Cyber Operations Support Specialist

ManTech; Frederick (MD); Hybrid; USD 120,000 - 180,000; Full time

Job summary

MANTECH International Corporation seeks a motivated Cyber Operations Support Specialist to join our Fort Detrick, MD team in a hybrid role with 3 days onsite and 2 days remote. You will support a DoW medical logistics program, focusing on protecting health IT and enterprise information systems.

The role emphasizes RMF, ATO artifacts, vulnerability management with ACAS, and IV&V activities. Collaboration with engineering and government stakeholders is essential for informed cybersecurity

Qualifications

• Bachelor’s degree or 6 years of relevant experience with qualifying certification.
• 3+ years of RMF, cybersecurity, or information assurance experience on enterprise programs.
• DoW RMF processes, eMASS, ATO lifecycles, and IV&V support experience.
• ACAS vulnerability scanning, findings analysis, and POA&M development.

Responsibilities

• Drive continuous monitoring and RMF activities to preserve system authorization and strengthen security posture.
• Manage RMF package lifecycles and authorization artifacts in eMASS.
• Perform enterprise vulnerability scans with ACAS and coordinate remediation with engineering teams.
• Maintain Linux/Windows configuration hardening using DISA STIGs and STIG Viewer.
• Develop and track Plan of Action and Milestones (POA&Ms) with risk statements and milestones.
• Support security control assessments, risk assessments, and IV&V activities.
• Deliver concise risk reports and briefings to government stakeholders.

Skills

RMF

ACAS

IV&V

POA&M

eMASS

ATO lifecycle

Risk communication

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Science, or Information Systems

Tools

ACAS

eMASS

DISA STIGs

STIG Viewer

Job description

MANTECH seeks a motivated, career- and customer-oriented Cyber Operations Support Specialist to join our team in Fort Detrick, MD . This is a hybrid position with 3 days onsite and 2 days remote.

Join a high-impact Department of War (DoW) medical logistics program dedicated to supporting mission-critical healthcare systems. In this role, you will play a key part in protecting enterprise information systems, driving continuous monitoring, managing Authorization to Operate (ATO) packages, and safeguarding critical health IT infrastructure.

Responsibilities include but are not limited to:

• Drive continuous monitoring and Risk Management Framework (RMF) activities to preserve system authorization and elevate the overall security posture of mission-critical medical logistics systems.

• Manage RMF package lifecycles, control implementation, and authorization artifacts within eMASS to ensure full compliance with DoW cybersecurity standards.

• Execute enterprise vulnerability scans using ACAS, analyze security findings, and collaborate with engineering teams to formulate and track remediation strategies.

• Maintain system hardening and configuration compliance using DISA STIGs and STIG Viewer across Linux and Windows environments.

• Develop and manage Plan of Action and Milestones (POA&Ms), clearly defining risk statements, corrective milestones, resource needs, and closure evidence.

• Support security control assessments, risk assessments, annual reviews, and Independent Verification and Validation (IV&V) efforts.

• Deliver concise risk reports and briefings to technical teams, program leadership, and government stakeholders to enable informed cybersecurity decisions.

Minimum Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Science, or Information Systems; OR 6 years of relevant experience combined with one qualifying certification (Security+, CySA+, CCSP, Cloud+, GICSP, GISF, GSEC, CISSP-ISSEP, CISSO, FITSP-O, GCLD, GCSA, GSNA, or RCCE Level 1).

• 3+ years of relevant experience in RMF, cybersecurity, or information assurance supporting enterprise-scale programs.

• Proven experience executing DoW RMF processes, maintaining eMASS packages, managing ATO lifecycles, and supporting IV&V activities.

• Hands-on experience with ACAS vulnerability scanning, findings analysis, and POA&M development and tracking.

• Strong written and verbal communication skills with a demonstrated ability to translate technical security risks into clear briefings for non-technical stakeholders.

Preferred Qualifications:

• Experience supporting Defense Health Agency (DHA), Military Health System (MHS), or medical logistics IT systems.

• Active certification such as Security+, CISSP, CAP, CISM, or equivalent.

• Familiarity with security configuration standards for Red Hat Enterprise Linux 9/10, Windows Server 2022, and Windows 11.

• Background supporting DevSecOps, Agile, or hybrid/cloud enterprise architectures.

Clearance Requirements:

• Must be a U.S. Citizen and hold a current Public Trust clearance (or higher), subject to a Tier 2 (T2) investigation for DoD CAC eligibility.

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations.

MANTECH International Corporation considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.

If you need a reasonable accommodation to apply for a position with MANTECH, please email us at [e-mail] and provide your name and contact information.