[Hiring] Test and Evaluation - Cyber Subject Matter Expert @Powell Consulting Group

Role Description

Provide operational Test and Evaluation (T&E) expertise across a wide range of activities and missions supporting cybersecurity and cyber resilience, including:

• Requirements review
• Test planning
• Test execution
• Data management
• Test reporting

Focus on assessing the confidentiality, integrity, and availability (CIA) of systems and data against cyber threats. Perform T&E technical analysis on a multi-disciplinary team, providing technical advisory support and oversight to the Government T&E division lead, with a focus on:

• Cyber systems
• Industrial control systems (ICS)
• Operational technology (OT) security
• Cyber Table Top exercises (CTT)
• Cooperative Vulnerability and Penetration Assessment (CVPA) testing
• Adversarial Assessments (AA)

Analyze and provide input to Test and Evaluation Master Plans (TEMPs), emphasizing:

• Cyber resilience
• Security controls validation (e.g., NIST SP 800-53)
• Compliance with cybersecurity regulations

Work with Government clients on T&E Working-Level Integrated Product Teams (WIPTs) to:

• Establish and monitor program execution toward milestones
• Identify and mitigate cyber risks throughout the system lifecycle

Review and provide feedback on acquisition program documents such as:

• Mission Needs Statement
• Operational Requirements Document
• Concept of Operations
• TEMP

Provide cyber resilience testing input and updates to:

• Cyber resilience guidebooks
• Letters of Assessment
• Other T&E documents

Teach cyber resilience T&E topics in DHS T&E workshops or classes.

Qualifications

• Over 15 years of Test and Evaluation experience, or 10 years with an advanced degree, with a significant portion dedicated to cybersecurity testing and evaluation of complex IT, OT, and cloud-based systems
• Experience with cyber resilience testing methodologies, including Cyber Table Tops (CTT), Cooperative Vulnerability and Penetration Assessments (CVPA), and Adversarial Assessments (AA)
• Experience working on a DoD or DHS acquisition program performing cyber resilience testing
• Ability to teach T&E topics, particularly in cybersecurity testing methodologies
• Technical writing experience, with the ability to document complex cybersecurity test plans, penetration test reports, vulnerability assessment findings, and mitigation recommendations
• Defense Acquisition University (DAU) or DHS Level III Test and Evaluation Certification or equivalency, or the ability to complete equivalent training during the initial period of employment
• Secret clearance and DHS Suitability

Requirements

• Experience with DHS acquisition policy and the DHS systems engineering lifecycle
• Experience with cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001), red teaming, and blue teaming methodologies
• Experience assessing industrial control systems (ICS) and operational technology (OT) security
• Knowledge of NIST SP 800-53 security controls validation
• Ability to pay strict attention to detail
• Possession of excellent organizational skills
• Possession of excellent verbal and written communication skills

Benefits

• Competitive compensation
• Comprehensive benefits
• Flexible work arrangements
• Professional development opportunities
• Opportunity to support high-impact national security missions