Cyber security SME

Description Position Summary Flatter, inc. (Flatter) is hiring a Cybersecurity Professional (ISSM, ISSO or ISSE) to support full lifecycle IT and cyber services required to operate and coordinate for the support, defense, and sustainment of ICBM enterprise IT environments across on-premises, cloud, and hybrid architectures. The Cybersecurity Professional will deliver scalable, resilient, and compliant services that maintain security, availability, and mission readiness as ICBMSD enterprise needs evolve. The Cybersecurity Professional will provide proactive and reactive support across the functional areas.

Provides cybersecurity management, operations, engineering, and assessment support across the system lifecycle. Depending on the assignment, the professional serves as an ISSM, ISSO, or ISSE and supports secure design, RMF authorization, continuous monitoring, vulnerability management, and incident preparedness. Essential Duties and Responsibilities

• Establish and maintain system-level cybersecurity programs, architectures, policies, procedures, control implementation, and risk awareness for assigned systems or enclaves.
• Apply NIST controls, least privilege, role-based access control, encryption, secure configuration, and other Government-directed security requirements.
• Prepare, submit, and maintain RMF and Assessment and Authorization evidence, including SSP, SAR, ISCP, POA&M, audit trails, and other Body of Evidence artifacts.
• Coordinate authorization activities needed to achieve and sustain ATO or IATT status throughout development, integration, testing, deployment, sustainment, and decommissioning.
• Monitor vulnerability and compliance status, implement or validate STIGs, track findings, and support applicable TCTO, MTO, TCNO, and continuous-monitoring directives.
• Develop, test, and maintain incident response and IT recovery strategies and coordinate response to cybersecurity events and unauthorized disclosures.
• For ISSM or ISSO assignments, oversee cybersecurity operations, validate secure configurations, coordinate incident reporting, and approve or recommend approval of subordinate IT products and connections.
• For ISSE assignments, capture and trace cybersecurity requirements, integrate controls into system design, support acquisition and systems engineering, and perform security test and evaluation and vulnerability assessment.

Security Compliance and Performance Expectations

• Perform work within authorized Government policies, plans, processes, tools, and environments across on-premises, cloud, and hybrid architectures.
• Protect Government systems and data at the assigned classification and impact level, and maintain the required clearance, special access, privileged-access approval, and DoD 8140/8570-aligned certification.
• Document work, decisions, risks, issues, and resolutions in Government-approved systems and support audits, quality reviews, and monthly status reporting as directed.
• Participate in Government-directed training, modernization initiatives, working groups, surge support, and continuous process improvement activities.

*This position is in support of a proposal

Requirements

Required Education and Experience:

• BS degree in Cyber Security, Information Technology, Computer Science, Electrical Engineering or related field and 15 years of experience, OR MS degree and 12 years of experience, OR PHD and 9 years of experience
• 6+ yrs of progressive responsibility in providing technical leadership
• Relevant core and advanced certifications as established/required per local, national and international industry standards or as necessitated by performance expectations associated with level of appointment
• Knowledge, skill and abilities run in conjuction with current versions of AFMAN17-1303, DoDI 8570, and stated educational requirements
• High degree of experience and knowledge in security disciplines required
• Principal skill set includes ability to perform all stated/implied duties within this tier and those reasonably derived from preceding tiers
• Certified in one or more- ISSO, ISSE or ISSM