Cyber

Job Title:

Cybersecurity, Senior
Department:
Cybersecurity

Location:

Warner Robins, GA (On-site)

The Cybersecurity Subject Matter Expert (SME) serves as the primary authority on Risk Management Framework (RMF) compliance, Information Assurance (IA), and cybersecurity strategy for an aircraft program. While engineering teams handle system-level design, the Cyber SME is responsible for navigating the DoD A&A (Assessment and Authorization) process, managing eMASS, and authoring critical security documentation. This role acts as a strategic advisor to the government Information System Security Manager (ISSM) and Program Management Office (PMO), ensuring that all cybersecurity, Clinger-Cohen Act (CCA), and program protection requirements are formally documented, assessed, and maintained throughout the system lifecycle.

Prior experience with the Aircraft Authorizing Official (AO) is required.

RMF & Assessment and Authorization (A&A)

• Lead the development, maintenance, and management of all RMF and Clinger-Cohen Act (CCA) documentation within the Enterprise Mission Assurance Support Service (eMASS).
• Develop the IT Categorization and Selection Checklist (ITCSC) to formalize Confidentiality, Integrity, and Availability (CIA) ratings in coordination with the government ISSM.
• Author and maintain the System Security Plan (SSP), Security Assessment Report (SAR), Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).

Cybersecurity Strategy & Planning

• Develop and maintain the overarching Cybersecurity Implementation Plan, detailing the strategic approach to meet all SOW information security requirements.
• Create and manage the Continuous Monitoring Plan (CMP) to define how security controls will be audited, tested, and reported over the operational lifecycle.
• Advise program leadership on cybersecurity risk, threat landscapes, and strategic mitigation strategies.

Cross-Functional Collaboration & Oversight

• Partner closely with the Secure Systems Engineer to ensure physical technical designs satisfy documented RMF security controls.
• Provide subject matter expertise during Technical Interchange Meetings (TIMs), design reviews, and program management reviews.
• Support the Program Protection Plan (PPP) by reviewing Criticality Analysis, Anti-Tamper strategies, and supply chain risk assessments.

Security Compliance & Progrommatic Support

• Ensure program compliance with overarching security policies, including Operational Security (OPSEC) and Controlled Unclassified Information (CUI) handling procedures.
• Monitor and verify that all program personnel meet required cybersecurity training and certification baselines (DoD 8570/8140).
• Assist in program protection surveys and physical/logical security compliance audits.