Electrosoft Services, Inc. is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, enterprise IT modernization, and software solutions. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.
Cybersecurity Assessment & Authorization SME
Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
Key Responsibilities
Assessment & Authorization (A&A): Perform or advise on the RMF process for authorizing DoD information systems, including preparing and reviewing authorization packages
Security Control Evaluation: Apply NIST 800-53 controls to assess compliance in large-scale IT infrastructures with multiple enclaves, AIS applications, and outsourced IT
Vulnerability Analysis: Identify, assess, and determine the severity of vulnerabilities (e.g., non-compliant controls) and their impact on system authorization status
POA&M Management: Develop, track, and update Plan of Action and Milestone Plans (POA&Ms) for remediation of control deficiencies
Stakeholder Briefings: Present RMF progress, risk posture, and authorization status to senior management and technical teams
Policy & Process Support: Ensure cybersecurity documentation, procedures, and processes align with DoD policies and enterprise standards
Collaboration: Work with system owners, cybersecurity teams, and government representatives to resolve security findings and apply STIGs
Emerging Tech Expertise: Support cybersecurity for cloud environments, Industrial Control Systems (ICS), Warehouse Execution Systems (WES), and Operational Technology (OT)
Typical Daily Tasks
Run and analyze system/software scans for vulnerabilities.
Coordinate with Information System Security Managers (ISSMs) on vulnerability management.
Support Agile release processes with embedded testers.
Review and move issues through the authorization process.
Generate audit-ready reports on compliance, risk, and remediation status
Basic Qualifications
Five (5) years of relevant Risk Management Framework (RMF) and NIST A&A experience
DOD cybersecurity experience
Must have IA Level III Certification to meet 8140 compliance
Must have a SECRECT Clearance and be able to obtain or currently possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3)
Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
Experienced in the general tenets supporting the overall DOD implementation of its
authorization process, to include supporting cybersecurity policy, procedures, and processes.
Knowledgeable in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures.
Undergraduate Degree Preferred.
Pay Range
$120,000—$125,000 USD
Electrosoft is an Equal Opportunity Employer/Veterans/Disabled