ISE Information Security Subject Matter Expert (SME)

ABOUT NOOKS

Are you seeking an exciting and unique opportunity to grow and support our national security? As a startup, we are offering a limited-time opportunity to be an equity owner in a pioneering new industry. Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset.

ABOUT THE ROLE

We are seeking a highly specialized and experienced Information Security Subject Matter Expert (SME) to manage, lead, and administer the DoDM 5200.01-driven information security program for Sensitive Compartmented Information (SCI) systems and networks across the entire US Space Force classified enterprise. This critical role is dedicated to protecting classified material from unauthorized access, compromise, disruption, modification, or destruction a part of our Integrated Security Enterprise (ISE) Program.

The SME will provide expert-level DoDM 5200.01 guidance and secured information support directly to the HQ SSO and ISSM. The role involves providing expert guidance on secured information operations, ensuring compliance with DoDM 5200.01 standards for the safeguarding and continuous oversight of classified material, and managing responses to unauthorized disclosures.

KEY RESPONSIBILITIES:

1. Information Security Program Management and Compliance:

• Regulatory Oversight: Serve as the Subject Matter Expert for all regulations pertaining to the DoD Information Security Program, including DoDM 5200.01 (Volumes 1-4), DoDI 5200.48 (Controlled Unclassified Information), and relevant DoD/AFMAN security directives.
• Risk & Vulnerability Mitigation: Proactively identify physical and procedural security vulnerabilities by conducting facility self-inspections, providing expert recommendations for corrective actions, and ensuring the proper safeguarding of classified and sensitive material.
• Policy and Procedure Development: Lead the development, implementation, and maintenance of comprehensive Standard Operating Procedures (SOPs) and guidelines for the proper classification, marking, handling, storage, transmission, and destruction of classified information across the enterprise.
• Physical & IT Security Integration: Support the Risk Management Framework (RMF) process by acting as the authoritative voice on Physical and Environmental (PE) and Media Protection (MP) controls, ensuring the physical environments housing IT systems meet DoDM 5200.01 standards to support continuous Authority to Operate (ATO).

1. Incident Response and Operations:

• HQ SSO Incident Leadership: Direct the response to all SCI security incidents, including the containment of data spillages, investigation of compromises, and implementation of corrective actions to safeguard classified material.
• SOP Development: Develop and maintain detailed Standard Operating Procedures (SOPs) for security incident instigation, mitigation, and reporting activities.
• Coordination: Coordinate incident response and forensic activities with the ISSM, SSO, command leadership, law enforcement, and other government agencies as required.
• Monitoring and Reporting: Stay up to date on the latest security threats, vulnerabilities, and technologies to inform defensive strategies.

1. Content Review and Security Awareness:

• Security Awareness and Training: Develop and deliver advanced security awareness training programs to educate personnel on their information security responsibilities. Conduct initial and recurring security briefings for personnel with access to SCI systems and networks.
• Prepublication Reviews: Develop and manage SOPs for pre-publication reviews of classified information. Serve as a liaison between the requestor and Subject Matter Experts to ensure timely and compliant reviews are completed.
• Classification Management: Serve as a liaison between requestors and Subject Matter Experts to ensure accurate classification level reviews are completed. Maintain the repository of applicable SCI Security Classification Guides (SCGs).

1. Compliance, Audits, and Liaison:

• Audits and Inspections: Lead and coordinate internal self-inspections and serve as the Information Security expert during external government compliance audits and inspections (e.g., DCSA, customer-led) across all USSF sites.
• Compliance Reporting: Prepare and submit required security reports. Maintain accurate records of security incidents, investigations, and compliance activities.
• Collaboration: Work closely with the SSO, Physical Security SME, and Personnel Security SME to ensure a unified and comprehensive security posture.

THE SKILLSET:

• Experience: Minimum 10 years of dedicated professional experience in Information Security, with a significant focus on SCI security and networks within the U.S. Defense Industrial Base or Intelligence Community.
• Clearance: Must possess and maintain an Active Top Secret (TS) / Sensitive Compartmented Information (SCI) eligibility security clearance. U.S. Citizenship is required. Candidates must be capable of maintaining eligibility up to the Top Secret/SCI level within 45 days of hire.
• Regulatory Expertise: Expert-level, current knowledge of U.S. government Information Security regulations, specifically DoDM 5200.01 and ICD 705. 
• INFOSEC Knowledge: Strong understanding of information security principles as they apply to safeguarding data across both physical and digital environments, including expertise in classified media tracking, spillage mitigation, and DoD marking standards
• Skills: Excellent communication, problem-solving, and analytical skills. Proven ability to handle sensitive information with discretion and maintain confidentiality.
• This position supports mission operations and may require occasional travel to government facilities.

PREFERRED QUALIFICATIONS:

• Education: Bachelor's degree in computer science, Information Systems, or a related field.
• RMF knowledge of ICD 503 and CNSSI 1253.
• Certification: Current security certification such as Security Professional Education Development (SPeD) or CISSP (Certified Information Systems Security Professional).
• Experience: Direct, embedded experience supporting a US Space Force or other Combatant Command Special Security Office (SSO) with direct responsibility for secure networks.

This position requires the ability to travel to USSF and partner facilities, work in Sensitive Compartmented Information Facilities (SCIFs), and involves physical requirements such as climbing stairs/ladders or working in confined spaces to complete facility inspections and assessments.

This employment offer is contingent upon continued funding of the underlying government contract. Should the contract be modified, or terminated, or if funding is reduced or eliminated, the employer reserves the right to adjust or rescind the offer accordingly.