Cyber Engineer

SAIC; Suffolk (VA); On-site; USD 80,000 - 120,000; Full time

Job summary

SAIC in Suffolk, VA seeks a Cyber Engineer with experience in US Navy IT networks to support RMF, IAVM management, STIG compliance, and vulnerability assessments across DoD infrastructure. You will coordinate RMF documentation and perform security scans.

Requirements include RMF background, Security+ and DoD tools like eMASS and DADMS, and an Active Secret clearance. Role entails ensuring compliance and reporting for cyber security programs and program support activities.

Qualifications

• Bachelor’s degree or higher with cyber/IT support experience.
• Experience with RMF policy development, control testing, POA&M, and CM.
• Experience using DoD tools like eMASS and DADMS; cybersecurity assessments.
• Broad IT operations knowledge across networks, OSs and systems.
• Active Secret clearance required; Security+ or equivalent certification preferred.

Responsibilities

• Ensure IAVM, CTOs, STIG compliance and reporting.
• Maintain compliance with IAVM mandated timeframes for the network.
• Identify cyber security requirements prior to customer migration.
• Perform DADMS and DITPR-DON adds and renewals.
• Maintain security compliance for network apps and software; respond to IAVMs, EXORS, OPORDs, and CTOs; track patches.
• Maintain infrastructure IAVM compliance timeframes.
• Provide responses to cyber security and system Data Calls.
• Provide VRAM data to ensure compliance with directives and mitigate vulnerabilities.
• Create and maintain RMF A&A packages for common control provider and information system owner packages.
• Create and maintain packages in eMASS.
• Assist government leads with RMF documentation (ERs, IT Interconnection, SoMs, Risk Assessments, POAMs).
• Track new STIG releases and implement deltas; participate in STIG implementation.
• Assist with Audit Readiness reporting per Navy scoring cards.
• Develop processes for security of the infrastructure.
• Assist with IAVM requirements reporting.
• Define security controls for systems and networks; document A&A processes.
• Execute security scans per DoD/DoN timeframes.
• Provide vulnerability assessment scans upon request.
• Evaluate and implement automated continuous monitoring for RMF and Cybersecurity.

Skills

RMF experience

Security+

Active Secret clearance

eMASS

DADMS

STIGs

CCNA/CCNP

Broad IT operations

Education

Bachelor’s degree

Tools

eMASS

DADMS

STIG review tools

Job description

Description

SAIC is looking for a Cyber Engineer with experience in US Navy IT networks.

Job Duties

• Ensure Information Assurance Vulnerability Alert Management (IAVM), Communications Task Orders (CTOs), STIG compliance and reporting.
• Maintain compliance with IAVM mandated timeframes associated with the network.
• Identify cyber security requirements prior to customer migration.
• Perform DADMS and DITPR-DON adds and renewals.
• Maintain security compliance for network applications and software. This includes responding to all IAVMs, EXORS, OPORDs, and CTOs for infrastructure and tracking of patches in an enterprise environment.
• Maintain compliance with IAVM mandated timeframes associated with the infrastructure.
• Providing support to respond to cyber security and system Data Calls.
• ProvideVulnerability Remediation AssetManager (VRAM), datato ensure compliance to technical directives and mitigate against known vulnerabilities.
• Create, attain, manage, and maintain Assessment and Authorization (A&A) packages under RMF for common control provider and information system owner packages. A common control provider is responsible for common controls (i.e., security controls inherited by information systems).
• Create and maintain packages in eMASS.
• Assist government team leads when required with the creation of RMF required documentation (External Connection requirements, IT Interconnection Agreements, Security Memorandums of Agreement, Security Memorandums of Record, Risk Assessments, Vulnerability Analysis, POAMs and IAVM program support and guidance).
• Track all new STIG releases along with their deltas and participate in STIG implementation.
• Assist government team leads when required with reporting on Audit Readiness capability in accordance with Navy customer scoring cards.
• Support the development for a process for maintaining and enforcing security for the infrastructure.
• Assist government team leads when required with IAVM requirements reporting.
• Support security/IA requirements definition by identifying security controls to be put in place for systems and networks. Recommend processes for maintaining and enforcing security/Information Assurance for identified systems, networks and systems in support of security engineering. Document the A&A requirements and processes in support of security engineering.
• Execute security scans in compliance with DoD/DoN standard timeframes for infrastructure and customer systems.
• Assist government team leads when required with reporting on customer hosted systems accreditation status.
• Provide vulnerability assessment scans to the government team leads upon request.
• Evaluate, recommend, integrate and implement innovative and automated continuous monitoring capabilities in support of RMF and Cyber Security compliance.

Qualifications

Required Education and Experience

• Bachelor’s degree with two or more years’ experience supporting an IT Enterprise environment in a cyber, system administration, engineering or management capacity. Additional years of experience accepted in lieu of degree.
• Requires experience with US Navy’s Risk Management Framework (RMF) to include policy development, control testing, POA&M management, and Configuration Management.
• Experience using MS office tools such as Excel, Word and Visio; working with DoD tools such as eMASS and DADMS; working with security engineers to review compliance scans; and performing cybersecurity assessments using standards such as CIS Benchmarks, STIGS, etc.
• Broad technical experience related to IT operations, networks, OSs, and system administration.
• Extensive knowledge base in Information Security / Information Assurance / Cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
• Security+ and one of the following:
  • CCNA, CCNP, Enterprise Linux, VMWare Professional, Windows 2019 or higher or VMWare Certified Associate. Six-month waiver authorized to obtain.
• Required security clearance: Active Secret clearance.

Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.