> Markdown version of [/jobs/ext/4385581-sr-cybersecurity-sme-hybrid](https://www.wearedevelopers.com/jobs/ext/4385581-sr-cybersecurity-sme-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Cybersecurity SME (hybrid)

- **Company:** Cypress
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $150,000.0 - $175,000.0
- **Contract:** Permanent contract
- **Skills:** Burp Suite, Cyber Security, Information Systems, Computer Engineering, Data Flow Control, Supervisory Control and Data Acquisition (SCADA), Information Security Management, Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Zero Trust Network Access, Security Information and Event Management, Software Engineering, SC Clearance, Tanium Platform Expertise, Information Technology, Nessus, 3-tier Architectures, Splunk, DODAF, Devsecops, Servicenow
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=35ce53e0c3f4b7a1

## About the Role

* Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, Information Systems, Computer Engineering, or a related technical discipline; experience may not substitute for the degree requirement.
 * At least 8 years of cybersecurity experience relevant to this position.
 * Active CISSP in good standing before the start date.
 * Active final SECRET clearance based on a Tier 3/SF-86 investigation; ability to obtain and maintain a Common Access Card.
 * Demonstrated RMF experience, including categorization, control selection and implementation, assessment, authorization, and continuous monitoring.
 * Strong knowledge of cybersecurity risk, laws and policy, threats and vulnerabilities, networking, protocols, network-security methods, and operational impacts.
 * Exceptional written and oral communication skills with the ability to advise technical teams and government leadership.

Certification Requirements:

The candidate must hold an active CISSP and will eventually obtain either CISSP-ISSEP or CISSP-ISSAP soon after beginning performance., * Experience with eMASS, ACAS/Nessus/Security Center, Elastic SIEM, HBSS, Tanium, Splunk, ServiceNow, or Burp Suite.

 * Experience securing OT/ICS/SCADA, shipboard, aviation, or other cyber-physical platforms, including the DoD Assess Only process.
 * Familiarity with DoDAF artifacts, ITIL/DESMF practices, and DevSecOps pipelines.
 * Prior DoD RMF support experience., * Cybersecurity: 8 years (Preferred)

License/Certification:

 * CISSP (Preferred)

## Description

We are seeking a Senior Cybersecurity Subject Matter Expert (SME) to support a federal cybersecurity program office. This position provides Information System Security Engineer (ISSE) services and cybersecurity compliance, assessment, management, and reporting support for federal information systems, operational technology, and hybrid cyber-physical platforms. The SME advises government stakeholders on cybersecurity strategy, architecture, risk, mandates, emerging technologies, and industry best practices., * Serve as the designated ISSE for assigned information systems and operational technology; lead the NIST SP 800-37 RMF lifecycle from categorization through continuous monitoring and decommissioning.

 * Develop and maintain RMF authorization packages in eMASS, including SSPs, SCTMs, POA&Ms, assessment reports, contingency and incident response plans, risk assessments, inventories, topology diagrams, and data-flow diagrams.
 * Conduct Security Readiness Reviews; analyze ACAS/Nessus results; and track remediation, patching, POA&Ms, false positives, and DISA coordination.
 * Maintain continuous monitoring and compliance with DoD, DHS, USCG, and DISA STIG requirements; support cATO, automated evidence collection, and dashboard integration.
 * Perform Security Impact Assessments and participate in change boards, reviews, acquisition milestones, CONOPS working groups, and technical exchange meetings.
 * Integrate Zero Trust, RMF controls, and security requirements into system designs; perform security engineering analyses, trade studies, and architectural risk assessments.
 * Evaluate emerging threats, adversary tactics, OT/ICS vulnerabilities, and supply-chain risks; recommend safeguards that reduce attack surface and improve resilience.
 * Track cybersecurity directives and produce readiness metrics, executive briefings, risk memoranda, recurring reports, and responses to cybersecurity data calls.
 * Provide senior technical leadership and mentorship to the ISSE team and recommend continuous improvements to government leadership., * Hybrid work with on-site reporting for classified work, SIPRNet access, required meetings, training, and onboarding or offboarding activities.
 * SIPRNet access may be required; eligibility includes a final SECRET clearance and any required security briefing or read-on.
 * Occasional COR-approved CONUS travel may include other government facilities, vessels, aircraft, Alaska, Hawaii, or U.S. territories.

Pay: $150,000.00 - $175,000.00 per year