Cybersecurity SME

T-Rex Solutions is seeking an experienced Cybersecurity SME to lead the security architecture, compliance, and risk management activities for the design and deployment of a modern enterprise Case Management System (CMS) on Amazon Web Services (AWS) in support of our DOD customer. This system replaces a legacy platform and must meet strict federal cybersecurity standards, including FedRAMP, FISMA, IL 2, IL4, IL5 and NIST 800-53. The ideal candidate will have hands-on experience securing cloud-native applications, conducting security assessments, and managing authorization to operate (ATO) processes in federal environments.

Responsibilities:

• Serve as the Cybersecurity SME for a cross-functional Agile team modernizing a federal case management platform.
• Design and implement a comprehensive security architecture for a cloud-based enterprise system deployed on AWS.
• Define and enforce security policies, controls, and procedures in alignment with FedRAMP, FISMA, and NIST 800-53 requirements.
• Lead the development and maintenance of key security documentation, including:
  • System Security Plans (SSP)
  • Security Assessment Plans (SAP)
  • Plans of Action & Milestones (POA&M)
  • Incident Response Plans
  • Continuous Monitoring Strategy
• Support the ATO process, including coordination with agency ISSOs, auditors, and other cybersecurity stakeholders.
• Conduct regular vulnerability assessments, risk analysis, and penetration testing using approved tools (e.g., Nessus, Tenable, AWS Inspector).
• Work closely with DevOps and cloud architecture teams to ensure secure configuration and deployment of AWS services.
• Implement and monitor continuous security monitoring (ConMon) tools and processes, ensuring real-time compliance and threat detection.
• Enforce identity and access management (IAM) best practices, including role-based access control, MFA, and least privilege policies.
• Conduct regular audits and provide expert guidance during security incidents or breach simulations.
• Stay current with evolving federal cybersecurity mandates, AWS security services, and industry trends.

Requirements:

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field (or equivalent experience).
• 10+ years of experience in cybersecurity roles, with at least 5+ years supporting federal systems.
• Proven experience securing applications and workloads in AWS cloud environments.
• Strong knowledge of NIST RMF, NIST 800-53, FedRAMP, and FISMA compliance frameworks.
• Experience managing or supporting the ATO process in a federal setting.
• Familiarity with AWS native security tools (e.g., IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail).
• Proficiency in using vulnerability scanning and compliance tools (e.g., Nessus, Tenable, Splunk, AWS Security tools).
• Strong understanding of DevSecOps principles and integration of security in CI/CD pipelines.
• Strong communication skills and ability to interface with both technical and non-technical stakeholders.
• US citizenship required
• Must be able to obtain and maintain a DoD security clearance. A current DoD Public Trust clearance is desirable

Desired Skills:

• Relevant certifications such as CISSP, CISM, AWS Certified Security - Speciality, CEH, CAP
• Experience modernizing legacy federal applications or case management systems.
• Experience with Zero Trust Architecture and cloud-native security monitoring tools (e.g., GuardDuty, Security Hub).
• Experience with federal cybersecurity tools and reporting platforms (CDM, eMASS, Splunk, etc.)

T-Rex Overview

Established in 1999, T-Rex Solutions, LLC is a proven mid-tier business providing data-centric mission services to the Federal government as it increasingly tries to secure and leverage the power of data. We design, integrate, secure, and deploy advanced technical solutions for our customers so they can efficiently fulfill their critical objectives. T-Rex offers both IT and professional services to numerous Federal agencies and is a leader in providing high quality and innovative solutions in the areas of Cloud and Infrastructure Services, Cyber Security, and Big Data Engineering.

T-Rex is constantly seeking qualified people to join our growing team. We have built a broad client base through our devotion to delivering quality products and customer service, and to do that we need quality individuals. But more than that, we at T-Rex are committed to creating a culture that supports the development of every employee's personal and professional lives. T-Rex has made a commitment to maintain the status of an industry leader in compensation packages and benefits which includes competitive salaries, performance bonuses, training and educational reimbursement, Transamerica 401(k) and Cigna healthcare benefits.

T-Rex is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex (including pregnancy and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors.

In compliance with pay transparency guidelines, the annual base salary range for this position is $135,000 - $220,000. Please note that the salary information is a general guideline only. T-Rex considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer.

T-Rex offers a diverse and collaborative work environment, exciting opportunities for professional growth, and generous benefits, including: PTO available to use immediately upon joining (prorated based on start date), paid parental leave, individual and family health, vision, and dental benefits, annual budget for training, professional development and tuition reimbursement, and a 401(k) plan with company match fully vested after 60 days of employment among other benefits.