Senior Cyber Security Specialist

Senior Cyber Security Specialist

This role requires a Senior Cyber Security Specialist with Active TS/SCI clearance. The successful candidate will work on an open-architecture airborne node that stitches warfighter data into the DAF Battle Network.

Key Responsibilities

• Cyber Strategy & Governance: Own the PG Cybersecurity Strategy, System Security Plan (SSP), and Plan of Action & Milestones (POA&M). Align all efforts with NIST 800-53, CNSSI 1253, and Air Force Zero-Trust Reference Architecture.
• RMF & Continuous ATO: Lead the PG Risk Management Framework (RMF) process from categorization through authorization; shepherd artifacts in eMass. Stand up automated compliance scans (ACAS, SCAP, Nessus, Tanium) integrated with the DevSecOps pipeline; deliver continuous-ATO dashboards.
• Secure DevSecOps & Supply-Chain Risk: Embed S-BOM analysis, container hardening, and code-signing into Smith's 90-day software release cadence. Evaluate third-party components for supply-chain threats; drive mitigations and waivers.
• Cross-Domain & Crypto Engineering: Develop guard rulesets and data-flow enforcement for Multi-Level Security (MLS) cross-domain solutions. Coordinate Type-1 crypto key-management plans with NSA; author KOV-11 / SKL handling procedures.
• Vulnerability Management & Incident Response: Conduct penetration tests and red-team exercises on Integration SIL builds; track findings to closure. Draft and rehearse PG-specific incident-response/hunt-forward playbooks for Watch operations.
• Platform & Flight-Test Support: Generate "cyber annexes" for AF Form 1067s, Safety-of-Flight packages, and Interim Authorizations to Test (IATT). Deploy secure configs on flight hardware; provide on-site cyber assurance during ground & flight events. Mentorship & Culture: Coach engineers on secure-by-design principles, STIG implementation, and zero-trust concepts. Foster a DevSecOps, fail-fast mindset inside classified environments.