Cybersecurity Subject Matter Expert (SME)

Location: Hybrid in Washington, DC and Alexandria, VA, United States. Routine telework is authorized, but on-site presence is required for classified SECRET work, SIPRNet access, meetings, events, training, and personnel on/offboarding. Work is performed Monday through Friday within a 0600–1800 window, including all core hours. Occasional CONUS travel, including Alaska, Hawaii, U.S. Territories, other DoD facilities, and client locations, may be required.

Salary: $135,000–$195,000 per year.

Company

hirify.global is a government technology solutions provider delivering mission-enabling technology and strategic solutions to national security and national resilience customers, including DHS, DoD agencies, and civilian federal agencies.

What you will do

• Serve as the designated Information System Security Engineer for information systems, operational technology, and hybrid cyber-physical platforms.
• Lead the full NIST SP 800-37 RMF lifecycle from categorization through continuous monitoring and decommissioning.
• Develop and manage eMASS authorization packages, including SSPs, SCTMs, POA&Ms, Security Assessment Reports, contingency and incident response plans, risk assessments, system inventories, network topology, boundary, and data flow diagrams.
• Perform Security Readiness Reviews, analyze ACAS/Nessus results, coordinate remediation and DISA tickets, and manage false positives and POA&Ms.
• Maintain continuous monitoring and compliance with DoD, DHS, USCG, and DISA STIG requirements; support cATO, automated evidence collection, dashboards, change management, acquisition milestones, and security impact assessments.
• Advise Government leadership, evaluate threats and supply-chain risks, develop mitigation strategies, produce readiness metrics and executive briefings, and provide technical leadership and mentorship.

Requirements

• At least 8 years of related, progressive cybersecurity experience in a technical field.
• Active CISSP-ISSAP or CISSP-ISSEP certification qualifying under DoD 8140/8570; the certification must be current before performance begins, and waivers are not granted.
• Active final SECRET personnel security clearance with a Tier 3 / SF-86 investigation, eligibility to maintain the clearance for the task order, and execution of an SF-312 Classified Information Non-Disclosure Agreement.
• U.S. citizenship, a favorably adjudicated background investigation, FBI fingerprint check, and ability to obtain and maintain a DoD Common Access Card.
• Recognized cybersecurity expertise and technical leadership, with exceptional oral and written communication skills and the ability to interface with all levels of Government management.
• Demonstrated experience implementing RMF, including system categorization, control selection, implementation, assessment, and continuous monitoring.
• Knowledge of risk management processes; national and international cybersecurity laws, regulations, policies, and ethics; cybersecurity principles; cyber threats and vulnerabilities; networking concepts, protocols, and security methodologies; and the operational impacts of cybersecurity lapses.
• Bachelor’s degree from an accredited institution in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, or another related technical discipline. Experience cannot substitute for the education requirement.

Nice to have

• Experience with USCG/DoD security tools, including eMASS, ACAS/Nessus/Security Center, Elastic SIEM, HBSS, Tanium, Splunk, ServiceNow, and Burp Suite.
• Experience with OT/ICS/SCADA security, shipboard or aviation platform systems, and the DoD “Assess Only” process.
• Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF practices, and DevSecOps pipelines.
• Prior USCG, DHS, or DoD RMF support experience.

Culture & Benefits

• 15 days of PTO, including paid parental, military, and bereavement leave.
• Eleven paid Federal holidays, including five floating holidays.
• Health and dental insurance, with 100% employer-paid employee premiums under the HDHP health plan.
• Life insurance, short- and long-term disability coverage, and FSA/DFSA/HSA plans with employer-paid premiums where specified.
• 401(k) plan with a match that becomes 100% vested after two years, plus annual tuition and professional development reimbursement.
• Culture centered on innovation, collaboration, continuous learning, mentorship, accountability, and meaningful government technology work.