CrawlJobs Logo

Subject Matter Expert – Cybersecurity

· Job Posted May 28, 2026
Apply Position
Job Link Share

Job Description

We are seeking a highly skilled Subject Matter Expert (SME) with deep expertise in Cybersecurity, specifically in AI and agentic system defense, governance, risk management, and DevSecOps. The ideal candidate brings strong hands-on security experience combined with the ability to articulate risk and defense strategies clearly for diverse audiences.

Job Responsibility

  • Analyze/create learning objectives for each course
  • Review/create Course Outline for each of the courses
  • Review video scripts (7-9 per course) and confirm technical accuracy of the content, suggest edits and updates as required. Incorporate one round of internal and client feedback
  • Provide relevant static or recorded demos/ screencast to be integrated in the videos
  • Incorporate one round of internal and client feedback
  • In case of AI/software/tool-based courses, suggest relevant freeware. Write/review and test the codes to check
  • Review readings (4-6 per course, each up to 1200 words) and confirm technical accuracy of the content, suggest edits and updates as required. Incorporate one round of internal and client feedback
  • Create hands-on activities (1-2 lab or any other client preferred format) per course
  • Incorporate one round of internal and client feedback
  • Review practice quiz and graded assessments (5 files, each comprising 5-10 questions and suggest suitable edits, confirm technical accuracy. Incorporate one round of internal and client feedback
  • Record talking head videos (onsite/virtually on Zoom) for each course. There will be approximately 20-25 minutes of video recording involved per course. Incorporate one round of internal and client feedback
  • Provide digital signatures to be included on the client platform
  • For all reviews – validate the content accuracy and provide recommendations/suggestions,write/re-write to fill content gaps as necessary, write/test codes and labs, incorporate 1 round of internal feedback and 2 rounds of client feedback
  • Be available for Client discussions and content discussions as and when required

Requirements

  • Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, or a related field
  • 5+ years of proven experience in cybersecurity roles including red teaming, security engineering, or GRC
  • Strong expertise in AI-specific security threats including prompt injection, jailbreaking, and supply chain vulnerabilities
  • Hands-on experience with frameworks such as OWASP, MITRE ATT&CK, and NIST
  • Proficiency in DevSecOps practices, including integrating security into CI/CD pipelines
  • Experience with identity and access management (IAM), RBAC, and data governance for AI systems
  • Solid understanding of incident response, risk assessment, and enterprise AI security strategy
  • Familiarity with compliance and governance standards such as ISO 27001, SOC 2, or GDPR
  • Excellent analytical and documentation skills with the ability to write clear security guidelines

Nice to have

  • Certifications such as CISSP, CEH, OSCP, CISM, or equivalent are a plus
  • Prior experience conducting security audits or training technical teams is preferred

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Similar Jobs for

Subject Matter Expert – Cybersecurity

8 matching positions

Post-Sales GRC Subject Matter Expert

As a Post-Sales Subject Matter Expert, GRC at Vanta, you will be a highly visibl...
Location
Location
United States
Salary
Salary:
163000.00 - 192000.00 USD / Year
vanta.com Logo
Vanta
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Deep understanding of security, privacy, and AI governance frameworks (SOC 2, ISO 27001, ISO 42001, HITRUST, HIPAA, GDPR, NIST AI RMF, etc.) including experience either auditing, or participating in a cybersecurity audit
  • The ability to perform control mapping exercises for net-new frameworks, including policies to controls, risks to controls, etc.
  • Problem-solving skills in a fast-paced environment
  • Passion for leveraging AI and automation to advance GRC and risk management maturity
  • Ability to translate complex compliance requirements into actionable technical guidance for SaaS environments
  • Familiarity with cloud infrastructure, version control systems, risk management, vulnerability management, and their related security processes
  • Experience in building productive relationships and driving collaboration with both technical and non-technical teams
  • Knowledge of the cybersecurity audit process
  • Security compliance management experience within a SaaS environment preferred, but not required
  • Sales Engineering or Technical Support experience preferred, but not required
Job Responsibility
Job Responsibility
  • Partner with the Vanta's Sales and Customer Success teams to represent Vanta’s Trust Management Platform to prospects and customers
  • Facilitate onboarding and implementation of Vanta for new customers
  • Engage with executives and sr. staff at prospect and customer organizations to establish relationships with customer's Security and Compliance points of contact
  • Become an expert on the security features available for customers to deploy within Vanta, including best practices for implementation
  • Use your expert knowledge of compliance frameworks like SOC 2 and ISO 27001 to advise customers regarding questions about scoping, policy creation, detailed control requirements and security best practices
  • Collaborate with Vanta’s EPD (Product) team to improve processes and enable faster and more seamless experiences for our customers
  • Identify requirements that would enable additional customer use cases and drive implementation of customer requirements with relevant stakeholders
  • Provide input and feedback on the development of security and GRC product features for Vanta’s customers
  • Answer questions for internal and external stakeholders about security and compliance
What we offer
What we offer
  • Offers Equity
  • medical benefits
  • 401(k) plan
  • other company perk programs
  • Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
  • 16 weeks fully-paid Parental Leave for all new parents
  • Health & wellness stipend
  • Remote workspace, internet, and cellphone stipend
  • Commuter benefits for team members who report to the SF and NYC office
  • Family planning benefits
  • Fulltime
Read More
Arrow Right

Hipaa subject matter expert

The HIPAA Subject Matter Expert supports the Health and Human Services (HHS), Of...
Location
Location
United States
Salary
Salary:
125000.00 - 135000.00 USD / Year
chickasaw.com Logo
Chickasaw Nation Industries, Inc (CNI)
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Preference will be given to candidates with relevant industry certifications from CISSP, CISM, CIPP/CIPT/CIPT
  • Ten (10) years of relevant cybersecurity experience is preferred
  • Experience in auditing and generating audit reports is required
  • Fundamental knowledge of basic systems analysis
  • Knowledge of a broad range of relevant computer systems, applications, and/or related equipment
  • Knowledge of computer security procedures and protocol
  • Basic knowledge of advanced operating system, network, or application management tasks
  • Knowledge of current technological developments/trends in area of expertise
  • Knowledge of federal copyright laws as they pertain to the use of computer software
  • Ability to integrate emerging technologies and applications into current environment and to identify technical specifications to meet user needs including operating system and network or application configuration
Job Responsibility
Job Responsibility
  • Reviews security and privacy complaints, data breach notification and cybersecurity incident reports and other correspondence and evidence to determine whether complaints, self-reported breaches or breach notification reports indicate non-compliance with the HIPAA Security Rule
  • Reviews data provided by the healthcare organizations across the nation to assess the overall impact of security and privacy incidents
  • Evaluates and determines the technical sufficiency of submissions from HIPAA covered entities and business associates in response to data and documentation requests (i.e. Assessing reports related to security baselines, penetration tests, vulnerability assessments, and digital forensics)
  • Documents processes, standard operating procedures and system requirements
  • develops reports summarizing the analysis along with formulating recommendations for OCR to consider for future action
  • Develops written reports with technical security analyses, summaries, and recommendations for action, reports on root causes of problems, efficiency, and support needs
  • Provides expertise in the development and evaluation of health information privacy policies and technologies, specifically regarding protected health information
  • deidentified/re-identified health information
  • limited data sets
  • Provides subject matter expert analysis, evaluation, and recommendations based on national security standards (NIST), industry best practices from the International Organization for Standardization and implementation specifications of the HIPAA Security Rule
What we offer
What we offer
  • Medical
  • Dental
  • Vision
  • 401(k)
  • Family Planning/Fertility Assistance
  • STD/LTD/Basic Life/AD&D
  • Legal-Aid Program
  • Employee Assistance Program (EAP)
  • Paid Time Off (PTO) – (11) Federal Holidays
  • Training and Development Opportunities
  • Fulltime
Read More
Arrow Right

Hipaa subject matter expert

The HIPAA Subject Matter Expert supports the Health and Human Services (HHS), Of...
Location
Location
United States
Salary
Salary:
125000.00 - 135000.00 USD / Year
chickasaw.com Logo
Chickasaw Nation Industries, Inc (CNI)
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Preference will be given to candidates with relevant industry certifications from CISSP, CISM, CIPP/CIPT/CIPT
  • Ten (10) years of relevant cybersecurity experience is preferred
  • Experience in auditing and generating audit reports is required
  • Fundamental knowledge of basic systems analysis
  • Knowledge of a broad range of relevant computer systems, applications, and/or related equipment
  • Knowledge of computer security procedures and protocol
  • Basic knowledge of advanced operating system, network, or application management tasks
  • Knowledge of current technological developments/trends in area of expertise
  • Knowledge of federal copyright laws as they pertain to the use of computer software
  • Ability to integrate emerging technologies and applications into current environment and to identify technical specifications to meet user needs including operating system and network or application configuration
Job Responsibility
Job Responsibility
  • Reviews security and privacy complaints, data breach notification and cybersecurity incident reports and other correspondence and evidence to determine whether complaints, self-reported breaches or breach notification reports indicate non-compliance with the HIPAA Security Rule
  • Reviews data provided by the healthcare organizations across the nation to assess the overall impact of security and privacy incidents
  • Evaluates and determines the technical sufficiency of submissions from HIPAA covered entities and business associates in response to data and documentation requests (i.e. Assessing reports related to security baselines, penetration tests, vulnerability assessments, and digital forensics)
  • Documents processes, standard operating procedures and system requirements
  • develops reports summarizing the analysis along with formulating recommendations for OCR to consider for future action
  • Develops written reports with technical security analyses, summaries, and recommendations for action, reports on root causes of problems, efficiency, and support needs
  • Provides expertise in the development and evaluation of health information privacy policies and technologies, specifically regarding protected health information
  • deidentified/re-identified health information
  • limited data sets
  • Provides subject matter expert analysis, evaluation, and recommendations based on national security standards (NIST), industry best practices from the International Organization for Standardization and implementation specifications of the HIPAA Security Rule
What we offer
What we offer
  • Medical
  • Dental
  • Vision
  • 401(k)
  • Family Planning/Fertility Assistance
  • STD/LTD/Basic Life/AD&D
  • Legal-Aid Program
  • Employee Assistance Program (EAP)
  • Paid Time Off (PTO) – (11) Federal Holidays
  • Training and Development Opportunities
  • Fulltime
Read More
Arrow Right

Acquisition AI Integration Subject Matter Expert

The Acquisition AI Integration SME role focuses on integrating acquisition, cont...
Location
Location
United States , California, MD; Arlington, VA; Pax River Naval Base
Salary
Salary:
145000.00 - 210000.00 USD / Year
kairosinc.net Logo
KAIROS Inc
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Expert level experience in NAVAIR acquisition and contract analytics systems
  • Excellent project management skills, with the ability to manage cross-functional teams
  • Strong communication and interpersonal skills, capable of leading technical discussions and driving alignment across teams.
  • Strong analytical and problem-solving skills, with the ability to diagnose and resolve complex technical issues in a fast-paced environment.
  • Strong customer relations, analytics, documentation skills
  • Self-starter, highly motivated, strong work ethic with a commitment to quality
  • Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
  • Ability to work within a challenging, fast-paced, team-oriented environment
  • Ability to work independently
  • Ability to multi-task and meet competing, deliverable deadlines
Job Responsibility
Job Responsibility
  • Acquisition AI Integration and Engineering Leadership
  • Support ongoing data, AI, and platform integration efforts with a specific focus on acquisition and contracting workflows for ACAT I and II programs into the latest NAWCAD War Room application and AI suites
  • Deliver AI-driven acquisition solutions that automate and optimize contract data processes, ensuring compliance with DoD and DON procurement standard
  • Provide SME feedback for integrating NAVAIR systems such as Program Management Tool (PMT) and Acquisition Management System (AMS)
  • Lead numerous product management related meetings and use latest Agile management best practices and enterprise tools
  • Technology Leadership: Lead multi-disciplinary hardware, software, AI, and data engineering teams focused on delivering capabilities and features described on the latest KAIROS EPAD technology roadmap.
  • Recommend and implement cutting-edge technologies and methodologies to improve KAIROS data automation processes and platform capabilities.
  • Cross-Functional Collaboration: Collaborate with engineering, manufacturing, and product teams to ensure successful design and implementation of enterprise platform and data-automation solutions across various applications.
  • Work closely with supply chain and operations teams to ensure material availability, cost efficiency, and process sustainability.
  • Lead training programs and knowledge sharing initiatives to build internal expertise.
What we offer
What we offer
  • Medical Coverage
  • Employer Paid Dental, Vision, Basic Life/AD&D, Short-Term/Long-Term Insurance
  • Health Savings Account with Contribution by Employer
  • 401K Plan with Employer Matching
  • Annual Discretionary Bonuses
  • Paid Time Off
  • Eleven (11) Paid Holidays
  • Certification reimbursement program
  • Tuition Reimbursement Program
  • Paid Parental Leave
  • Fulltime
Read More
Arrow Right

Senior Education/Trainer Subject Matter Expert

The Senior Education/Trainer Subject Matter Expert (SME) is a highly experienced...
Location
Location
United States , McLean
Salary
Salary:
Not provided
bln24.com Logo
BLN24
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in Cybersecurity, Information Technology, Education/Instructional Design, or a related field
  • Minimum 8 years of experience in cybersecurity, information security, or a related discipline, including experience supporting education and training initiatives
  • In-depth expertise in cybersecurity principles, practices, and current threat landscape, with the ability to translate technical concepts into clear, actionable learning content
  • Proven experience developing and delivering instructor-led training and mentoring others in a training or education environment
  • Strong ability to validate and quality-check training materials for accuracy, clarity, and effectiveness
  • Excellent written and verbal communication skills, including experience briefing technical and non-technical audiences
Job Responsibility
Job Responsibility
  • Lead the design, development, and delivery of cybersecurity training programs that support workforce readiness, awareness, and operational effectiveness
  • Serve as the authoritative cybersecurity SME for training content, ensuring all materials are accurate, current, and aligned to best practices and stakeholder expectations
  • Validate course content, learning objectives, and instructional approaches to ensure training is effective, engaging, and outcome-driven
  • Deliver instructor-led training, workshops, and briefings to diverse audiences, tailoring delivery methods to stakeholder needs and learner skill levels
  • Mentor and coach other trainers and instructional staff by providing guidance, technical insight, and quality assurance support
  • Support continuous improvement by evaluating training effectiveness, collecting feedback, and updating curriculum to address emerging threats and evolving requirements
  • Collaborate with program leadership and stakeholders to identify training needs, prioritize initiatives, and ensure alignment with mission objectives
  • Contribute to training documentation, knowledge management, and program reporting to support traceability, transparency, and delivery quality
What we offer
What we offer
  • Generous medical, dental, and vision plans
  • Opportunity to work in different sectors
  • Flexibility and remote working opportunities
  • Fulltime
Read More
Arrow Right

Network Security Engineer (Web Proxy)

Job Title: Network Security Engineer (Web Proxy) Location: Irving, TX (Onsite) F...
Location
Location
United States , Irving
Salary
Salary:
115000.00 USD / Year
realign-llc.com Logo
Realign
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Technical expertise and hands-on experience with enterprise-grade Firewall platforms (e.g., Palo Alto Networks, Check Point, Cisco ASA/FTD).
  • Knowledge and practical experience with Web Proxy solutions (e.g., Zscaler, Forcepoint/Websense, Blue Coat/Symantec ProxySG).
  • Understanding of network protocols (TCP/IP, DNS, HTTP/S, VPNs) and network security concepts (e.g., IDS/IPS, VPN, NAT, load balancing).
  • Proficiency in analyzing network traffic and logs to identify security incidents, troubleshoot connectivity issues, and optimize performance.
  • Experience with scripting (e.g., Python, PowerShell) for automation of security tasks is a plus.
  • Excellent problem-solving, analytical, and diagnostic capabilities.
  • Strong communication and interpersonal skills, with the ability to articulate complex technical concepts clearly to diverse audiences.
  • Ability to work independently as an SME and as part of a larger technical team.
  • Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related engineering field.
  • Minimum of 3-5 years of dedicated experience in Network Security Engineering.
Job Responsibility
Job Responsibility
  • Act as the primary SME for all Web Proxy (e.g., Zscaler, Forcepoint, Blue Coat) and Firewall (e.g., Palo Alto Networks, Check Point, Cisco ASA) rule sets and configurations
  • Design, implement, and maintain complex firewall rules and web proxy policies to enforce security controls and meet divestiture requirements
  • Perform routine maintenance, updates, and optimization of existing web proxy and firewall rules, ensuring adherence to security best practices and compliance standards
  • Provide advanced troubleshooting and incident response support for network security issues related to web proxy and firewall configurations
  • Collaborate with network engineering, application, and security operations teams to ensure proper integration and functionality of security devices during the divestiture process
  • Assist in the planning and execution of network segmentation and access control list (ACL) migration strategies for separating entities
  • Develop and maintain comprehensive documentation for network security configurations, policies, and operational procedures
  • Participate in security audits and provide expert guidance on web proxy and firewall capabilities
  • Fulltime
Read More
Arrow Right

Video Retention System (VRS) Application SME

We are seeking an experienced Axon Architect / Engineer to support a Federal Gov...
Location
Location
United States , Arlington
Salary
Salary:
87120.00 - 181500.00 USD / Year
nttdata.com Logo
NTT DATA
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum 6 years of experience architecting and integrating Axon ecosystem technologies in a public safety environment
  • Bachelor's degree, One-and-one-half (1.5) years of additional experience can substitute for one (1) year of a typical degree program
  • Ability to obtain a Public Trust clearance
Job Responsibility
Job Responsibility
  • Design and implement end-to-end Axon ecosystem architectures including video ingestion, secure storage, retention enforcement, and digital evidence lifecycle management
  • Architect secure integrations between Axon Evidence and federal Records Management Systems (RMS), Computer Aided Dispatch (CAD), and investigative platforms
  • Develop retention schedules and legal hold processes aligned with federal records management statutes and client policies
  • Lead hybrid and secure cloud integration strategies within federal security frameworks (FedRAMP-aligned environments where applicable)
  • Oversee device lifecycle management including firmware updates, deployments, and system upgrades
  • Conduct operational workflow assessments within law enforcement divisions to optimize evidence intake, categorization, sharing, and disclosure processes
  • Analyze storage utilization trends, chain-of-custody metrics, and compliance reporting data
  • Develop executive dashboards and performance metrics to support leadership decision-making
  • Translate investigative and operational requirements into technical solution roadmaps and implementation plans
  • Support federal audits, OIG reviews, legal discovery, and FOIA requests with detailed analytical documentation
What we offer
What we offer
  • Medical, dental, and vision insurance with an employer contribution
  • Flexible spending or health savings account
  • Life and AD&D insurance
  • Short and long term disability coverage
  • Paid time off
  • Employee assistance
  • Participation in a 401k program with company match
  • Additional voluntary or legally-required benefits
  • Fulltime
Read More
Arrow Right

Product Manager (Quantum-safe Cryptographic Inventory)

Palo Alto Networks is hiring a visionary Product Manager to lead the development...
Location
Location
United States , Santa Clara
Salary
Salary:
148700.00 - 240525.00 USD / Year
paloaltonetworks.com Logo
Palo Alto Networks
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 3+ years of Technical Architect or Product Management experience in Cybersecurity, specifically within Network Security, PKI, or Cloud Security
  • Proven experience building SaaS applications that deliver a great user experience on massive-scale logging and data platforms (e.g., Snowflake, BigQuery, or similar)
  • Deep knowledge of classical cryptography: SSL/TLS, IPsec, digital certificates (PKI), and algorithms such as RSA, ECC, and Diffie-Hellman
  • An MS or MBA from a top-tier institution
  • Familiarity with Post-Quantum Cryptography (PQC) NIST standards (e.g., ML-KEM, ML-DSA) and the challenges of hybrid key exchanges
  • Documented track record of launching and scaling enterprise-grade security products from '0-to-1' to significant annual recurring revenue (ARR)
  • Experience acting as a subject matter expert or contributor in global standards bodies (e.g., NIST, NCCoE, CISA)
  • Strong understanding of network infrastructure concepts including Layer 7 inspection, App-ID, SSL Decryption, and next-generation firewall (NGFW) architectures
  • Bachelor’s degree in Computer Science, Mathematics, Physics, or a related Engineering field
Job Responsibility
Job Responsibility
  • Establish the strategic vision and multi-year roadmap for the Crypto-Resilience Engine and Post-Quantum Cryptography (PQC) migration, aligning with global standards
  • Drive the end-to-end development and communication of the product roadmap to key customers and internal stakeholders, prioritizing the 'Visibility Journey' for core asset classes
  • Manage the development of first-in-class features, including Cipher Translation Proxy, AI-Powered Prioritization for critical assets, and AI Canvas Visualizations for executive reporting
  • Champion the future of cryptographic agility, transforming our offering into an end-to-end management solution for the customer's entire cryptography lifecycle
  • Proactively collaborate with Product Marketing, Sales, and Engineering teams to build custom integrations and scale the subscription-based service
  • Monitor and leverage product telemetry from the Strata Logging Service (SLS) to quantify risk reduction and prove the ROI of the PQC transition to board-level stakeholders
  • Translate highly technical cryptographic concepts into business risk and financial impact for C-level executives and other non-technical audiences
What we offer
What we offer
  • restricted stock units
  • bonus
  • Fulltime
Read More
Arrow Right