Cyber Security Engineer SME Job Aurora area,Colorado USA,IT/Tech

Overview

GovCIO is currently hiring for Cybersecurity Engineer SME to support advanced Air Force Intelligence Community (AF IC) Risk Management Framework (RMF) modernization initiatives. The successful candidate will serve as a technical lead for cybersecurity engineering, RMF automation, and AI-enabled compliance capabilities supporting classified information systems. This position will be located at Peterson AFB, CO and will be an onsite position.

Overview

Responsibilities

Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis.

May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.

Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
Provides timely and actionable sanitized intelligence to cyber incident response professionals.
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.

This position focuses on engineering and automating RMF processes, improving authorization efficiency, enhancing continuous monitoring, and integrating AI-assisted analysis into cybersecurity governance workflows. The position supports system owners, ISSMs, ISSOs, Authorizing Officials (AOs), and Security Control Assessors (SCAs) by developing automation capabilities and engineering solutions. The position does not perform independent security control assessments to preserve RMF assessment independence.

Primary Responsibilities

Engineer cybersecurity solutions supporting DoD and Intelligence Community information systems.
Design, implement, and document security controls consistent with NIST SP 800-53 Rev. 5 and CNSSI 1253 overlays, as applicable.
Develop security architectures supporting Zero Trust, cloud, hybrid, and on-premises environments.
Integrate cybersecurity requirements throughout the System Development Life Cycle (SDLC).
Support Authority to Operate (ATO), Continuous Authorization (cATO), and Continuous Monitoring (Con Mon) initiatives.
Develop and maintain RMF authorization artifacts /li
Engineer automated evidence collection and validation processes.
Develop reusable security control implementations and standardized control inheritance strategies.
Support implementation of OSCAL-based RMF automation.
Design and implement AI-assisted capabilities supporting RMF documentation, evidence management, and compliance analysis.
Develop Retrieval-Augmented Generation (RAG) workflows for cybersecurity documentation.
Implement Natural Language Processing (NLP) techniques to analyze RMF artifacts and identify documentation inconsistencies.
Develop machine learning and rule-based models.
Implement human-in-the-loop validation for all AI-generated…