Cybersecurity Engineer SME
About the job
- High school education with 10 or more years of experience, or commensurate experience.
- A Top Secret/SCI clearance is required.
- A Department of Defense 8140 Information Assurance Technical Level II certification is required; accepted certifications include CISSP, ISSEP, ISSAP, or CGRC.
- At least 10 years of experience in one or more of cybersecurity engineering, Risk Management Framework implementation, security architecture, DevSecOps, continuous monitoring, or security automation.
- At least five years supporting Department of Defense or Intelligence Community cybersecurity programs.
- Experience with eMASS, Xacta, NIST RMF, DoD RMF, Air Force Intelligence Community cybersecurity processes, and classified information systems.
- Demonstrated experience with NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, NIST SP 800-53A Rev. 5, NIST SP 800-137, NIST SP 800-30, FIPS 199 and 200, DoD RMF, CNSSI, ICD 50, OSCAL implementation and machine-readable RMF artifacts, Zero Trust Architecture, Continuous Authorization (cATO), security engineering principles, DevSecOps, and security automation.
- Programming experience developing automation using Python, PowerShell, REST APIs, JSON/XML, Git, and CI/CD platforms, including integration with enterprise APIs and cybersecurity platforms.
- Experience implementing AI-assisted cybersecurity capabilities using Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Natural Language Processing, prompt engineering, vector databases, document intelligence, AI governance, and human-in-the-loop validation.
- Correlate threat data from various sources to identify hackers active in client networks and assess their methods and potential threats.
- Provide assessments and reports that support customer situational awareness and understanding of current cyber threats and adversaries.
- Develop cyber threat profiles based on geographic region, country, group, or individual actors, and produce cyber threat assessments based on entity threat analysis.
- Provide computer forensic and intrusion support for high-technology investigations, including computer evidence seizure, forensic analysis, data recovery, and network assessments, as needed.
- Research and maintain proficiency in tools, techniques, countermeasures, and trends related to computer network vulnerabilities, data hiding, network security, and encryption.
- Collaborate with intrusion analysts to identify, report, and coordinate remediation of cyber threats to the client.
- Provide timely, actionable, sanitized intelligence to cyber incident response professionals.
- Use technical knowledge of computer systems and networks together with cyber threat information to assess the client's security posture.
- Conduct intelligence analysis of intrusion signatures, tactics, techniques, and procedures associated with preparation for and execution of cyber attacks.
- Research hackers, techniques, vulnerabilities, and exploits; provide detailed briefings and intelligence reports to leadership.
- Engineer cybersecurity solutions for Department of Defense and Intelligence Community information systems.
- Design, implement, and document security controls consistent with NIST SP 800-53 Rev. 5 and CNSSI 1253 overlays, as applicable.
- Develop security architectures for Zero Trust, cloud, hybrid, and on-premises environments.
- Integrate cybersecurity requirements throughout the System Development Life Cycle (SDLC).
- Support Authority to Operate (ATO), Continuous Authorization (cATO), and Continuous Monitoring (ConMon) initiatives.
- Develop and maintain Risk Management Framework (RMF) authorization artifacts.
- Engineer automated evidence collection and validation processes.
- Develop reusable security control implementations and standardized control inheritance strategies.
- Support implementation of OSCAL-based RMF automation.
- Design and implement AI-assisted capabilities for RMF documentation, evidence management, and compliance analysis.
- Develop Retrieval-Augmented Generation (RAG) workflows for cybersecurity documentation.
- Implement Natural Language Processing (NLP) techniques to analyze RMF artifacts and identify documentation inconsistencies.
- Develop machine learning and rule-based models.
- Implement human-in-the-loop validation for all AI-generated outputs.
- Apply Responsible AI principles and AI governance throughout solution development.
- Develop automated RMF workflows.
- Integrate cybersecurity controls into CI/CD pipelines.
- Implement Security-as-Code and Policy-as-Code capabilities.
- Develop dashboards for cybersecurity metrics, authorization status, and continuous monitoring.
- Integrate automation with eMASS, Xacta, ServiceNow, vulnerability management platforms, and enterprise asset inventories.
- Engineer automated collection of cybersecurity evidence to support continuous monitoring.
- Integrate security tooling.
- Develop automated compliance scoring and risk dashboards.
- Provide technical recommendations supporting authorization decisions.
- Support modernization of enterprise RMF processes across Air Force Intelligence Community environments.
- Experience with the Space Force's network environment.
About the company
GovCIO provides IT services and digital solutions to the U.S. federal government, including IT modernization, digital services, data analytics, cybersecurity, DevSecOps, and management consulting. It wins prime federal contracts and delivers a full range of services through its business units—Health and Civilian Agencies, National Security Solutions, and Veteran and Enterprise Technology Solutions—along with GovCIO Media & Research. The company differentiates itself by expanding through strategic investments and acquisitions, such as WCAS’s stake and the Salient CRGT purchase, and by targeting federal health, national security, and civilian agencies under major contract vehicles like VA T4NG2. Its goal is to help the government transform and modernize its IT landscape with mission-critical technology and analytics capabilities.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Washington DC, District of Columbia
Founded
2010
Get referred to GovCIO
See people who can refer or advise you
Simplify's Take
What believers are saying
- GovCIO won DHS USCIS NEON II in December 2025, worth $163.4 million.
- GovCIO won a $389.7 million VA IT support order running through August 2027.
- GovCIO secured Navy NETSAFA RSNF support on March 19, 2026, expanding defense reach.
What critics are saying
- GovCIO lost GAO's IT services recompete to SAIC on January 12, 2026.
- VA concentration exposes revenue; SoldierPoint's CCIN and VHA work depend on agency budgets.
- A VA recompete loss could gut GovCIO's core health IT franchise by 2027.
What makes GovCIO unique
- WCAS-backed GovCIO bought SoldierPoint in September 2025, deepening VA telehealth capabilities.
- GovCIO controls VA's $2 billion CCIN telehealth IDIQ after SoldierPoint acquisition.
- GovCIO's 3,487-person workforce and Salient CRGT heritage support broad federal delivery.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Remote Work Options
Company News
US steel startup Hertha Metals has raised $133.65 million in Series A funding, including a $65 million equity investment from the US government. The company plans to produce high-purity iron for domestically manufactured rare earth magnets, which are critical components in F-35 fighter jets and missile guidance systems. The funding comes amid the Trump administration's multi-billion dollar initiative to boost domestic rare earth and magnet production. Hertha Metals' chief executive officer confirmed the company's focus on producing materials for American-made rare earth magnets used in defence applications. The investment reflects growing government support for domestic rare earth supply chains and critical mineral production capabilities.
Hertha Metals secures $133.65M Series A to produce high-purity iron for domestic rare-earth magnets. Series A and federal co-funding will finance Hertha Chalyx, a new plant producing high-purity iron and steel to address the U.S. shortfall for rare-earth magnet manufacturers Molten metal is tapped from a furnace at Hertha Metals. (Photo credit: Hertha Metals) CONROE, Texas-(BUSINESS WIRE)-Hertha Metals, the steel company behind the world's first single-step steel and high-purity iron process for lower-cost domestic production, today announced the close of a $133.65M Series A round, including a $65M equity investment from the U.S. Government, executed through its Industrial Base Analysis and Sustainment (IBAS) program in partnership with the Economic Defense Unit. The round was co-led by Khosla Ventures and Doerr Capital, with participation from CEV, Pear Ventures, Gates Frontier, Niterra SUISO no MORI Fund (General Partner: Global Brain), Toyota Ventures and Siemens Financial Services. IBAS is a federal program that funds projects to strengthen and modernize the defense industrial base. The funding will finance the construction of Hertha Chalyx, the company's new facility that plans to produce 10,000 tonnes of steel-grade and magnet-grade high-purity iron. Chalyx, alongside Hertha's pilot plant, Pi100, will be the first modern iron and steel innovation complex, a significant step toward reshoring iron and steel production central to IBAS's industrial base mission. The United States currently imports almost all of the high-purity iron used in rare-earth permanent magnets. NdFeB magnets are made of roughly 70% high-purity iron by weight, yet the U.S. has no domestic production capacity for this essential material. As the U.S.-made magnet push grows with the Defense Federal Acquisition Regulation Supplement (DFARS), Hertha Chalyx is establishing domestic production of the high-purity iron that rare-earth magnets need, creating a supply chain that spans mining to manufacturing entirely on American soil. Hertha's Flex-HERS(TM) process replaces the multi-step, coal-dependent blast furnace method with a single continuous reactor that processes any grade of iron ore and uses natural gas or hydrogen as a reductant. The result is iron and steel at 25% lower production costs than conventional blast furnaces, with emissions reductions of 50% using natural gas and up to 98% using hydrogen. "Every electric vehicle, aerospace platform, radar system, and data center depends on domestic iron and magnet feedstock suppliers," said Dr. Laureen Meroueh, CEO and Founder of Hertha Metals. "Hertha Chalyx closes that gap. We are building the supply chain this country needs, and we are doing it by providing a domestic cost-competitive option for manufacturers while unlocking safer and cleaner production." "Hertha has cracked what the steel industry has chased for many decades: iron and steel in one step, below blast-furnace cost, and made in America. That's the missing link for every magnet, EV, data center, and defense platform this country builds," said Rajesh Swaminathan, Partner at Khosla Ventures. "We led their seed round to back this vision and have doubled down at every round since, due to their consistent execution and our strong conviction in the team." "The industrial technologies that win are the ones that are cheaper, cleaner, and better performing," said Ryan Panchadsaram, Partner at Doerr. "Hertha's technology has the potential to produce critical materials at lower cost and with far lower emissions, while deepening essential domestic manufacturing capacity. That's the kind of innovation that can scale and make a real difference." Hertha currently operates a 360-ton-per-year demonstration facility in Conroe, Texas, and is in the active supplier qualification process with major U.S. rare-earth magnet producers. When Hertha Chalyx breaks ground this year, these integrated facilities producing both steel and high-purity iron on a single site will give U.S. magnet and defense manufacturers a source they lack, making Hertha Metals as much a national security asset as an industrial one. About Hertha Metals Hertha Metals is producing steel at lower cost, with ore-grade flexibility, and with significantly reduced emissions than conventional methods, using fully domestic iron ore and natural gas. Hertha is reshoring iron and steel production, enabling more jobs, and providing manufacturers with access to cost-competitive, high-quality steel and iron while meeting sustainability goals. The company partners with steel producers and supplies critical high-purity iron to rare-earth magnet manufacturers, helping secure domestic supply chains and advance American manufacturing competitiveness. For more information, visit herthametals.com.
A total of $1,274,686 was awarded to ideas span energy, tourism and events, space, health and medical life sciences, and primary industries.
Iron Bow Technologies (Iron Bow), a leading provider of innovative IT solutions to government, commercial, education, and healthcare markets, today announced...
The rebranding effort came after GovCIO acquired IT services contractor Salient CRGT in August 2021, creating a combined entity with more than 2,600 employees and $700 million in annual revenues, GovCIO said Thursday.