Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: onezerollc.com Position Title: Cybersecurity SME Level III Location : Hybrid – National Capital Region (USCG Headquarters, 2703 Martin Luther King Jr. Ave SE, Washington, DC Clearance : Active DoD SECRET (final) required Position Summary OneZero, LLC is seeking a Cybersecurity SME (Level III) to support a federal cybersecurity program office under an Information Assurance Risk Management Framework (IA RMF) support services contract. The Cybersecurity SME serves as a technical expert performing Information System Security Engineer (ISSE) services and cybersecurity compliance assessment, management, and reporting for federal information systems and operational technology. The SME provides insight and guidance on strategic, tactical, and operational cybersecurity plans; analyzes system and architecture requirements; recommends cybersecurity solutions; and advises on the impact of new legislation, mandates, regulations, technologies, and industry best practices. Key Responsibilities • Serve as the designated Information System Security Engineer (ISSE) for assigned USCG information systems, operational technology (OT), and hybrid cyber-physical platforms; lead the full NIST SP 800-37 RMF lifecycle from categorization through continuous monitoring and decommissioning. • Perform Security Readiness Reviews (SRRs); review and analyze ACAS/Nessus vulnerability scan results; assign, track, and validate remediation through patching cycles or POA&Ms, including false-positive management and DISA ticket coordination. • Maintain continuous monitoring and ensure ongoing compliance with DoD, DHS, and USCG security requirements and DISA STIGs; support cATO initiatives, automated evidence collection, and dashboard integration. • Conduct Security Impact Assessments for proposed system changes; participate in change management boards, DHS SELC reviews, acquisition milestones (PMR, PDR, CDR), CONOPS working groups, and technical exchange meetings. • Integrate Zero Trust principles, RMF controls, and OT/ICS-specific security requirements into system designs; conduct security engineering analyses, trade studies, and architectural risk assessments. • Evaluate emerging threats, adversary TTPs, OT/ICS vulnerabilities, and supply-chain risks; recommend safeguards and mitigation strategies that reduce cyber-attack surface and enhance resilience. • Track and report status on authoritative orders (OPORDs, TASKORDs, FRAGOs, ALCOASTs, TCTOs) from JFHQ-DoDIN, USCYBERCOM, and CGCYBER. • Produce weekly, monthly, and quarterly cybersecurity readiness updates, metrics, executive-level briefings, and risk memorandums for Government leadership; respond to ad hoc cybersecurity data calls. • Provide senior technical leadership and mentorship to the ISSE/SME team; formulate and submit continuous improvement recommendations to the COR regarding contracted operations. Required Qualifications • Bachelor's degree in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, or other related technical discipline from an accredited institution. • Minimum 8 years of related, progressive cybersecurity experience in a technical field related to this labor category. • DoD 8140 certification - required on the first day of performance. Must hold CISSP-ISSEP or CISSP-ISSAP active and in good standing, before starting work. See Certification Requirements below. Waivers will not be granted. • Active final SECRET personnel security clearance (Tier 3 / SF-86 investigation) • U.S. citizenship; favorably adjudicated background investigation and FBI fingerprint check. • Recognized expertise and technical leadership in the cybersecurity discipline, with exceptional oral and written communication skills and the ability to interface with all levels of Government management. Certification Requirements (DoD 8140) Accepted certifications - the candidate must already hold one of the following: • CISSP-ISSEP - ISC2 Information Systems Security Engineering Professional • CISSP-ISSAP - ISC2 Information Systems Security Architecture Professional Desired Qualifications • Experience with USCG/DoD security tools: eMASS, ACAS/Nessus/Security Center, Elastic SIEM, HBSS, Tanium, Splunk, ServiceNow, and Burp Suite. • Experience with OT/ICS/SCADA security, shipboard or aviation platform systems, and the DoD "Assess Only" process. • Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF practices, and DevSecOps pipelines. • Prior USCG, DHS, or DoD RMF support experience. Work Environment & Additional Requirements • Hybrid schedule: routine telework is authorized, but personnel must report on-site (hoteling) for classified (SECRET) work, SIPRNet access, meetings and events requiring presence, training, and personnel on/offboarding - at no additional cost to the Government. • Work schedules mirror Government staff requirements, performed within a 0600–1800 window including all core hours, Monday through Friday. • Occasional CONUS travel (and potentially Alaska, Hawaii, or U.S. Territories), including other DoD facilities and USCG vessels/aircraft; travel is COR-approved and reimbursed per the FTR/JTR. OneZero Solutions, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. To request an accommodation, please contact us at recruiting@onezerollc.com or call (202) 987-2580.

Requirements

Must-haves

Position Title: Cybersecurity SME Level III
Location : Hybrid – National Capital Region (USCG Headquarters, 2703 Martin Luther King Jr. Ave SE, Washington, DC
Clearance : Active DoD SECRET (final) required
Maintain continuous monitoring and ensure ongoing compliance with DoD, DHS, and USCG security requirements and DISA STIGs; support cATO initiatives, automated evidence collection, and dashboard integration.
Conduct Security Impact Assessments for proposed system changes; participate in change management boards, DHS SELC reviews, acquisition milestones (PMR, PDR, CDR), CONOPS working groups, and technical exchange meetings.
Integrate Zero Trust principles, RMF controls, and OT/ICS-specific security requirements into system designs; conduct security engineering analyses, trade studies, and architectural risk assessments.
Evaluate emerging threats, adversary TTPs, OT/ICS vulnerabilities, and supply-chain risks; recommend safeguards and mitigation strategies that reduce cyber-attack surface and enhance resilience.
Track and report status on authoritative orders (OPORDs, TASKORDs, FRAGOs, ALCOASTs, TCTOs) from JFHQ-DoDIN, USCYBERCOM, and CGCYBER.
Produce weekly, monthly, and quarterly cybersecurity readiness updates, metrics, executive-level briefings, and risk memorandums for Government leadership; respond to ad hoc cybersecurity data calls.
Provide senior technical leadership and mentorship to the ISSE/SME team; formulate and submit continuous improvement recommendations to the COR regarding contracted operations.
Bachelor's degree in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, or other related technical discipline from an accredited institution.
Minimum 8 years of related, progressive cybersecurity experience in a technical field related to this labor category.
Active final SECRET personnel security clearance (Tier 3 / SF-86 investigation)
U.S. citizenship; favorably adjudicated background investigation and FBI fingerprint check.
Recognized expertise and technical leadership in the cybersecurity discipline, with exceptional oral and written communication skills and the ability to interface with all levels of Government management.
Certification Requirements (DoD 8140)

Nice-to-haves

Experience with USCG/DoD security tools: eMASS, ACAS/Nessus/Security Center, Elastic SIEM, HBSS, Tanium, Splunk, ServiceNow, and Burp Suite.
Experience with OT/ICS/SCADA security, shipboard or aviation platform systems, and the DoD "Assess Only" process.
Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF practices, and DevSecOps pipelines.
Prior USCG, DHS, or DoD RMF support experience.
Work Environment & Additional Requirements
Work schedules mirror Government staff requirements, performed within a 0600–1800 window including all core hours, Monday through Friday.
Occasional CONUS travel (and potentially Alaska, Hawaii, or U.S. Territories), including other DoD facilities and USCG vessels/aircraft; travel is COR-approved and reimbursed per the FTR/JTR.
To request an accommodation, please contact us at recruiting@onezerollc.com or call (202) 987-2580.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: applicantpro
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off