Cyber Support

Department: Cybersecurity

Location: Warner Robins, GA (On-site)

Position Overview

The Cybersecurity Subject Matter Expert (SME) serves as the primary authority on Risk Management Framework (RMF) compliance, Information Assurance (IA), and cybersecurity strategy for a aircraft program. While engineering teams handle system-level design, the Cyber SME is responsible for navigating the DoD A&A (Assessment and Authorization) process, managing eMASS, and authoring critical security documentation. This role acts as a strategic advisor to the government Information System Security Manager (ISSM) and Program Management Office (PMO), ensuring that all cybersecurity, Clinger-Cohen Act (CCA), and program protection requirements are formally documented, assessed, and maintained throughout the system lifecycle. Prior experience with the Aircraft Authorizing Official (AO) is required.

Responsibilities

RMF & Assessment and Authorization (A&A)

• Lead the development, maintenance, and management of all RMF and Clinger-Cohen Act (CCA) documentation within the Enterprise Mission Assurance Support Service (eMASS).
• Develop the IT Categorization and Selection Checklist (ITCSC) to formalize Confidentiality, Integrity, and Availability (CIA) ratings in coordination with the government ISSM.
• Author and maintain the System Security Plan (SSP), Security Assessment Report (SAR), Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).

Cybersecurity Strategy & Planning

• Develop and maintain the overarching Cybersecurity Implementation Plan, detailing the strategic approach to meet all SOW information security requirements.
• Create and manage the Continuous Monitoring Plan (CMP) to define how security controls will be audited, tested, and reported over the operational lifecycle.
• Advise program leadership on cybersecurity risk, threat landscapes, and strategic mitigation strategies.

Cross-Functional Collaboration & Oversight

• Partner closely with the Secure Systems Engineer to ensure physical technical designs satisfy documented RMF security controls.
• Provide subject matter expertise during Technical Interchange Meetings (TIMs), design reviews, and program management reviews.
• Support the Program Protection Plan (PPP) by reviewing Criticality Analysis, Anti-Tamper strategies, and supply chain risk assessments.

Security Compliance & Progrommatic Support

• Ensure program compliance with overarching security policies, including Operational Security (OPSEC) and Controlled Unclassified Information (CUI) handling procedures.
• Monitor and verify that all program personnel meet required cybersecurity training and certification baselines (DoD 8570/8140).
• Assist in program protection surveys and physical/logical security compliance audits.