Cyber Operations Support Specialist

MANTECH; Frederick (MD); Hybrid; USD 90,000 - 130,000; Full time

Job summary

MANTECH in Fort Detrick, MD is seeking a Cyber Operations Support Specialist to strengthen our medical logistics cybersecurity program. The role focuses on RMF activities, eMASS artifacts, and ATO readiness to protect mission-critical health IT systems.

You will perform vulnerability scanning with ACAS, manage STIG compliance, and develop POA&Ms while communicating risk clearly to technical and non-technical stakeholders.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, Data Science, or IS (or 6 years with a qualifying cert).
• 3+ years in RMF, cybersecurity, or information assurance for enterprise programs.
• Experience executing DoW RMF processes and maintaining eMASS/ATO lifecycles.
• Hands-on ACAS scanning, findings analysis, and POA&M development.
• Strong written and verbal communication for technical risk briefing.

Responsibilities

• Drive RMF activities to preserve system authorization and security posture.
• Manage RMF package lifecycles and authorization artifacts in eMASS.
• Execute enterprise vulnerability scans using ACAS and coordinate remediation.
• Maintain system hardening with DISA STIGs across Linux and Windows.
• Develop POA&Ms with risk statements and milestones.
• Support security assessments, risk reviews, IV&V efforts.
• Deliver risk briefs to teams and leadership for cybersecurity decisions.

Skills

RMF

Cybersecurity

Information Assurance

Vulnerability Scanning

POA&M

ACAS

eMASS

DISA STIGs

STIG Viewer

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Data Science, or Information Systems

6 years of relevant experience with qualifying certification (Security+, CySA+, CCSP, Cloud+, GICSP, GISF, GSEC, CISSP-ISSEP, CISSO, FITSP-O, GCLD, GCSA, GSNA, RCCE Level 1)

Tools

ACAS

eMASS

DISA STIGs

STIG Viewer

Job description

MANTECH seeks a motivated, career- and customer-oriented Cyber Operations Support Specialist to join our team in Fort Detrick, MD. This is a hybrid position with 3 days onsite and 2 days remote.

Join a high-impact Department of War (DoW) medical logistics program dedicated to supporting mission-critical healthcare systems. In this role, you will play a key part in protecting enterprise information systems, driving continuous monitoring, managing Authorization to Operate (ATO) packages, and safeguarding critical health IT infrastructure.

Responsibilities Include But Are Not Limited To

• Drive continuous monitoring and Risk Management Framework (RMF) activities to preserve system authorization and elevate the overall security posture of mission-critical medical logistics systems.
• Manage RMF package lifecycles, control implementation, and authorization artifacts within eMASS to ensure full compliance with DoW cybersecurity standards.
• Execute enterprise vulnerability scans using ACAS, analyze security findings, and collaborate with engineering teams to formulate and track remediation strategies.
• Maintain system hardening and configuration compliance using DISA STIGs and STIG Viewer across Linux and Windows environments.
• Develop and manage Plan of Action and Milestones (POA&Ms), clearly defining risk statements, corrective milestones, resource needs, and closure evidence.
• Support security control assessments, risk assessments, annual reviews, and Independent Verification and Validation (IV&V) efforts.
• Deliver concise risk reports and briefings to technical teams, program leadership, and government stakeholders to enable informed cybersecurity decisions.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Science, or Information Systems; OR 6 years of relevant experience combined with one qualifying certification (Security+, CySA+, CCSP, Cloud+, GICSP, GISF, GSEC, CISSP-ISSEP, CISSO, FITSP-O, GCLD, GCSA, GSNA, or RCCE Level 1).
• 3+ years of relevant experience in RMF, cybersecurity, or information assurance supporting enterprise-scale programs.
• Proven experience executing DoW RMF processes, maintaining eMASS packages, managing ATO lifecycles, and supporting IV&V activities.
• Hands‑on experience with ACAS vulnerability scanning, findings analysis, and POA&M development and tracking.
• Strong written and verbal communication skills with a demonstrated ability to translate technical security risks into clear briefings for non‑technical stakeholders.

Preferred Qualifications

• Experience supporting Defense Health Agency (DHA), Military Health System (MHS), or medical logistics IT systems.
• Active certification such as Security+, CISSP, CAP, CISM, or equivalent.
• Familiarity with security configuration standards for Red Hat Enterprise Linux 9/10, Windows Server 2022, and Windows 11.
• Background supporting DevSecOps, Agile, or hybrid/cloud enterprise architectures.

Clearance Requirements

• Must be a U.S. Citizen and hold a current Public Trust clearance (or higher), subject to a Tier 2 (T2) investigation for DoD CAC eligibility.

Physical Requirements

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations.