Cybersecurity SME - LEAD

Contingent Award

Off-Site Remote

Who We Are

Connected Logistics builds secure, mission-critical IT and logistics solutions for the U.S. Army and other federal stakeholders. Our team values integrity, excellence, teamwork, and professional courage delivering real impact for national security missions. Connected Logistics is seeking a Cybersecurity Subject Matter Expert (SME) - Lead for our clients assessment program. This position will assist in performing assessments , developing, maintaining and refining methodologies used and identifying a course of action for mitigation at the system, application and enterprise level.

The Cybersecurity Subject Matter Expert (SME) - Lead provides expert-level support in cybersecurity assessments, advanced technical analysis, and the development of innovative solutions for highly complex cybersecurity challenges. This role serves as a senior technical authority for the Cybersecurity Assessment Program, offering guidance, interpretation, and technical direction on cybersecurity issues, tools, and evaluation methodologies. Strong independent judgment, advanced communication skills, and the ability to solve unusually complex problems are essential.

Key Responsibilities

• Provides expert technical leadership for cybersecurity assessments and evaluations.
• Performs CCRI inspections, vulnerability assessments, penetration testing, and security analysis across networks, databases, applications, and IT frameworks.
• Designs, develops, enhances, debugs, and implements security methodologies, processes, and assessment tools.
• Researches, tests, and recommends cybersecurity software tools and technologies.
• Develops product-specific STIGs based on DISA SRGs.
• Troubleshoots complex cybersecurity issues related to systems, applications, and networks.
• Works on innovative solutions and advanced concepts for cybersecurity improvement.
• Consults with project teams and customers to identify requirements and provide technical guidance.
• Conducts easibility analysis for future cybersecurity initiatives.
• Assists in evaluating and recommending security tools, assessment technologies, and compliance solutions.
• Responds to security issues and recommends improvements or enhancements.
• Contributes to documentation including assessment reports, user manuals, and technical guidance.
• Determines and pursues courses of action independently to meet long-range objectives.
• Guides development of advanced cybersecurity ideas from concept to final implementation.

Technical Skills

• Retina scan analysis
• Operating systems: Windows, Unix
• Boundary and internal defense (network policy, routers, firewalls, L2/L3 switches)
• DNS (policy, BIND/Windows)
• HBSS (remote console, AV, ABM, PA, HIPS, ePO)
• Traditional security assessments (Common, Basic, NCV, SCV)
• Wireless communications (BES, handheld devices)
• VULNERATOR
• USCYBERCOM CTO Compliance Program
• Wireless vulnerability assessment
• Web services: IIS, Apache, Proxy

• Must be a U.S. Citizen and possess an active DoD Secret Clearance, with eligibility for an IT-II/Tier 3 Investigation.
• DoD 8570 IAT Level II certification. For example, Security+ CE, CySA+, GSEC, GICSP, SSCP, CCNA Security.
• IAM Level III certification. For example, CISSP (or Associate), CISM, CISA, CASP+ CE, GSEC, GSLC, and GCIH.
• Seven (7) years of IT experience.
• Five (5) years of Information Assurance experience.
• Three (3) years of experience working in cloud computing environments.
• Proven proficiency performing CCRI, vulnerability assessments, and penetration testing.
• Strong analytical and problem-solving skills related to cybersecurity issues.
• Experience configuring and implementing networks and network components.
• Knowledge of DoD security regulations, DISA STIGs, SCAP, and RMF.
• Tenable Certified Nessus Auditor Certification.
• DISA FSO-certified CCRI Team Lead.

• Command Cyber Readiness Inspection (CCRI) Inspection certification in at least one of the following areas:

o Retina scan analysis

o Operating Systems (Windows, Unix)

o Boundary defense (network policy, router, firewall)

o Internal defense (L2 switch, L3 switch)

o DNS (policy, BIND/Windows)

o HBSS (remote console, AV, ABM, PA, HIPS, ePO)

o Traditional security (Common, Basic, NCV, SCV)

o Wireless communications (BES, handhelds)

• Penetration testing certification such as:

o Licensed Penetration Tester (LPT)

o Certified Expert Penetration Tester (CEPT)

o Certified Ethical Hacker (CEH)

o GIAC Penetration Tester (GPEN)

Connected Logistics respects the need for confidentiality for all applicants.

Connected Logistics offers an excellent benefits package that includes health, dental, vision, life and disability insurance, a great 401(k) package, and generous Paid Time Off.

EQUAL OPPORTUNITY EMPLOYER. It is our policy to abide by all federal, state and local laws prohibiting employment discrimination solely on the basis of a person's race, religious creed, color, national origin, ancestry, physical disability, mental condition (including, but not limited to, cancer related or HIV related), marital status, sex, gender (including sex stereotyping), age, sexual orientation, military status, or any other protected status except where a reasonable, bona fide occupational qualification exists.