Cybersecurity Assessment and Authorization Subject Matter Expert – SME

Beshenich Muir & Associates

Cybersecurity Subject Matter Expert (SME) for DoD supporting Assessment and Authorization activities. Evaluating cybersecurity risks, ensuring compliance, and providing technical expertise.

Posted 6/30/2026full-timeRemote • Virginia • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Serves as a Cybersecurity Subject Matter Expert (SME) for Assessment and Authorization (A&A) activities supporting DoD information systems
Performs cybersecurity activities required to authorize information systems in accordance with the Risk Management Framework (RMF)
Provides technical expertise for information systems undergoing the authorization process
Applies National Institute of Standards and Technology (NIST) Special Publication 800-53 security controls during the assessment and authorization process
Evaluates cybersecurity requirements across complex enterprise IT environments, including enclaves, applications, and outsourced IT services
Identifies security control deficiencies and determines the appropriate severity of vulnerabilities
Assesses the impact of identified vulnerabilities on an information system's current or future authorization
Develops recommendations to address cybersecurity risks and improve system compliance
Briefs senior management on the status, progress, and results of RMF and authorization activities
Ensures compliance with applicable DoD cybersecurity policies, procedures, and security standards

Requirements

What you’ll need

Five (5) years of relevant Risk Management Framework (RMF) and NIST Assessment and Authorization (A&A) experience
Department of Defense (DoD) cybersecurity experience
Experience assessing security controls and conducting authorization reviews for large, complex organizations
Experience supporting the Department of Defense (DoD) authorization process, including cybersecurity policies, procedures, and processes
Knowledge of cybersecurity principles related to emerging technologies, including cloud computing, Industrial Control Systems (ICS), warehouse execution systems, and Operational Technology (OT) infrastructures
Must possess an IT-II Non-Critical Sensitive designation or Tier 3 (T3) background investigation at the time of proposal submission.

Benefits

Comp & perks

Multiple healthcare coverage options including low deductible, high deductible, and HSA plans
Dental insurance
Vision insurance
Accident & illness insurance
Short- and long-term disability insurance
401(k) plan with industry leading 6% match including potential profit sharing
Employee Stock Ownership Plan (ESOP)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Assessment and Authorization (A&A)Cybersecurity Risk AssessmentSecurity Control EvaluationVulnerability AssessmentCompliance Management

Soft Skills

Technical ExpertiseCommunication SkillsBriefing Senior Management

Certifications

IT-II Non-Critical Sensitive DesignationTier 3 (T3) Background Investigation