Cybersecurity SME

Modern Technology Solutions, Inc supports mission-critical defense systems with enterprise cybersecurity, compliance, and risk-management capabilities. This onsite role in Washington, DC is built for professionals who want to drive continuous RMF compliance, strengthen cyber risk mitigation, and keep security documentation audit-ready while working closely with system stakeholders.

Why this role

• Protect mission readiness by validating security posture through evidence reviews, control assessments, and compliance checks.
• Move compliance forward continuously by keeping documentation, processes, and controls current and effective across RMF cycles.
• Compensation in the range of USD 155,000 - 205,000 per year and an onsite role supporting enterprise-level cybersecurity work.
• Benefits that support long-term stability including zero deductible health plans, flex schedules, and a 6% 401k match with immediate vesting.
• Growth support with up to $10,000 annual education/training reimbursement and career mentorship programs.

Key responsibilities

• Review cybersecurity artifacts including test results (scans, STIGs), POA&Ms, and related evidence for quality and completeness.
• Generate, update, or maintain system security documentation such as System Security Plans, System Inventory, CONOPS, Authorization Boundary Diagrams, and PPSM.
• Maintain security-related plans and procedures, including Media Protection, Access Control, and Incident Response.
• Conduct security control assessments aligned with NIST SP 800-53.
• Lead and support continuous RMF compliance cycles by ensuring controls and documentation remain current and effective.
• Perform cyber risk assessments, artifact reviews, evidence evaluations, and compliance checks to validate the system’s security posture.
• Analyze cyber risks, system gaps, and vulnerabilities, then develop actionable remediation plans aligned with mission and compliance requirements.
• Interpret and apply cybersecurity and IA policies, including NIST, RMF requirements, FISMA standards, and applicable privacy directives.
• Collaborate with engineering teams, system owners, ISSOs, and mission stakeholders to support secure design, implementation, and sustainment.
• Support audits, inspections, and formal security assessments by maintaining high-quality documentation and readiness artifacts.
• Provide guidance on security-control inheritance, boundary definition, continuous monitoring, and governance workflows.

Required qualifications

• 5+ years of experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security-control documentation.
• Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans.
• Experience conducting cyber risk assessments, evidence reviews, and compliance checks.
• Experience with IA and cybersecurity policy areas including Privacy, NIST, RMF, and FISMA procedures.
• TS/SCI clearance.
• Current certification: CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP).

Technologies and frameworks

• NIST SP 800-53, NIST, RMF, FISMA
• Tenable, Splunk
• STIGs

Benefits

• 20 days of PTO and 10 holidays per year for new hires.
• Zero deductible health plans.
• Flex schedules.
• Up to $10,000 annual education/training reimbursement.
• Funded Stock Ownership Plan.
• 6% 401k match with immediate vesting.
• Semi-annual bonus opportunity.
• Career mentorship programs.

Nice to have

• DoD 8140 or CWF-aligned certifications.
• Knowledge of industry-standard tools such as Tenable or Splunk.
• Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities.

Clearance requirements

Must possess at Top Secret/SCI clearance.