Senior Subject Matter Expert, Equivalency

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. One Zero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance.

Additional details are available on our website:

Senior Subject Matter Expert, Equivalency

Remote (United States). Occasional virtual meetings with the Government; no routine on-site requirement.

• No security clearance is required. This work is performed at the Controlled Unclassified Information (CUI) level.
• S. citizenship is required. All personnel must undergo and successfully pass, at minimum, a Tier 1 background investigation (or equivalent) and be favorably adjudicated.

The Senior SME, Equivalency is the program's senior technical authority for operational technology and industrial control system cybersecurity in the maritime domain. This position conducts the technical review of all equivalency requests submitted under 33 CFR Part 101 Subpart F and assists with complex waiver requests and cybersecurity plan reviews as assigned. This is a designated Key Personnel position; the Government must acknowledge any replacement in writing.

• Conduct the detailed technical review of all equivalency requests, evaluating whether the request clearly identifies the regulatory requirement at issue, describes the proposed alternative safeguard, and provides sufficient supporting evidence for Government evaluation.
• Determine whether the proposed alternative provides a level of security that meets or exceeds the effectiveness of the specified regulatory requirement, and document that analysis so it is technically supportable and traceable.
• Apply Government-furnished methodologies, checklists, process guides, and decision matrices to produce preliminary recommendations of Approve, Approve with Conditions, or Deny.
• Prepare consolidated review packages for the USCG representative, including the complete request with supporting documentation, the fully annotated checklist with scoring, and a draft technical analysis.
• Draft signature-ready correspondence addressed to submitters for USCG review and signature, including supporting justification and any proposed conditions for Government consideration.
• Assist with complex and novel waiver requests and cybersecurity plan technical reviews as assigned by the Project Manager and Sub-Project Managers.
• Serve as the senior technical escalation point for OT and IC questions raised by both review teams.
• Perform quality control to ensure findings are clearly stated, technically supportable, internally consistent, and traceable to the applicable regulatory requirement or checklist element.
• Support development and delivery of internal maritime and OT cybersecurity training for review personnel.
• Recommend improvements to review processes, checklists, and templates for Government consideration, without establishing approval criteria or adjudication standards independent of the Government.

• Seven (7) years of hands-on experience focused on OT/ICS cybersecurity.
• Expert-level knowledge applying cybersecurity frameworks such as NIST CSF and ISA/IEC 62443 specifically to OT/ICS environments.
• Expert-level understanding of OT network architecture and security controls, with demonstrated capability applying that knowledge to maritime…