Cybersecurity Subject Matter Experts

About the role

This position works directly for the Pacific Air Forces (PACAF) Defensive Cyber Operations and Mission Assurance Branch, delivering Cybersecurity and RMF/Federal Information System Management Act (FISMA) support to PACAF mission owners. The role involves distributing current policy, providing guidance, and mentorship to cyber forces to ensure compliance with congressional FISMA, DoD, and Air Force cybersecurity directives.

Responsibilities

• Assist PACAF MOBs & GSUs in improving and maintaining implementation of congressional FISMA, DoD, and AF cybersecurity directives.
• Conduct (on-site and/or virtual) Assessment & Authorization (A&A) validation and reviews using National/DoD/AF standards (e.g., DISA Security Technical Implementation Guides (STIGs), NIST SP 800-12).
• Collect and develop A&A artifacts in accordance with the Authorizing Official (AO) Office.
• Maintain and sustain A&A packages, including tracking/updating documents in the following databases:
  • Connection Approval Process (CAP) for SNAP
  • GIAP circuit management tools
  • eMASS and ITIPS
  • Continuous Monitoring Risk Scoring (CMRS) efforts
• Assist MOBs and GSUs in creating and maintaining comprehensive RMF products for theater circuits/enclaves via eMASS, including:
  • System Security Plan
  • Ports Protocol Services Matrix (enclave)
  • Artifacts for control validation (STIG results, Policies, Scans, Charters, etc.)
  • Plan of Actions and Milestones (POAMs)
  • System Topology
• Provide updates through the AF central FISMA database repository, ITIPS.
• Ensure A&A data are synchronized across AF and DISA repositories (eMASS, ITIPS, SNAP, and GIAP).
• Assist in processing circuit connection requests for main bases through SIPRNet Global Information Grid (GIG) Interconnection Approval Process (GIAP) System (SGS) and NIPRNet SNAP.
• Prepare and mentor NAF, Wing, and cybersecurity forces through the Cyber Readiness Review – Mission (CRR-M) program.
• Train and assist PACAF MOBs & GSUs personnel in using DoD security technical implementation tools and technology to maintain and improve cyber readiness.
• Consult to resolve issues with DoD-required vulnerability scanning tools, including system credentials, access control lists, and identified network assets.
• Consult to resolve issues with DoD-required endpoint security solutions for all host devices in network enclaves.
• Assist and prepare PACAF Wings for Command Cyber Readiness Inspections (CCRIs) & Command Cyber Operational Readiness Inspections (CCORIs) on NIPRNet, SIPRNet, and supported information systems.
• Create CCRI and CCORI scores and Risk Assessment Reports for MOBs & GSUs using DISA CCRI Scoring and Risk Assessment tools.
• Provide recommendations for mitigations and follow-on actions, including POAMs.

Requirements

• 2-3 years of experience executing Federal, National, DoD, USAF CIO, and US State Department requirements to assess cyber risk, identify mission sets, and defend the mission.
• 2-3 years of experience applying, assessing, and advising MAJCOM staff and Wings on cybersecurity requirements.
• DoD 8570.1-M certified at Information Assurance Technical (IAT) Level 3 with one of the following:
  • CompTIA Advanced Security Practitioner Continuing Education (CASP+ CE)
  • Cisco Certified Network Professional-Security (CCNP-Security)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP) (or Associate)
  • Global Information Assurance Certification (GIAC) Certified Enterprise Defender (GCED)
  • GIAC Certified Incident Handler (GCIH)
  • Certified Cloud Security Professional (CCSP)
• Certificates of completion for the following training (must initiate upon hire):
  • Level 1 Anti-Terrorist Training
  • Level A Survival, Evasion, Resistance, and Escape (SERE) Training
  • USFK Training (no time requirement, taken once)
  • DoD Cyber Awareness Challenge
  • Operations Security (OPSEC) Awareness
  • Derivative Classification IF103.16
  • Force Protection
• Top Secret (TS) / Sensitive Compartmented Information (SCI) security clearance.
• Ability to travel to PACAF MOBs and GSUs to conduct duties and responsibilities, up to 40% of the time.

Preferred Qualifications

• Bachelor’s degree in a related field.

Pay

The pay range for this position is $90,000.00 - $100,000.00 annually.

Benefits

• Medical, dental, and vision insurance
• 401(k) plan with company matching
• Tax-deferred savings options
• Supplementary benefits
• Paid time off
• Professional development opportunities