Cybersecurity Subject Matter Expert (SME) at Bart & Associates LLC

Fort Belvoir, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

10 Jul, 26

Salary

0.0

Posted On

11 Apr, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management Framework, NIST, DoD A&A, STIGs, IAVMs, Cybersecurity compliance, System documentation, Vulnerability analysis, Microsoft Excel, Power BI, Technical leadership, Security control assessment, Cloud security, ICS security, OT security, Audit reporting

Industry

IT Services and IT Consulting

Description

Description Cybersecurity Subject Matter Expert (SME) At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow. Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value – not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We’d love for you to join our team! Job Summary B&A is seeking a Cybersecurity Subject Matter Expert (SME) to provide advanced technical leadership and strategic direction for complex cybersecurity initiatives within the DoD environment. This role focuses on leading Risk Management Framework (RMF) activities, developing high-quality cybersecurity artifacts, and guiding teams through compliance, inspection readiness, and authorization processes. The SME applies deep expertise to solve complex problems, develop innovative solutions, and support enterprise-level cybersecurity programs. Responsibilities Provide expert technical direction and leadership for cybersecurity initiatives and teams Lead and mentor personnel to ensure high-quality cybersecurity deliverables and compliance Oversee development, validation, and maintenance of RMF artifacts and documentation Conduct security control assessments and authorization reviews for complex systems Prepare enterprise environments for DoD cybersecurity inspections (CCRI, CORA, Blue Team) Interpret and implement DoD cybersecurity policies, requirements, and guidance Develop key system documentation (SSP, CONOPS, IR Plan, Contingency Plan, CMP, etc.) Manage end-to-end POA&M lifecycle, including tracking and remediation closure Recommend cybersecurity tools and support development of tool requirements and selection criteria Assist in development of STIGs based on DISA SRGs Generate audit-ready cybersecurity reports, analytics, and trend analysis Analyze vulnerability and compliance data to support leadership decision-making Support cybersecurity strategy across IT, Cloud, ICS, and OT environments Solve complex cybersecurity challenges with innovative and scalable solutions Education and Experience Minimum of ten (10) years of IT experience Minimum of ten (10) years of DoD cybersecurity experience Minimum of ten (10) years of RMF and NIST A&A experience Extensive experience supporting large, complex enterprise environments Required Skills SME-level knowledge of RMF, NIST frameworks, and DoD A&A processes Expertise in STIGs, IAVMs, TCG configuration guides, and Task Orders Strong experience developing and reviewing cybersecurity artifacts and system documentation Ability to interpret ambiguous or evolving cybersecurity guidance Experience preparing for and supporting DoD cybersecurity inspections Proficiency with Microsoft Excel, Access, Power BI, and Power Platform Strong analytical, research, and problem-solving skills Ability to generate detailed cybersecurity reports and analytics Excellent written and verbal communication skills, including briefing leadership Experience working independently and leading teams with minimal oversight Knowledge of Cloud, IT, ICS, and OT cybersecurity environments Security Clearance Active DoD Secret Clearance required Must possess IT-II Non-Critical Sensitive (Tier 3) clearance at time of proposal submission Certifications DoD 8570 IAT Level III required, which includes one of the following: CompTIA Security+ (CE), CompTIA Cybersecurity Analyst (CySA+), CompTIA SecurityX (formerly CASP+), GIAC Security Essentials Certification (GSEC), and Systems Security Certified Practitioner (SSCP). ICS300 or equivalent OT/ICS cybersecurity certification, ACAS, and Tanium certifications required Must be eligible to meet DoD 8140 requirements More About B&A: Notable Clients B&A has grown to be a company that is trusted by our clients for exceptional service, innovative solutions, and inspired employees. Our service extends through federal, state, and local Government, the private sector, and higher education. Some of our notable clients include Department of Homeland Security, U.S. Customs and Border Protection, U.S. Senate, U.S. Courts, U.S. Census Bureau, U.S. Navy, and more. Benefits and Programs B&A is proud to offer three robust individual and family medical plans to full time employees, including a Health Savings Account (HSA) option as well as two tiers of dental coverage, vision, life & AD&D, disability, accident, hospital indemnity, and critical illness insurance. In addition to these benefits, B&A employees enjoy paid time off, B&A sponsored trainings and certifications, pet insurance benefits, commuter transit benefits and a free subscription to a virtual exercise platform (NEOU). B&A’s 401(k) plan is available to all employees and includes a company matching contribution. B&A has launched several programs to focus on employee engagement, wellness, and assistance. These include: The B&A Cares program: 30/60/90-day wellness check ins, personal development, financial management, and stress management seminars, and more A formal mentorship program Job shadowing and cross training opportunities Brand Ambassador program Employee Assistance Program (EAP) - Access to various support resources to include counseling, legal guidance, financial planning, and more Monthly teambuilding events B&A Annual Wellness Challenges: #StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A, and more At B&A, we place significant importance on improving the communities and lives of citizens across the nation through our involvement, technology expertise, and employees. B&A puts an emphasis on charitable efforts in the Northern Virginia area, including Capital Area Food Bank pantry drives, book donations, Hope for Henry Foundation events, and many more. In recognition of all these efforts, B&A has been named a Companies as Responsive Employers (CARE) award recipient by Northern Virginia Family Services and nominated by the Northern Virginia Chamber of Commerce for Outstanding Corporate Citizenship Award. EEO B&A provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. B&A complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy covers conduct occurring at B&A’s offices, and other workplaces (including client sites) and all other locations where B&A is providing services, and to all work-related activities. EEO is the Law B&A participates in e-Verify. We provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee’s I-9 Form to confirm work authorization.

Responsibilities

The Cybersecurity SME will provide technical leadership for complex DoD cybersecurity initiatives, including leading Risk Management Framework (RMF) activities and compliance efforts. They will oversee the development of security artifacts, conduct control assessments, and prepare enterprise environments for DoD inspections.