Senior Cyber Subject Matter Expert (Cyber SME)

About the role

Leidos is seeking a Senior Cyber Subject Matter Expert (Cyber SME) to provide expertise and experience in cybersecurity threat analysis and provide guidance on cybersecurity best practices, policy review and development, and mitigation through training and exercises for CISA’s National Cyber Exercise Program (NCEP).

This role works with the Program Management team to support the customer in identifying cyber threats, reviewing national cybersecurity policy trends, and developing or refining ideas and customer needs.

This role also supports building and refining exercise design and development aspects throughout the exercise lifecycle, as well as facilitating or moderating discussion-based cyber exercises.

Responsibilities

• Work with the management team to support the customer’s needs for cyber policy review and development, identifying hot button issues and trends in cyber threats, and guiding informed recommendations for cyber training and exercises based on expertise and experience.
• Provide cyber subject matter expertise in exercise design and development, conduct, and evaluation.
• Review cyber threats, plans, policies, and procedures to guide appropriate exercise development.
• Review and refine ideas, exercise materials, and exercise foundation (i.e., scope, objectives, scenario, player actions, discussion questions, evaluation criteria, etc.).
• Communicate and coordinate regularly with CISA, exercise stakeholders, Program Management, Regional Exercise Leads, and across exercise support team to ensure planning timelines and resources are maintained.
• Attend or support exercise conduct as assigned and serve as expert Facilitator as necessary.
• Support development of new CISA Tabletop Exercise Packages (CTEPs) and maintenance of the CTEP scenario library.
• Provide SME input to internal training activities to improve facilitation and planning skills across NCEP staff.

Requirements

• Active TS/SCI clearance.
• Ability to obtain DHS EOD.
• 15+ years experience in cybersecurity work.
• Demonstrated relevant operational and technical experience in designing and implementing cyber policies, guidelines, standard operating procedures, and training programs to achieve national goals.
• Experience in cybersecurity training and exercises.
• Strong understanding and familiarity with national cyber policies, guidelines, and doctrine.
• Strong analytical and critical thinking skills and creativity in supporting development of exercise materials such as realistic and challenging scenarios.
• Demonstrated ability to lead high-level meetings, exercise facilitation, and give customer-facing presentations.
• Demonstrated ability to manage time, meet deadlines and milestones, and work closely across a team.
• Ability to meet DHS suitability and the clearance requirement applicable to the assigned role (TS/SCI for designated personnel; otherwise Public Trust fitness type), as described in the SOW.

Qualifications

• CISSP, CISM, Security+, CySA+, GCIH, GCIA, GSECHSEEP or exercise certifications.
• Experience supporting cybersecurity-focused scenarios and stakeholder engagement across government and private sector partners.
• Experience contributing to strategic plan maintenance and innovation projects in support of leadership requests.