Cybersecurity Assessment and Authorization Subject Matter Expert – SME

Beshenich Muir & Associates

Cybersecurity Subject Matter Expert (SME) for DoD supporting Assessment and Authorization activities. Evaluating cybersecurity risks, ensuring compliance, and providing technical expertise.

Posted 6/30/2026full-timeRemote • Virginia • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity Assessment and Authorization (A&A) processes, particularly within the Risk Management Framework (RMF) and compliance with NIST standards. Proficient in evaluating cybersecurity requirements and vulnerabilities in complex IT environments, with a focus on DoD policies and procedures.

Highest-signal resume keywords

Cybersecurity Subject Matter ExpertRisk Management Framework (RMF)NIST Special Publication 800-53Department of Defense (DoD) Cybersecurity ExperienceSecurity Control Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Assessment and Authorization (A&A)Cybersecurity Risk AssessmentSecurity Control EvaluationVulnerability AssessmentCompliance Management

Soft Skills

Technical ExpertiseCommunication SkillsBriefing Senior Management

Tools & Technologies

Cloud ComputingIndustrial Control Systems (ICS)Operational Technology (OT)

Certifications & Qualifications

IT-II Non-Critical Sensitive DesignationTier 3 (T3) Background Investigation

Industry Keywords

DoD Cybersecurity PoliciesCybersecurity StandardsEmerging Technologies

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Serves as a Cybersecurity Subject Matter Expert (SME) for Assessment and Authorization (A&A) activities supporting DoD information systems
Performs cybersecurity activities required to authorize information systems in accordance with the Risk Management Framework (RMF)
Provides technical expertise for information systems undergoing the authorization process
Applies National Institute of Standards and Technology (NIST) Special Publication 800-53 security controls during the assessment and authorization process
Evaluates cybersecurity requirements across complex enterprise IT environments, including enclaves, applications, and outsourced IT services
Identifies security control deficiencies and determines the appropriate severity of vulnerabilities
Assesses the impact of identified vulnerabilities on an information system's current or future authorization
Develops recommendations to address cybersecurity risks and improve system compliance
Briefs senior management on the status, progress, and results of RMF and authorization activities
Ensures compliance with applicable DoD cybersecurity policies, procedures, and security standards

Requirements

What you’ll need

Five (5) years of relevant Risk Management Framework (RMF) and NIST Assessment and Authorization (A&A) experience
Department of Defense (DoD) cybersecurity experience
Experience assessing security controls and conducting authorization reviews for large, complex organizations
Experience supporting the Department of Defense (DoD) authorization process, including cybersecurity policies, procedures, and processes
Knowledge of cybersecurity principles related to emerging technologies, including cloud computing, Industrial Control Systems (ICS), warehouse execution systems, and Operational Technology (OT) infrastructures
Must possess an IT-II Non-Critical Sensitive designation or Tier 3 (T3) background investigation at the time of proposal submission.

Benefits

Comp & perks

Multiple healthcare coverage options including low deductible, high deductible, and HSA plans
Dental insurance
Vision insurance
Accident & illness insurance
Short- and long-term disability insurance
401(k) plan with industry leading 6% match including potential profit sharing
Employee Stock Ownership Plan (ESOP)