> Markdown version of [/jobs/ext/2015077-cybersecurity-sme](https://www.wearedevelopers.com/jobs/ext/2015077-cybersecurity-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity SME

- **Company:** ZANTECH INC.
- **Location:** Reston, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Information Systems, Identity and Access Management, Information Technology, 3-tier Architectures
- **Published:** August 10, 2026
- **Apply:** https://www.juju.com/job/00000000gmi5im

## About the Role

* Experience: Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and

NIST C&A experience; DOD cybersecurity experience

 * Experience in assessing security controls and conducting authorization reviews for large,

complex organizations

 * Investigative Requirement: Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3

(T3)/NACLC/ANACI at the time of proposal submission.

 * Clearence: Secret

 * 8570/8140: DoD Approved 8570 Baseline Certification: Category IAM Level III

Required Security Clearance:

 * US Citizenship and the ability to obtain and maintain an active DoD Secret or higher clearance, per contract requirements.

*Outstanding Performance…Always!"

## Description

Are you looking for your next challenge? Are you ready to work with a performance-based small company? If so, we are looking for you; someone who strives to support a strong team and to deliver "Outstanding Performance…. Always!" We would love to talk with you regarding that next step in your career.

At Zantech, we are a dynamic Small Business focused on providing complex, mission focused solutions with a proven track record of outstanding customer performance and high employee satisfaction. Come join our team!

Zantech is looking for a talented Cybersecurity Subject Matter Expert (SME) to serve as the Government's point of contact.

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of

assessing and authorizing a large organization's IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes. Determines the residual risk of an identified vulnerability (e.g., non-compliant

security control) and determines the possible ramifications on the system's current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)