Enterprise Cybersecurity SME

Position Summary

Odyssey has an exciting new opportunity for an Enterprise Cybersecurity SME to join the team!

 

In this role you will establish enterprise-level cyber security Subject Matter Expert (SME) capability to the SW&SS Directorate program offices at Peterson SFB, CO.  The primary focus of the enterprise-level cyber security requirement is, in concert with the Government Staff Level Cybersecurity, develop and implement clearly defined and consistent cyber security processes across the Directorate portfolio.  In addition, the enterprise-level cyber security SME is required to advise and provide recommendations to the Government, as well as implement direction and guidance of the government.  Support will also include, but is not limited to, full integration of cyber security into all phases of acquisition, upgrade, and modification programs, including design, development, testing, fielding, operation, sustainment, DoD Cybersecurity Authorization Processes, and providing oversight with the Directorate RMF compliance.   

 

The cybersecurity SME encompasses the full range of cyber security and information security processes, procedures, and functions, to include reviewing data, maintaining/implementing and compliance notification of required IAVAs, NOTAMs and cybersecurity posture for systems.  SME support includes advising division leadership on architecture mitigations to limit risk posture within the systems, and represent the risk posture in briefings and slides to DoW Chief Information Officer, Headquarters USSF and USSTRATCOM; utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance with RMF and emergent Cybersecurity Framework (CSF) requirements and to interpret requirements as necessary to ensure system compliance or provide operational justification for exceptions when deemed necessary.

 

This is a full-time position in Colorado Springs, CO working on-site at Peterson Space Force Base (SFB).

Responsibilities

Duties include, but not limited to: 

• Deliver cybersecurity services that are certified in accordance with DoDI 8140.03 and AFMAN 17-1303 standards.
• Implement the latest applicable version of NIST SP 800-53, Risk Management Framework as incorporated and directed in DoW and Air Force/Space Force cybersecurity policy, specifically DoDI 8500.01, Cybersecurity, DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology, and AFI 17-101, Risk Management Framework (RMF) For Air Force Information Technology (IT).
• Develop a focused approach in the continual improvement of processes and procedures to manage the RMF packages in Enterprise Mission Assurance Support Service (eMASS), Xacta and SGN/CORE (as needed), controls and Plan of Action and Milestones (POA&Ms).
• Work on IKE, and perform Audits derived from USSTRATCOM and the S6/J6/ DAG.
• Review Authorization Decision Documents (ADD), and Security Plans (SP).
• Review Cybersecurity documentation to ensure they satisfy Security Design/Security Test & Evaluation (ST&E) Requirements for RMF Control identification, to include building implementation plans and validation plans, and assist with the entry and review of entered information to the Information Technology Investment Portfolio Suite (ITIPS)
• Assist with the preparation and review of Federal Information Security Modernization Act documentation.
• Analyze and verify all package recommended artifacts to include ACAS Scan results.
• Be able to complete reviews of deliverables and annotate on the CRMs’ any ongoing requirements or approve pending further comments from the contractor.
• Provide Cybersecurity risk assessments, self, and evaluation from sustainment’s and Test squadrons. (CRAs).

Qualifications

Minimum Required Qualifications

Citizenship: Must be a US citizen.

Clearance: Must have Active Secret Clearance and be able to obtain and maintain a Top Secret clearance.

Education: Bachelor's Degree.

Certifications: IAT Level II or equivalent and ability to obtain IAM Level III.

Years of Experience: A minimum of 25 years of directly related experience, to include 15 years of DoD experience relevant to cybersecurity OR, 

• Master's degree in a relevant field with 20 or more years of experience in the respective technical/professional discipline being performed, to include 12 years of DoD experience.

Additional Experience:

 

• Demonstrated experience building, managing, and successfully navigating Enterprise Mission Assurance Suppo