JBSA Lackland AFB, Texas
Top Secret w/ SCI
On-site only
Cyber Security Services
Overview
GovCIO is currently hiring for Cybersecurity Engineer SME to support advanced Air Force Intelligence Community (AF IC) Risk Management Framework (RMF) modernization initiatives. The successful candidate will serve as a technical lead for cybersecurity engineering, RMF automation, and AI-enabled compliance capabilities supporting classified information systems. This position will be located at Lackland AFB, TX and will be an onsite position.
Responsibilities
Correlates threat data from various sources to establish the identity and modus operandi of hackers active in client's networks and posing a potential threat. Provides the customer with assessments and reports facilitating situational awareness and understanding of current cyber threats and adversaries. Develops cyber threat profiles based on geographic region, country, group, or individual actors. Produces cyber threat assessments based on entity threat analysis. May provide computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery, and network assessments. Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.
Collaborates with intrusion analysts to identify, report on, and coordinate remediation of cyberthreats to the client.
Provides timely and actionable sanitized intelligence to cyber incident response professionals.
Leverages technical knowledge of computer systems and networks with cyber threat information to assess the client's security posture.
Conducts intelligence analysis to assess intrusion signatures, tactics, techniques and procedures associated with preparation for and execution of cyber attacks.
Researches hackers, hacker techniques, vulnerabilities, exploits, and provides detailed briefings and intelligence reports to leadership.
This position focuses on engineering and automating RMF processes, improving authorization efficiency, enhancing continuous monitoring, and integrating AI-assisted analysis into cybersecurity governance workflows. The position supports system owners, ISSMs, ISSOs, Authorizing Officials (AOs), and Security Control Assessors (SCAs) by developing automation capabilities and engineering solutions. The position does not perform independent security control assessments to preserve RMF assessment independence.
Primary Responsibilities
Engineer cybersecurity solutions supporting DoD and Intelligence Community information systems.
Design, implement, and document security controls consistent with NIST SP 800-53 Rev. 5 and CNSSI 1253 overlays, as applicable.
Develop security architectures supporting Zero Trust, cloud, hybrid, and on-premises environments.
Integrate cybersecurity requirements throughout the System Development Life Cycle (SDLC).
Support Authority to Operate (ATO), Continuous Authorization (cATO), and Continuous Monitoring (ConMon) initiatives.
Develop and maintain RMF authorization artifacts
Engineer automated evidence collection and validation processes.
Develop reusable security control implementations and standardized control inheritance strategies.
Support implementation of OSCAL-based RMF automation.
Design and implement AI-assisted capabilities supporting RMF documentation, evidence management, and compliance analysis.
Develop Retrieval-Augmented Generation (RAG) workflows for cybersecurity documentation.
Implement Natural Language Processing (NLP) techniques to analyze RMF artifacts and identify documentation inconsistencies.
Develop machine learning and rule-based models.
Implement human-in-the-loop validation for all AI-generated outputs.
Apply Responsible AI principles and AI governance throughout solution development.
Develop automated RMF workflows.
Integrate cybersecurity controls into CI/CD pipelines.
Implement Security-as-Code and Policy-as-Code capabilities.
Develop dashboards supporting cybersecurity metrics, authorization status, and continuous monitoring.
Integrate automation with eMASS, Xacta, ServiceNow, Vuln Management platforms, and Enterprise asset inventories
Engineer automated collection of cybersecurity evidence supporting continuous monitoring.
Integrate security tooling.
Develop automated compliance scoring and risk dashboards.
Provide technical recommendations supporting authorization decisions.
Support modernization of enterprise RMF processes across AF IC environments.
Qualifications
High School with 10+ years (or commensurate experience)
Required Skills and Experience
Clearance Required: Top Secret/SCI
DOD 8140 IAT III certification required: CISSP, ISSEP, ISSAP, CGRC.
10 years of experience in one or more of the following: Cybersecurity Engineering, Risk Management Framework implementation, Security Architecture, DevSecOps, Continuous Monitoring, Security Automation.
Minimum five years supporting DoD or Intelligence Community cybersecurity programs.
Experience with eMASS, Xacta, NIST RMF, DoD RMF, AF IC cybersecurity processes, Classified information systems.
Demonstrated experience with NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5. NIST SP 800-53A Rev. 5, NIST SP 800-137, NIST SP 800-30, FIPS 199 and 200, DoD RMF, CNSSI, ICD 50, OSCAL implementation and machine-readable RMF artifacts, Zero Trust Architecture, Continuous Authorization (cATO), Security engineering principles, DevSecOps, Security automation.
Programming Experience developing automation using: Python, PowerShell, REST APIs, JSON/XML, GIT, CI/CD Platforms, integrating with enterprise APIs and cybersecurity platforms
Experience implementing AI-assisted cybersecurity capabilities using Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Natural Language Processing, Prompt engineering, Vector databases, Document intelligence, AI governance, Human-in-the-loop validation.
Preferred Skills and Experience
Experience with the Space Force's network environment.
#DSG #NSS #MAVERICK #TMK #TM
Posted Salary Range
USD $160,000.00 - USD $200,000.00 /Yr.
Company Overview
GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.
But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer
What You Can Expect
Interview & Hiring Process
If you are selected to move forward through the process, here's what you can expect:
During the Interview Process
Virtual video interview conducted via video with the hiring manager and/or team
Camera must be on
A valid photo ID must be presented during each interview
During the Hiring Process
Enhanced Biometrics ID verification screening
Background check, to include:
Criminal history (past 7 years)
Verification of your highest level of education
Verification of your employment history (past 7 years), based on information provided in your application
Employee Perks
At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well-being, beyond the standard company offered health benefits, including:
Employee Assistance Program (EAP)
Corporate Discounts
Learning & Development platform, to include certification preparation content
Training, Education and Certification Assistance*
Referral Bonus Program
Internal Mobility Program
Pet Insurance
Flexible Work Environment
*Available to full-time employees
Our employees' unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience.
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.
Posted Pay Range
The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an "at-will position" and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.
