Cyber Science Advisor (USMC)
Job Description
Job Description
The Cyber Science Advisor (USMC) serves as a senior expert and strategic leader responsible for providing advanced technical and scientific expertise to enhance cybersecurity capabilities across the Marine Corps Enterprise Network (MCEN). This role involves directing complex cyber operations, leading research and innovation in cybersecurity technologies, and providing high-level advisory support to the Director, Deputy Commandant Information (DC I), Command, Control, Communications, and Computers (IC4). The advisor oversees the development and implementation of cutting-edge cybersecurity strategies, aligns efforts with Department of Defense (DoD) and Department of the Navy (DON) policies, and ensures robust defense-in-depth for MCEN systems, including NIPR, SIPR, legacy, tactical, and cloud-based environments. The role requires extensive experience in Cyber Security, Engineering, Test & Evaluation (T&E), Security Control Assessment (SCA), and Computer Network Defense (CND), with a focus on independent assessments, risk mitigation, and advanced threat response. Must have an active Top Secret clearance with SCI eligibility and be a U.S. Citizen.
Position Title: Cyber Science Advisor
Position Location: McLean, VA; McClellan, CA; Hybrid; Remote
Position Type: Full-time
The Cyber Science Advisor (USMC):
- Provides strategic leadership and scientific expertise for all Program Information Assurance (IA) activities across the Certification & Accreditation (C&A) and Assessment & Authorization (A&A) lifecycle, ensuring integration with DoD Information Network (DODIN) operations and Marine Corps mission objectives.
- Directs advanced cybersecurity research and innovation, leveraging expertise in cybersecurity, engineering, T&E, SCA, and CND to develop novel solutions for evolving threats.
- Demonstrates mastery of the Risk Management Framework (RMF), Defense Information Assurance Certification and Accreditation Process (DIACAP), and DoD/ DON cybersecurity policies, providing authoritative guidance on their application to MCEN systems.
- Leads the development, interpretation, and application of security policies and guidance, overseeing the creation, maintenance, and traceability of IA artifacts for Authority to Operate (ATO) compliance, including advanced risk assessments and mitigation strategies.
- Architects and validates complex security solutions to protect classified information up to Top Secret/SCI levels, ensuring compliance with stringent DoD and Marine Corps requirements.
- Oversees the operational security posture of MCEN systems, directing vulnerability scanning, patch management, incident response, and remediation efforts to maintain enterprise-wide resilience.
- Develops, enforces, and audits enterprise-level system security policies, ensuring seamless integration with configuration management, change control processes, and DoD-provided cybersecurity tools.
- Directs and coordinates IT security programs, aligning efforts with command leadership goals, Marine Corps Cybersecurity Vulnerability Assessment and Analysis Strategy (MCVAAS), and broader DoD/DON cybersecurity strategies.
- Leads independent cyber assessments to analyze MCEN cybersecurity controls, identify risks, and provide actionable remediation recommendations, supporting identification, detection, protection, response, and recovery measures.
- Provides strategic oversight for vulnerability assessments (remote and on-site), security documentation reviews, physical/traditional security evaluations, compliance checks, and code reviews, ensuring adherence to DoD Cyber Readiness Inspections standards.
- Drives the development and refinement of cybersecurity competency standards, qualifications frameworks, assessment guidelines, and Standard Operating Procedures (SOPs) for MCEN cybersecurity teams.
- Serves as a liaison with MARFORCYBER, Marine Corps Systems Command (MCSC), DON, and Joint Community entities to advance cybersecurity capabilities and ensure interoperability across DoD, national, and allied systems.
- Develops and delivers advanced cybersecurity training programs, ensuring team readiness and compliance with DoD Directive (DoDD) 8140.03 and Marine Corps Privileged User requirements.
- Provides expert recommendations to Congress via DON on security configuration efforts, vulnerability remediation, and compliance metrics, as required by the IC4 Cybersecurity Branch.
REQUIREMENTS:
- Active DoD Top Secret Security Clearance with SCI eligibility (SSBI completed or equivalent).
- Twenty (20) years or more of professional experience in cybersecurity, with a proven track record of leading complex DoD or Marine Corps cyber operations, capturing and refining information security requirements, and architecting, designing, and implementing advanced security solutions.
- Demonstrated mastery in leading RMF processes for MCEN systems (NIPR, SIPR, legacy, tactical, and cloud-based), with extensive experience in DIACAP and transition to RMF.
- Expert-level proficiency with Information Assurance tools, including:
- DISA Enterprise Mission Assurance Support Service (eMASS)
- Assured Compliance Assessment Solution (ACAS)
- Security Control Assessor (SCA) qualification required, with advanced experience in conducting DoD Cyber Readiness Inspections.
- Proven expertise in developing and leading cybersecurity policies and guidance to support:
- Creation, maintenance, and strategic oversight of security artifacts.
- Traceability documentation for ATO compliance.
- Evaluation and validation of security solutions for systems processing classified information up to Top Secret/SCI.
- Extensive experience directing the operational security posture of enterprise-level information systems, including risk scoring, exploit likelihood analysis, and impact assessment for decision-making.
- Proven leadership in developing, enforcing, and auditing system security policies, with advanced support for configuration management, change control, and continuous monitoring of systems/applications.
- At least 20 years of experience leading one or more of the following in DoD or Marine Corps environments:
- Network and system security
- Cybersecurity Service Providers (CSSP)
- Cyber Red Teams
- With demonstrated mastery in at least 5 of the following 6 focus areas:
- Vulnerability Analysis
- Network Security Monitoring
- Incident Response / Forensics
- Penetration Testing / Red Teaming
- CND Infrastructure Support
- CND Incident Response
- Demonstrated expertise in:
- Leading DoD network assessments and cyber readiness inspections.
- Conducting advanced code reviews and security evaluations.
- Directing penetration testing and Red Team operations.
- Managing Marine Corps network environments.
- Ensuring compliance with DoDD 8140.03 (Cyberspace Workforce Qualification and Management Program).
- Meeting Marine Corps Privileged User access requirements per the current edition of Enterprise Cyber Security Manual 007.
- Experience coordinating with MARFORCYBER, MCSC, DON, and Joint Community entities to advance cybersecurity capabilities and interoperability.
- Proven ability to develop and deliver advanced cybersecurity training programs, ensuring team compliance with DoD and Marine Corps standards.
- Familiarity with Marine Corps-specific cybersecurity publications, including MCO 5239.2B, ECSM series, and NATO directives for handling classified information.
EDUCATION:
- Master’s Degree in Computer Science, Information Technology, Cybersecurity, or an equivalent field from an accredited college or university. Ph.D. in a related field preferred.
CERTIFICATION:
- Required to have and maintain a current DoD 8570.01-M IAT-III (or higher) Certification, in compliance with DoDM 8140.03.
- Additional certifications such as CISSP, CISM, or equivalent advanced cybersecurity certifications strongly preferred.