Apply on Employer Site

Foxhole Technology · 3 weeks ago

Cybersecurity Automation Subject Matter Expert (SME)

US-DC

Full-time

Hybrid

Senior Level, Lead/Staff

$185K/yr - $205K/yr

15+ years exp

Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. They are seeking a Cybersecurity Automation Subject Matter Expert to modernize and streamline cybersecurity compliance through automated solutions.

Information Technology

Culture & Values

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Provide subject matter expertise in the development and deployment of automated RMF security control assessment, informing authorization, and continuous monitoring processes

Develop, integrate, and maintain automated workflows for evidence collection, control validation, and reporting

Leverage scripting, orchestration, and DevSecOps pipelines to embed compliance and security checks

Collaborate with cybersecurity engineers, assessors, system owners, and other stakeholders to align automation solutions with mission needs

Integrate automated testing tools (e.g., vulnerability scanners, configuration management tools) into RMF packages

Provide subject matter expertise on leveraging OSCAL (Open Security Controls Assessment Language) and other machine-readable compliance frameworks

Deliver training, documentation, and guidance to program teams on automated RMF practices

Stay current and provide feedback and recommendations on DoD cybersecurity policies, NIST updates, and emerging compliance automation technologies

Qualification

DoD RMF processCybersecurity complianceAutomation solutionsPythonNIST SP 800-53 Rev. 5DevSecOps pipelinesGRC toolsOSCALAnalytical thinkingEffective communication

Required

TS/SCI security clearance required

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

15+ years of experience in DoD cybersecurity compliance, assessment, or risk management

Hands-on expertise with RMF processes, NIST SP 800-53 Rev. 5 controls, and DoD RMF [DoDI 8510.01]

Experience developing automation solutions using Python, PowerShell, Ansible, or similar scripting/orchestration tools

Familiarity with continuous monitoring and automated compliance reporting

DoD 8570.01-M certification (e.g., CISSP, CAP, Security+ CE)

Ability to work on-site 1-4 days a week