA.