ZipRecruiter

Log In

1

Cyber Security Sme Jobs (NOW HIRING)

KBR, Inc.

Cybersecurity SME

Dulles, VA · On-site

$175K - $214K/yr

Cybersecurity SME Belong. Connect. Grow. with KBR! KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and ...

SmartIPlace

Cybersecurity SME[Remote]

Dallas, TX · Remote

Cybersecurity SME Location: Remote (May require Occasional Travel) Interview Mode: MS Teams Video Call Approximate Duration: 6+ Month Contract Visa: USC/GC Senior Cybersecurity SME specializing in ...

Ignite IT

Cybersecurity SME

Washington, DC · Hybrid

We are seeking a Subject Matter Expert (SME) Cybersecurity Architect to join our team supporting a large-scale federal modernization program. This role owns security architecture across enterprise ...

New

Ignite IT

Cybersecurity SME

Washington, DC · On-site

We are seeking a Subject Matter Expert (SME) Cybersecurity Architect to join our team supporting a large-scale federal modernization program. This role owns security architecture across enterprise ...

New

Ignite IT

Cybersecurity SME

Washington, DC · On-site

We are seeking a Subject Matter Expert (SME) Cybersecurity Architect to join our team supporting a large-scale federal modernization program. This role owns security architecture across enterprise ...

New

K2 Group, Inc.

Nuclear Cybersecurity SME

Arlington, VA · On-site

K2 Group, Inc. is seeking a Nuclear Cybersecurity Subject Matter Expert (SME) supporting Headquarters Air Force. This role provides specialized technical, analytical, and programmatic support for the ...

VivSoft

Cybersecurity SME

Springfield, VA · On-site

They are seeking a Cybersecurity Subject Matter Expert responsible for advising the government on strategic and tactical cybersecurity programs and developing system security concepts and ...

AMERICAN SYSTEMS

Cyber Security SME

Orlando, FL · Hybrid

$135K - $165K/yr

As a Cybersecurity Engineer with AMERICAN SYSTEMS you will have an opportunity to do the following: * Join us at an exciting time as we introduce next-generation technologies * Be part of a group ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsCyber Security Administrator JobsCyber Security Sme Jobs

Cyber Security Sme information

See salary details

$57K

$133K

$186K

How much do cyber security sme jobs pay per year?

As of Aug 20, 2026, the average yearly pay for cyber security sme in the United States is $132,962.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $150,000.00 per year, depending on experience, location, and employer.

What is a Cyber Security SME?

A Cyber Security SME, or Subject Matter Expert, is a professional with deep expertise in cyber security practices, technologies, and policies. They provide guidance on protecting organizations from cyber threats, help design secure systems, and often assist in developing security strategies. Cyber Security SMEs may also conduct risk assessments, train staff, and ensure compliance with relevant regulations. Their role is critical in helping organizations safeguard sensitive information and maintain operational integrity.

What are the key skills and qualifications needed to thrive as a Cyber Security SME?

To thrive as a Cyber Security SME (Subject Matter Expert), you need deep expertise in information security, risk assessment, incident response, and commonly hold certifications such as CISSP, CISM, or CEH. Familiarity with security frameworks (e.g., NIST, ISO 27001), SIEM tools, firewalls, and vulnerability management systems is essential. Strong analytical thinking, communication skills, and the ability to explain complex threats to non-technical stakeholders distinguish top performers. These skills enable effective protection of organizational assets, ensure compliance, and support informed decision-making in a constantly evolving threat landscape.

What are some common challenges faced by Cyber Security SMEs when collaborating with cross-functional teams?

Cyber Security SMEs often work closely with IT, engineering, compliance, and business units to ensure security measures align with organizational goals. A common challenge is bridging the knowledge gap between technical security concepts and non-technical stakeholders, which requires strong communication and the ability to translate risks into business terms. Additionally, balancing security best practices with operational efficiency and business priorities can be demanding, as SMEs must advocate for robust controls without hindering productivity. Effective collaboration, adaptability, and relationship-building skills are essential for success in this role.

What is the difference between Cyber Security Sme vs Cyber Security Analyst?

AspectCyber Security SMECyber Security Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentAdvisory, strategic roles within organizationsOperational, technical roles focusing on monitoring and response
Employer & Industry UsageConsulting firms, large enterprises, government agenciesIT departments, security teams, managed service providers

The main difference is that a Cyber Security SME provides expert advice, develops security strategies, and guides policies, while a Cyber Security Analyst focuses on monitoring systems, detecting threats, and responding to security incidents. Both roles require similar certifications but differ in scope and daily responsibilities.

More about Cyber Security Sme jobs

What job categories do people searching Cyber Security Sme jobs look for?

The top searched job categories for Cyber Security Sme jobs are:

Cyber Security Sme jobs near you
Infographic showing various Cyber Security Sme job openings in the United States as of August 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $132,962 per year, or $63.9 per hour.

Cybersecurity SME (Junior)

Chenega IT Enterprise Services

Alexandria, VA • On-site

Full-time

Re-posted 16 days ago

Job description

Overview
Cybersecurity SME JR
Alexandria, VA
Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!
The Cybersecurity SME is a key contract personnel who provides expert guidance and technical leadership, leading the contractor cybersecurity personnel, supporting, and representing the AGC Information System Security Manager (ISSM) in customer and management/leadership meetings for the area of cybersecurity.
Responsibilities
  • Report on and perform Continuous Monitoring on all AGC-supported systems and networks; identify, mitigate, and resolve cybersecurity incident issues and concerns
  • Develop guidelines/plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cybersecurity-related activities and mandates
  • Respond to all cybersecurity notices as directed by the Cyber Security Service Provider (CSSP) and pertinent service providers, take action to comply with security notices, and record compliance
  • Provide technical support, including documentation, to enable required AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF)
  • Support operational cybersecurity activities, including vulnerability scanning, IAVM compliance, STIG and SRG application, assessment, and remediation, and POA&Ms
  • Support cybersecurity governance, risk, and compliance by providing plans, policies, and procedures relevant to AGC's systems, applications, and networks, including AGC GovCloud (L2/L4), and other accredited systems/applications.
  • Manage accreditation and continuously monitor activities, as well as the vulnerability management and incident response functions for all supported systems and networks.
  • Support operational cybersecurity activities, including vulnerability scanning, IAVM compliance, STIG and SRG application, assessment, and remediation, and POA&M.
  • Support cybersecurity governance, risk, and compliance by providing plans, policies, and procedures relevant to AGC's systems, applications, and networks, including AGGC-R Cloud and/or AGC Army AWS Cloud, C2IE, OHASIS.
  • Maintains AGC's Tenant Security Plans (TSP) for SIPR and NIPR, Authority to Operate (ATO) for JWICS and Interim Authority to Test (IATT), Approval to Connect (ATC), and any other documentation necessary to support AGC's network connections and mission systems.
  • Manage the eMASS records for AGC's mission systems and enclaves, create and track POA&Ms, track IAVM and STIG compliance, and manage eMASS artifacts necessary to support evidence for applicable security controls.
  • Support RMF activities, including categorization of systems IAW NIST SP 800-60, selection of security controls IAW CNSSI 1253 and NIST SP 800-53, assessment of security controls IAW NIST SP 800-53A, development and implementation of Continuous Monitoring Plans IAW NIST SP800-137, STIG Traceability Matrix, hardware/software/firmware list, and System Security Plan (SSP).
  • Participate in the configuration process (CM) through representation on the Technical Review Board (TRB) and Configuration Control Board (CCB) and provide a security impact assessment for changes submitted through Request for Change (RFCs).
  • Responsible for the continuous monitoring of AGC's systems, applications, and networks
  • Configure vulnerability scanning, analyze results, and close or mitigate findings.
  • Organize the assessment of AGC GISO IT assets using applicable STIGs, SRGs, and/or vendor supply hardening guidelines.
  • Responsible for configuring AGC GISO IT assets for vulnerability scanning and ensuring 100% coverage using credentialed scans.
  • Coordinate with RNEC-NCR, C5ISR, GISA, and other Army enterprise service providers, as necessary, to ensure vulnerability assessment tools are in place and working properly.
  • Analyze vulnerability scan results and resolve open findings for findings that cannot be closed, create a POA&M, and recommend mitigation(s) to lessen the impact of the vulnerability; submit Operational Impact Statements (OIS) for Critical and High IAVAs.
  • Create a POA&M and recommend mitigation(s) to lessen the impact of the vulnerability IAW with ARCYBER OPORD 2016-129, submit Operational Impact Statements (OIS) for Critical and High IAVAs.
  • Support response procedures for cybersecurity incidents, like breaches, spills, and insider threat actions.
  • In coordination with the ISSM and IA Officer, all cybersecurity documentation required for accreditation for AGC's GISO assets, including but not limited to: architecture diagrams, boundary diagrams, data flow diagrams, ports, protocols, service exception requests, PKI certifications, IA metrics, and Privacy Impact Assessments (PIA) in the requisite cybersecurity document repository.
  • Identify, mitigate, and resolve cybersecurity incident issues and concerns
  • Develop guidelines/plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cybersecurity-related activities and mandates.
  • Provide technical support, including documentation, to enable AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF).
  • Provide input to the weekly and monthly status report covering technical activities for this functional area, including priorities, tasks, accreditation due dates and schedules, POA&M status, metrics, continuous monitoring tasks, etc.
  • Other duties as assigned

Qualifications
  • BA/BS degree preferred
  • 5+ years of relevant experience with DoD in an IA/Cybersecurity role preferred
  • DoD 8570.01-M IAM II required
    • IASE III certifications preferred
  • Active TS/SCI clearance required

Knowledge, Skills, and Abilities:
  • Trained and experienced with DoD vulnerability scanning tools, including Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol Compliance Checker (SCAP), Security Technical Implementation Guide (STIG) Viewer, Endpoint Security Solution (ESS), and AWS GovCloud security tools, including AWS Security Hub, Amazon Inspector, AWS Config, Amazon GuardDuty, Amazon Detective, and Amazon Macie.
  • Must be proficient with related automated tools, including but not limited to the Enterprise Mission Assurance Support Service (eMASS), Host-Based Security System (HBSS), and Assured Compliance Assessment Solution (ACAS).
  • Shall possess expert knowledge and in-depth experience with:
  • Application and system assessment, determination of accreditation requirements (Assess Only, ATO, IATT, etc.).
  • Categorization of information systems and/or data types IAW NIST SP 800-60 Vol II.
  • Establishment of Security Requirements Traceability Matrix, which identifies applicable DISA STIGs and SRGs.
  • Selection of security controls per NIST SP 800-53 and CNSSI 1253.
  • Writing System Security Plan (SSP), associated security controls assessment artifacts, and PO&AMs.
  • Application of DISA STIGs and SRGs.
  • Management of security controls assessment artifacts in eMASS in preparation of packages for RMF (DoDI 8510.01, NIST SP 800-37) processes.
  • Evaluation of security controls per NIST SP 800- 53A.
  • Implementation of continuous monitoring solutions per NIST SP 800-13
  • Knowledge and experience with current DoD and Army IA policies and procedures, RMF certification and accreditation procedures and requirements, APMS reporting procedures, and an understanding of the unique acquisition community IA issues.
  • Familiarity with Army and DoD regulations concerning IA implementation
  • Able to lead/oversee Program Protection Planning (PPP) and Security Classification Guide development and production for developmental and production systems.
  • Knowledge and experience in the security sub-disciplines supporting Army IA, certification and accreditation, IA security testing, and security management for both developmental and production systems, including but not limited to Communications Security, Physical Security, OPSEC, Risk Assessments, Personnel Security, Tempest, Network Security, Security Inspections, and User Training.
  • Must have advanced working knowledge of a variety of computer software applications in word processing, spreadsheets, database (MSWord, Excel, Access, PowerPoint), and Outlook.

How you'll grow
At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn.
We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.
Benefits
At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.
Learn more about what working at Chenega MIOS can mean for you.
Chenega MIOS's culture
Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.
Corporate citizenship
Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.
Learn more about Chenega's impact on the world.
Chenega MIOS News- https://chenegamios.com/news/
Tips from your Talent Acquisition Team
We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:
Chenega MIOS web site - www.chenegamios.com
Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm
LinkedIn - https://www.linkedin.com/company/1472684/
Facebook - https://www.facebook.com/chenegamios/
#Chenega IT Enterprise Services, LLC
Estimated Salary/Wage
USD $120,000.00/Yr. Up to USD $145,000.00/Yr.

Apply