Cybersecurity SME

How you will contribute to our National Security and Defense mission: MTSI is seeking a Cybersecurity Subject Matter Expert (SME) to support enterprise‑level cybersecurity, compliance, and risk‑management activities for mission‑critical defense systems. In this role, you will help drive continuous risk management framework (RMF) compliance, guide cyber risk mitigation efforts, and ensure adherence to DoD and federal cybersecurity frameworks. You will work closely with system owners, engineering teams, accrediting authorities, and mission partners to assess system posture, identify vulnerabilities, and implement effective remediation plans that strengthen overall cyber readiness.

As a Cybersecurity SME, you will be responsible for evaluating system evidence, reviewing security controls, conducting formal compliance checks, and synthesizing technical data into clear recommendations for decision‑makers. Your expertise will support programs across their full lifecycle, from initial system assessments through continuous monitoring and audit readiness. This position requires strong analytical skills, deep familiarity with NIST and DoD frameworks, and the ability to lead and coordinate key cybersecurity activities in a fast‑paced environment.

Responsibilities Include

• Review test results (e.g., scans, STIGs), POA&Ms, and other cybersecurity artifacts for quality and completeness.
• Generate, update, or maintain system security documentation, including:
• System Security Plans
• System Inventory
• CONOPS
• Authorization Boundary Diagrams
• PPSM
• Security‑related plans and procedures (e.g., Media Protection, Access Control, Incident Response)
• Conduct security control assessments in accordance with NIST SP 800‑53.
• Lead and support continuous RMF compliance cycles by ensuring documentation, processes, and controls remain current and effective.
• Perform cyber risk assessments, artifact reviews, evidence evaluations, and compliance checks to validate the system’s security posture.
• Analyze cyber risks, system gaps, and vulnerabilities; develop actionable remediation plans aligned with mission and compliance requirements.
• Interpret and apply cybersecurity and IA policies, including NIST guidelines, RMF requirements, FISMA standards, and applicable privacy directives.
• Collaborate with engineering teams, system owners, ISSOs, and mission stakeholders to ensure secure system design, implementation, and sustainment.
• Support audits, inspections, and formal security assessments by maintaining high‑quality documentation and readiness artifacts.
• Provide guidance on security‑control inheritance, boundary definition, continuous monitoring, and governance workflows.

Qualifications Required

• 5+ years of experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security‑control documentation
• Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans
• Experience conducting cyber risk assessments, evidence reviews, and compliance checks
• Experience with IA or cybersecurity in the areas of IA policies and procedures including Privacy, NIST, RMF, and FISMA
• TS/SCI clearance
• CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) certification

Nice If You Have

• DoD 8140 or CWF‑aligned certifications
• Knowledge of industry‑standard tools such as Tenable or Splunk
• Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities

Clearance Requirements

• Must possess at Top Secret/SCI clearance.

The pay range for this position is $155,000 to $205,000/year; however, base pay offered may vary depending on established government contract ranges, job-related knowledge, skills, and experience, and other factors. MTSI also offers a full range of medical, financial, and other benefits, dependent on the position offered. Base pay information is based on market location. Applications will be accepted on an ongoing basis. This posting will be renewed periodically until the position is filled.