Cyber Security SME

This is a fully remote position, open to applicants in United States.

📋 Description

• Offer expert cybersecurity advice across enterprise systems, cloud infrastructures, applications, networks, and mission-critical platforms.

• Spearhead the creation and execution of cutting-edge cyber defense strategies that enhance detection, prevention, response, and recovery capabilities.

• Evaluate the current cybersecurity defense posture and suggest practical, scalable enhancements that align with mission, business, and regulatory requirements.

• Design and assist in the implementation of layered defense frameworks, encompassing Zero Trust, endpoint protection, identity-based security, network segmentation, encryption, threat monitoring, and secure cloud controls.

• Assess emerging cybersecurity technologies, tools, and methodologies to evaluate their relevance, maturity, risk, and operational benefits.

• Aid in the development of cybersecurity roadmaps, implementation strategies, maturity models, and modernization plans.

• Counsel leadership on cyber risks, threat trends, security vulnerabilities, mitigation approaches, and investment priorities.

• Collaborate with technical teams, program managers, architects, engineers, system owners, and business stakeholders to incorporate security into planning, development, operations, and maintenance activities.

• Assist with security evaluations, risk assessments, authorization processes, audits, and compliance reviews.

• Provide expertise in federal cybersecurity frameworks and standards, including NIST, RMF, FISMA, FedRAMP, CMMC, CIS Controls, and Zero Trust guidelines.

• Suggest automation, analytics, artificial intelligence, machine learning, and security orchestration methods to enhance cyber defense effectiveness.

• Support incident response preparation, tabletop exercises, root cause analyses, and lessons-learned sessions.

• Create cybersecurity policies, procedures, playbooks, technical guidance, briefings, and materials for executive decision-making.

• Mentor junior and mid-level cybersecurity personnel and encourage knowledge sharing among technical teams.

• Identify opportunities to mitigate risk, enhance efficiency, bolster resilience, and elevate the organization's cyber maturity.

• This role may include additional responsibilities as assigned. The tasks mentioned above are representative and not exhaustive.

⛳️ Requirements

• Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.

• Over 10 years of cybersecurity experience, particularly in supporting enterprise-level security initiatives.

• Proven experience advising senior leaders, program managers, and technical teams on cybersecurity risks and defense methodologies.

• Strong understanding of cybersecurity architecture, security engineering, vulnerability management, incident response, identity and access management, cloud security, and continuous monitoring.

• Experience in implementing or advising on cybersecurity frameworks such as NIST 800-53, NIST 800-37, NIST 800-207, FISMA, FedRAMP, CMMC, CIS Controls, or ISO 27001.

• Proven experience in developing cybersecurity strategies, roadmaps, risk assessments, policies, procedures, and executive presentations.

• Familiarity with tools like Splunk, Microsoft Sentinel, Tenable, Qualys, CrowdStrike, Palo Alto, ServiceNow GRC/IRM, Security Hub, Azure Security Center/Microsoft Defender for Cloud, or similar platforms.

• Ability to assess technical risks and articulate their implications for business or mission objectives.

• Excellent written and verbal communication skills.

• Capacity to collaborate across various teams and influence decision-making without direct authority.

• Must possess and maintain at least one of the following certifications: CISSP, GIAC Certified Detection Analyst, GIAC Certified Forensic Analyst, GIAC Certified Intrusion Analyst, GIAC Network Forensic Analyst, GIAC Penetration Tester (GPEN), GIAC Reverse Engineering Malware (GREM), GIAC Security Expert (GSE), or ISC2 Certified Information System Security.

🏝️ Benefits

• Medical

• Dental

• Vision

• Voluntary Life Insurance

• 401(k)

• Basic Life A&D

• STD

• LTD

• PTO

• Telehealth

• Paid holidays

• FSA

• HSA

• Employee Assistance Program (EAP)

• Traveling Assistance