Enterprise Cyber Security SME-Principal

Position Summary

Odyssey has an exciting new opportunity for an Enterprise Cybersecurity SME to join the team! In this role you will establish enterprise-level cyber security Subject Matter Expert (SME) capability to the SW&SS Directorate program offices at Hanscom AFB, MA. The primary focus of the enterprise-level cyber security requirement is, in concert with the Government Staff Level Cybersecurity, develop and implement clearly defined and consistent cyber security processes across the Directorate portfolio.

In addition, the enterprise-level cyber security SME is required to advise and provide recommendations to the Government, as well as implement direction and guidance of the government. Support will also include, but is not limited to, full integration of cyber security into all phases of acquisition, upgrade, and modification programs, including design, development, testing, fielding, operation, sustainment, DoD Cybersecurity Authorization Processes, and providing oversight with the Directorate RMF compliance.

The cybersecurity SME encompasses the full range of cyber security and information security processes, procedures, and functions, to include reviewing data, maintaining/implementing and compliance notification of required IAVAs, NOTAMs and cybersecurity posture for systems. SME support includes advising division leadership on architecture mitigations to limit risk posture within the systems, and represent the risk posture in briefings and slides to DoW Chief Information Officer, Headquarters USSF and USSTRATCOM; utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance with RMF and emergent Cybersecurity Framework (CSF) requirements and to interpret requirements as necessary to ensure system compliance or provide operational justification for exceptions when deemed necessary.

Responsibilities

Establish enterprise-level cyber security Subject Matter Expert (SME) capability to the SW&SS Directorate program offices at Peterson SFB, CO. The primary focus on the enterprise-level cyber security requirement is, in concert with the SZQ Government ISSM, develop and implement clearly defined and consistent cyber security process across the SZQ Directorate portfolio.

In addition, the enterprise-level cyber security SME is required to advise and provide recommendations to the Government ISSM, as well as implement direction and guidance of the 61 government ISSM. Support will also include, but is not limited to, full integration of cybersecurity into all phases of acquisition, upgrade, and modification programs, including design,development, testing, fielding, operation, sustainment, and the DoD Cybersecurity Authorization Processes.

Provide oversight with the Directorate RMF compliance. The cyber security SME encompasses the full range of cyber security and information security processes, procedures, and functions, to include reviewing data, maintaining/implementing and compliance notification of required IAVAs, NOTAMs and cybersecurity posture for systems.

SME support includes advising division leadership on architecture mitigations to limit risk posture within the systems, and represent the risk posture in briefings and slides to DoD Chief Information Officer, Headquarters USSF and USSTRATCOM; utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance with RMF and emergent Cybersecurity Framework (CSF) requirements and to interpret requirements as necessary to ensure system compliance or provide operational justification for exceptions when deemed necessary.

Develop a focused approach in the continual improvement of processes and producers to manage the RMF packages in Enterprise Mission Assurance Support Service (eMASS), Xacta and SGN/CORE (as needed), controls and Plan of Action and Mile Stones (POA&Ms). Provide Cyber Security and authorization support services, assist the Government with the preparation of Cyber Security documentation: ATPs, Authority to Test (ATT), Authority to Operate (ATO), Authority to Connect (ATC), Plan of Action and Milestones (POA&M), Authorization Decision Document (ADD), and Security Plan (SP).

Review Cyber Security documentation to ensure they satisfy Security Design/Security Test & Evaluation (ST&E) Requirements RMF Control identification, to include building implementation plans and validation plans, assist with the entry and review of entered information to the Information Technology Investment Portfolio Suite (ITIPS), assist with the preparation and review of Federal Information Security Modernization Act documentation.

Qualifications

Qualifications

Must be a US citizen. Clearance: Must have Active Top Secret Clearance with SCI.

Education

Bachelor's Degree. Certifications: IAT Level II or equivalent and ability to obtain IAM Level III. Years of Experience: A minimum of 25 years of directly related experience, to include 15 years of DoD experience relevant to cybersecurity OR, Master's degree in a relevant field with 20 or more years of experience in the respective technical/professional discipline being performed, to include 12 years of DoD experience.

Additional Experience: Demonstrated experience building, managing, and successfully navigating Enterprise Mission Assurance Support Service (eMASS) packages through the complete Risk Management Framework (RMF) lifecycle to achieve Interim Authorities to Test (IATT) and Authorities to Operate (ATO). Demonstrated experience in software engineering, secure coding practices, and the direct administration or engineering of Dev.

Sec. Ops Continuous Integration/Continuous Deployment (CI/CD) pipelines. Experience securing and evaluating virtualization technologies, container orchestration platforms (e.g., Kubernetes), and hypervisors. Experience engineering or assessing systems designed to meet Zero Trust Architecture (NIST SP 800-207) principles.

Familiarity with securing Department of Defense Cloud Computing Security Requirements Guide (CC SRG) across various impact levels. Possess the advanced knowledge, experience and recognized ability to be considered an expert in their technical/professional field. Possess the ability to perform tasks and oversee the efforts of junior and mid-level personnel within the technical/professional discipline.

Demonstrate advanced knowledge of their technical/professional discipline as well as possess a comprehensive understanding and ability to apply associated standards, procedures and practices in their area of expertise.

Preferred Qualifications

TS/SCI.

Education

Master's Degree. Certifications: IAM Level III. #LI-WC1 Company Overview Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations.

We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care. Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through Odyssey.

Cares , a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities Please Note: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.

This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.

Odyssey Benefits Duties include, but not limited to: Establish enterprise-level cyber security Subject Matter Expert (SME) capability to the SW&SS Directorate program offices at Peterson SFB, CO. The primary focus on the enterprise-level cyber security requirement is, in concert with the SZQ Government ISSM, develop and implement clearly defined and consistent cyber security process across the SZQ Directorate portfolio.

In addition, the enterprise-level cyber security SME is required to advise and provide recommendations to the Government ISSM, as well as implement direction and guidance of the 61 government ISSM. Support will also include, but is not limited to, full integration of cybersecurity into all phases of acquisition, upgrade, and modification programs, including design,development, testing, fielding, operation, sustainment, and the DoD Cybersecurity Authorization Processes.

Provide oversight with the Directorate RMF compliance. The cyber security SME encompasses the full range of cyber security and information security processes, procedures, and functions, to include reviewing data, maintaining/implementing and compliance notification of required IAVAs, NOTAMs and cybersecurity posture for systems.

SME support includes advising division leadership on architecture mitigations to limit risk posture within the systems, and represent the risk posture in briefings and slides to DoD Chief Information Officer, Headquarters USSF and USSTRATCOM; utilize National Institute of Standards and Technology (NIST) 800 series special publications in the development of new system artifacts to ensure compliance with RMF and emergent Cybersecurity Framework (CSF) requirements and to interpret requirements as necessary to ensure system compliance or provide operational justification for exceptions when deemed necessary.

Develop a focused approach in the continual improvement of processes and producers to manage the RMF packages in Enterprise Mission Assurance Support Service (eMASS), Xacta and SGN/CORE (as needed), controls and Plan of Action and Mile Stones (POA&Ms). Provide Cyber Security and authorization support services, assist the Government with the preparation of Cyber Security documentation: ATPs, Authority to Test (ATT), Authority to Operate (ATO), Authority to Connect (ATC), Plan of Action and Milestones (POA&M), Authorization Decision Document (ADD), and Security Plan (SP).

Review Cyber Security documentation to ensure they satisfy Security Design/Security Test & Evaluation (ST&E) Requirements RMF Control identification, to include building implementation plans and validation plans, assist with the entry and review of entered information to the Information Technology Investment Portfolio Suite (ITIPS), assist with the preparation and review of Federal Information Security Modernization Act documentation.

Qualifications

Must be a US citizen. Clearance: Must have Active Top Secret Clearance with SCI.

Education

Bachelor's Degree. Certifications: IAT Level II or equivalent and ability to obtain IAM Level III. Years of Experience: A minimum of 25 years of directly related experience, to include 15 years of DoD experience relevant to cybersecurity OR, Master's degree in a relevant field with 20 or more years of experience in the respective technical/professional discipline being performed, to include 12 years of DoD experience.

Additional Experience: Demonstrated experience building, managing, and successfully navigating Enterprise Mission Assurance Support Service (eMASS) packages through the complete Risk Management Framework (RMF) lifecycle to achieve Interim Authorities to Test (IATT) and Authorities to Operate (ATO). Demonstrated experience in software engineering, secure coding practices, and the direct administration or engineering of Dev.

Sec. Ops Continuous Integration/Continuous Deployment (CI/CD) pipelines. Experience securing and evaluating virtualization technologies, container orchestration platforms (e.g., Kubernetes), and hypervisors. Experience engineering or assessing systems designed to meet Zero Trust Architecture (NIST SP 800-207) principles.

Familiarity with securing Department of Defense Cloud Computing Security Requirements Guide (CC SRG) across various impact levels. Possess the advanced knowledge, experience and recognized ability to be considered an expert in their technical/professional field. Possess the ability to perform tasks and oversee the efforts of junior and mid-level personnel within the technical/professional discipline.

Demonstrate advanced knowledge of their technical/professional discipline as well as possess a comprehensive understanding and ability to apply associated standards, procedures and practices in their area of expertise.

Preferred Qualifications

TS/SCI.

Education

Master's Degree. Certifications: IAM Level III. #LI-WC1