> Markdown version of [/jobs/ext/3788967-cybersecurity-sme](https://www.wearedevelopers.com/jobs/ext/3788967-cybersecurity-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity SME - **Company:** Modern Technology Solutions, Inc. - **Location:** Tysons, VA, United States - **Experience:** Expert - **Salary:** $155,000.0 - $205,000.0 - **Contract:** Permanent contract - **Skills:** CompTIA Security+, Cyber Security, Technical Data Management Systems, Splunk - **Published:** October 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9246056/cybersecurity-sme ## About the Role * 5+ years of experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security-control documentation * Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans * Experience conducting cyber risk assessments, evidence reviews, and compliance checks * Experience with IA or cybersecurity in the areas of IA policies and procedures including Privacy, NIST, RMF, and FISMA * TS/SCI clearance * CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) certification Nice If You Have: * DoD 8140 or CWF-aligned certifications * Knowledge of industry-standard tools such as Tenable or Splunk * Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities Clearance Requirements: * Must possess at Top Secret/SCI clearance. ## Description MTSI is seeking a Cybersecurity Subject Matter Expert (SME) to support enterprise-level cybersecurity, compliance, and risk-management activities for mission-critical defense systems. In this role, you will help drive continuous risk management framework (RMF) compliance, guide cyber risk mitigation efforts, and ensure adherence to DoD and federal cybersecurity frameworks. You will work closely with system owners, engineering teams, accrediting authorities, and mission partners to assess system posture, identify vulnerabilities, and implement effective remediation plans that strengthen overall cyber readiness. As a Cybersecurity SME, you will be responsible for evaluating system evidence, reviewing security controls, conducting formal compliance checks, and synthesizing technical data into clear recommendations for decision-makers. Your expertise will support programs across their full lifecycle, from initial system assessments through continuous monitoring and audit readiness. This position requires strong analytical skills, deep familiarity with NIST and DoD frameworks, and the ability to lead and coordinate key cybersecurity activities in a fast-paced environment. Responsibilities include: * Review test results (e.g., scans, STIGs), POA&Ms, and other cybersecurity artifacts for quality and completeness. * Generate, update, or maintain system security documentation, including: * System Security Plans * System Inventory * CONOPS * Authorization Boundary Diagrams * PPSM * Security-related plans and procedures (e.g., Media Protection, Access Control, Incident Response) * Conduct security control assessments in accordance with NIST SP 800-53. * Lead and support continuous RMF compliance cycles by ensuring documentation, processes, and controls remain current and effective. * Perform cyber risk assessments, artifact reviews, evidence evaluations, and compliance checks to validate the system's security posture. * Analyze cyber risks, system gaps, and vulnerabilities; develop actionable remediation plans aligned with mission and compliance requirements. * Interpret and apply cybersecurity and IA policies, including NIST guidelines, RMF requirements, FISMA standards, and applicable privacy directives. * Collaborate with engineering teams, system owners, ISSOs, and mission stakeholders to ensure secure system design, implementation, and sustainment. * Support audits, inspections, and formal security assessments by maintaining high-quality documentation and readiness artifacts. * Provide guidance on security-control inheritance, boundary definition, continuous monitoring, and governance workflows.