Goldbelt

Runs federal contracting and Alaska commercial businesses

Cybersecurity Subject Matter Experts

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeHonolulu, HI, USA$90k - $100k /yr

About the Job

Requirements

The candidate must have 2–3 years of experience and the skills required to execute Federal, National, Department of Defense, United States Air Force Chief Information Officer, and United States State Department requirements to assess cyber risk, identify mission sets, and defend the mission.
The candidate must have 2–3 years of experience applying, assessing, and advising Major Command staff and Wings on cybersecurity requirements.
The candidate must hold a Department of Defense 8570.1-M Information Assurance Technical Level 3 certification: CompTIA Advanced Security Practitioner Continuing Education, Cisco Certified Network Professional-Security, Certified Information Systems Auditor, Certified Information Systems Security Professional or Associate, Global Information Assurance Certification Certified Enterprise Defender, Global Information Assurance Certification Certified Incident Handler, or Certified Cloud Security Professional.
The candidate must complete Level 1 Anti-Terrorist Training, Level A Survival, Evasion, Resistance, and Escape Training, United States Forces Korea Training, Department of Defense Cyber Awareness Challenge, Operations Security Awareness, Derivative Classification IF103.16, and Force Protection training upon hire.
The candidate must hold a Top Secret/Sensitive Compartmented Information security clearance.
The candidate must be able to travel to PACAF Main Operating Bases and Geographically Separated Units, at a minimum up to 40% of the time.
The candidate must have knowledge of congressional Federal Information Security Modernization Act, Department of Defense, and Air Force cybersecurity directives.
The candidate must have in-depth experience conducting Assessment and Authorization validation and reviews using National, Department of Defense, and Air Force standards, including Defense Information Systems Agency Security Technical Implementation Guides and National Institute of Standards and Technology Special Publication 800-12.
The candidate must have in-depth experience collecting and developing Assessment and Authorization artifacts.
The candidate must be able to maintain Assessment and Authorization packages, including tracking and updating documents and products in CAP for SNAP, GIAP circuit management tools, eMASS, ITIPS, and Continuous Monitoring Risk Scoring efforts.
The candidate must be proficient in creating and maintaining Risk Management Framework products for theater circuits and enclaves through eMASS.
The candidate must have experience creating, consulting on, revising, finalizing, and submitting Risk Management Framework deliverables.
The candidate must be able to provide updates through the Air Force central Federal Information Security Modernization Act database repository, ITIPS.
The candidate must have in-depth experience ensuring Assessment and Authorization data is synchronized across Air Force and Defense Information Systems Agency repositories.
The candidate must know how to process circuit connection requests through SGS and SNAP.
The candidate must have in-depth experience mentoring.
The candidate must be able to train and assist personnel with Department of Defense cybersecurity tools and technology.
The candidate must know how to resolve issues with Department of Defense vulnerability-scanning tools, including system credentials, access control lists, and identified network assets.
The candidate must know how to resolve issues with Department of Defense endpoint-security solutions for host devices in network enclaves.
The candidate must have in-depth experience preparing Wings for Cybersecurity Readiness Inspections and Cybersecurity Command Readiness Inspections on NIPRNet, SIPRNet, and supported information systems.
The candidate must have in-depth experience with Cybersecurity Readiness Inspection and Cybersecurity Command Readiness Inspection scores and Risk Assessment Reports using Defense Information Systems Agency scoring and risk-assessment tools.
The candidate must be able to recommend mitigations and follow-on actions, including Plans of Action and Milestones.

Responsibilities

Assist PACAF Main Operating Bases and Geographically Separated Units in improving and maintaining implementation of Federal Information Security Modernization Act, Department of Defense, and Air Force cybersecurity directives.
Conduct on-site and/or virtual Assessment and Authorization validation and reviews using National, Department of Defense, and Air Force standards, including Defense Information Systems Agency Security Technical Implementation Guides and National Institute of Standards and Technology Special Publication 800-12.
Collect and develop Assessment and Authorization artifacts in accordance with the Authorizing Official's office.
Assist Main Operating Bases and Geographically Separated Units in maintaining Assessment and Authorization packages, including tracking and updating documents and products in CAP for SNAP, GIAP circuit management tools, eMASS, ITIPS, and Continuous Monitoring Risk Scoring efforts.
Assist Main Operating Bases and Geographically Separated Units in creating and maintaining comprehensive Risk Management Framework products for theater circuits and enclaves through eMASS, including products required by applicable Department of Defense and Air Force instructions.
Assist the Government with creating, consulting on, revising, finalizing, and submitting Risk Management Framework deliverables, including System Security Plans, enclave Ports Protocol Services Matrices, control-validation artifacts such as Security Technical Implementation Guide results, policies, scans, and charters, Plans of Action and Milestones, and system topologies.
Provide updates through the Air Force central Federal Information Security Modernization Act database repository, ITIPS.
Ensure Assessment and Authorization data is synchronized across Air Force and Defense Information Systems Agency repositories, including eMASS, ITIPS, SNAP, and GIAP.
Assist with processing circuit connection requests for main bases through the SIPRNet Global Information Grid Interconnection Approval Process System and the NIPRNet SNAP.
Prepare and mentor Numbered Air Force, Wing, and cybersecurity forces through the Cybersecurity Readiness Review-M program.
Train and assist PACAF Main Operating Bases and Geographically Separated Units personnel in using Department of Defense security technical implementation tools and technology to maintain and improve cyber readiness.
Consult to resolve issues with Department of Defense vulnerability-scanning tools, including system credentials, access control lists, and identified network assets.
Consult to resolve issues with Department of Defense endpoint-security solutions for host devices in network enclaves.
Assist and prepare PACAF Wings for Cybersecurity Readiness Inspections and Cybersecurity Command Readiness Inspections on NIPRNet, SIPRNet, and supported information systems.
Create Cybersecurity Readiness Inspection and Cybersecurity Command Readiness Inspection scores and Risk Assessment Reports for Main Operating Bases and Geographically Separated Units using Defense Information Systems Agency scoring and risk-assessment tools.
Provide recommendations for mitigations and follow-on actions, including Plans of Action and Milestones.

Overview

Nisga'a CIOPS provides hands-on experienced services to civilian and DoD programs worldwide. Delivering highly skilled, cleared personnel who provide services on five continents for a portfolio of customers.

Summary:

We are looking for Cybersecurity Subject Matter Experts (SME). This position works directly for the Pacific Aire Forces (PACAF) Defensive Cyber Operations and Mission Assurance Branch but works with various PACAF AOR personnel. This position will Deliver Cybersecurity and RMF/Federal Info System Management Act (FISMA) support to PACAF mission owners; distributing current policy and provide guidance, and mentorship to the cyber forces to ensure compliance.

Responsibilities

Essential Job Functions:

Assist PACAF MOBs & GSUs improve & maintain implementation of congressional FISMA, DoD, and AF cybersecurity directives.
Conduct (on-site and/or virtual) A&A validation and reviews, using National/DoD/AF standards (e.g., DISA Security Technical Implementation Guides (STIGs), National Institute of Standards and Technology (NIST) SP 800-12).
Collect and develop A&A artifacts in accordance with AO Office.
Assisting MOBs and GSUs maintain and sustain A&A packages, including tracking/updating A&A documents/products in the following databases:
- Connection Approval Process (CAP) for SNAP
- GIAP circuit management tools
- eMASS and ITIPS
- Continuous Monitoring Risk Scoring (CMRS) efforts
Assist MOB and GSUs create and maintain comprehensive RMF products for the theater circuits/enclaves via eMASS as required. Products must include all requirements IAW applicable DoD and AF Instructions.
Assist the Government in the creation, consultation, revision, finalization, submission of the deliverables for RMF to include but not limited to the following:
- System Security Plan
- Ports Protocol Services Matrix (enclave)
- Artifacts for control validation (STIG results, Policies, Scans, Charters, etc., unit provided)
- Plan of Actions and Milestones (POAMs)
- System Topology
Provide up-dates through AF central FISMA database repository, ITIPS.
Ensure A&A data are synchronized across AF and DISA repositories (eMASS, ITIPS, SNAP, and GIAP).
Assist processing circuit connection requests for all the main bases through SIPRNet Global Information Grid (GIG) Interconnection Approval Process (GIAP) System (SGS) and the NIPRNet SNAP.
Prepare and mentor NAF, Wing, and cybersecurity forces through the CRR-M program.
Train and assist PACAF MOBs & GSUs personnel in the use of DoD security technical implementation tools and technology to maintain & improve cyber readiness.
Consult to resolve any issues with DoD required vulnerability scanning tools, including system credentials, access control list, and identified network assets.
Consult to resolve any issues with DoD required endpoint security solutions for all host devices in the network enclaves.
Assist and prepare PACAF Wings for CCRIs & CCORIs on NIPRNet, SIPRNet and supported information systems.
Create CCRI and CCORI scores and Risk Assessment Report for the MOBs & GSUs using DISA CCRI Scoring and Risk Assessment tools.
Provide recommendations for mitigations & follow-on actions to include POAMs.

#CJ

Qualifications

Necessary Skills and Knowledge:

Ability to deliver Cybersecurity and RMF/FISMA support to mission owners; distributing current policy and provide guidance, and mentorship to the cyber forces.
Knowledge of congressional FISMA, DoD, and AF cybersecurity directives.
In-depth experience conducting (on-site and/or virtual) A&A validation and reviews, using National/DoD/AF standards (e.g., DISA STIGs, NIST SP 800-12).
In-depth experience collecting and developing A&A artifacts.
Ability to maintain and sustain A&A packages, including tracking/updating A&A documents/products in the following databases:
- CAP for SNAP
- GIAP circuit management tools
- eMASS and ITIPS
- CMRS efforts
Proficiency in creating and maintaining RMF products for the theater circuits/enclaves via eMASS.
Experience in creating, consulting, revising, finalizing, submitting RMF deliverables.
Ability to provide up-dates through AF central FISMA database repository, ITIPS.
In-depth experience ensuring A&A data is synchronized across AF and DISA repositories.
Knowledge of processing circuit connection requests through SGS and SNAP.
In-depth experience in mentoring.
Ability to train and assist personnel with DoD cyber security tools and technology.
Knowledge of how to resolve issues with DoD vulnerability scanning tools, including system credentials, access control list, and identified network assets.
Knowledge of how to resolve issues with DoD required endpoint security solutions for all host devices in the network enclaves.
In-depth experience preparing Wings for CCRIs & CCORIs on NIPRNet, SIPRNet and supported information systems.
In-depth experience with CCRI and CCORI scores and Risk Assessment Report for the MOBs & GSUs using DISA CCRI Scoring and Risk Assessment tools.
Ability to provide recommendations for mitigations & follow-on actions to include POAMs.

Minimum Qualifications:

2-3 years of experience and the skills required to execute Federal, National, DoD, USAF CIO, and US State Department Requirements to be able to assess cyber risk, identify mission sets, and defend the mission.
2-3 years of experience of applying, assessing, and advising MAJCOM staff and Wings on cybersecurity requirements.
DoD 8570.1-M certified at Information Assurance Technical (IAT) Level 3 - Anyone (1) of the following:
- CompTIA Advanced Security Practitioner Continuing Education (CASP+ CE)
- Cisco Certified Network Professional-Security (CCNP-Security)
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP) (or Associate - this means the individual has qualified for the certification except for the number of years’ experience)
- Global Information Assurance Certification (GIAC) Certified Enterprise Defender (GCED)
- GIAC Certified Incident Handler (GCIH)
- Certified Cloud Security Professional (CCSP)
Certificates of completion for the following training (must initiate upon hire)
- Level 1 Anti-Terrorist Training
- Level A Survival, Evasion, Resistance, and Escape (SERE) Training
- USFK Training - no time requirement (only required to be taken once)
- DoD Cyber Awareness Challenge
- Operations Security (OPSEC) Awareness
- Derivative Classification IF103.16
- Force Protection
Top Secret (TS) / Sensitive Compartmented Information (SCI) security clearance
Ability to travel to PACAF MOBs and GSUs to conduct duties and responsibilities.
- At a minimum up to 40% of the time.

Preferred Qualifications:

Bachelor’s degree in related field.

Pay and Benefits

The pay range for this position is $90,000.00 - $100,000.00 annually.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.

About the Company

Goldbelt

Runs federal contracting and Alaska commercial businesses

Goldbelt is a for-profit parent corporation whose subsidiaries serve federal agencies and commercial customers while advancing the economic and cultural well-being of Tlingit and Haida shareholders. Its federal businesses span cybersecurity and information technology, healthcare and medical services, construction, engineering, logistics, and procurement. The group earns revenue through government contracts and commercial operations, with subsidiaries delivering services and products nationwide. The Alaska Division supports its community through investments in local economic development across Southeast Alaska. Founded in 1973 and incorporated in 1974, Goldbelt is headquartered in Juneau, Alaska.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Juneau, AK
Founded: 1973

Recently Posted Jobs

Explore more opportunities at Goldbelt

See more jobs