Cyber Security Analyst II

Scientific Research Corporation; North Charleston (SC); On-site; USD 90,000 - 120,000; Full time

Job summary

Scientific Research Corporation is seeking a detail-oriented Cyber Tester to audit security controls, perform RMF/A&A activities, and manage vulnerability data across Windows and Linux environments. The role includes hands-on use of ACAS, Nessus, STIG tools, and eMASS for DoD/DON compliance, with travel up to 15% and a focus on customer-facing communication.

The candidate will contribute to continuous monitoring, risk assessment, and RMF documentation while supporting ATO processes and VRAM data

Qualifications

• Detail-oriented Cyber Tester with strong Windows knowledge (AD, GPO, PowerShell) and Linux/RHEL familiarity.
• Experience executing automated vulnerability scans with ACAS and Tenable Nessus.
• Perform STIG checks and SCAP tooling to evaluate systems against DoD standards.
• Use STIG Viewer to manage compliance checklist files for system artifacts.
• Experience with eMASSer to process vulnerability data and STIG checklists.
• Diagnose scanning failures and resolve credentialed scan issues across environments.
• Review scan outputs, assess risk, and prepare RMF packages for stakeholders.
• Excellent customer management and communication.

Responsibilities

• Auditing of system security controls, STIG configurations, and ACAS scans.
• Supporting the Cyber Test process for system accreditation and RMF processes.
• Executing continuous monitoring of systems including vulnerability analysis and RMF ATO support.
• Creating and maintaining POA&Ms and tracking system security posture.
• Performing A&A duties within RMF with DoN RMF process knowledge and eMASS.
• Conducting Cyber Security analysis, remediation, and monitoring to ensure DoD/DON policy compliance.
• Working within VRAM for daily/weekly tasks including EXORD, FRAGO, CTO concurrence.
• Reviewing site scan uploads and verifying asset compliancy.
• Compiling and analyzing VRAM data and reporting findings to Team Lead.

Skills

Windows OS

Active Directory

PowerShell

Linux/Unix OS

SSH

Privilege escalation

VMware

Customer management

Education

Security+ CE certification

Linux+/RHEL/Microsoft/CCNA certifications

Tools

ACAS

Tenable Nessus

STIG Viewer

eMASSter

Job description

Description

• Auditing of system security security controls, STIG configurations, and ACAS scans
• Supporting the Cyber Test process for system accreditation and Risk Management Framework (RMF) processes
• Executing continuous monitoring of systems to include vulnerability analysis, IAVM reporting, and validation of security controls in support of ATO requirements
  • The information gathered during these activities will be used to create and maintain associated POA&Ms and to track the systems security posture
• Performing Assess and Authorize (A&A) duties within Risk Management Framework (RMF) with knowledge of Department of Navy Risk Management Framework Process Guide, NIST Special Publications, Enterprise Mission Assurance Support Service (eMASS)
• Conducting Cyber Security (CS) analysis, mitigation, remediation, and monitoring to ensure compliance with applicable DoD and Department of the Navy (DON) policies, procedures, and regulations
• Working within VRAM to perform daily/weekly activities to include but are not limited to EXORD, FRAGO, and CTO concurrence and acceptance
• Reviewing of site scan uploads and verification of asset compliancy
• Compiling and analysis of VRAM data and reporting findings to Team Lead

#LI-KS1

Requirements

• Detail-oriented and analytical Cyber Tester with strong knowledge of Windows OS (Active Directory, Group Policy Objects, PowerShell), Linux/Unix OS (RHEL configuration, SSH, privilege escalation, file permissions), and Virtualization (VMware vSphere/ESXi)
• Execute, monitor, and analyze automated vulnerability and compliance scans utilizing ACAS (Assured Compliance Assessment Solution) / Tenable Nessus
• Perform rigorous Security Technical Implementation Guide (STIG) checks and run Security Content Automation Protocol (SCAP) tools to evaluate operating systems, network devices, and applications against federal/defense standards
• Utilize STIG Viewer (v2 and v3) to create, import, edit, and consolidate .ckl and .cklb compliance checklist files for system artifacts
• Utilize eMASSter (and related scripting frameworks) to ingest, process, parse, and aggregate vulnerability scan data, STIG checklists, and ACAS .nessus outputs
• Diagnose and resolve complex issues related to scanning failures, credentialed scan errors, network access blocks, and tool misconfigurations across diverse environments
• Review scan outputs, filter out false positives, assess risk levels, and generate comprehensive compliance reports for stakeholders and RMF (Risk Management Framework) packages
• This position requires a highlevel of customer management and communication
• Minimum Security+ CE certification

Desired Skills

• VRAM (Vulnerability Remediation Asset Manager) Familiarity:

  • Export compliant scan results (.nessus or certified XML formats) from ACAS SecurityCenter/Tenable.sc to VRAM
  • Format, validate, and upload vulnerability scan data into VRAM, ensuring proper mapping of assets
  • Monitor and analyze VPH (Vulnerability Priority Health) numbers, tracking metrics for Relevant Assets (RA), Non-Relevant Assets (NRA), and open vulnerabilities
  • Identify negative performance trends, high-risk delta spikes, and stale data to brief leadership on the command's current vulnerability posture
  • Process and track IAVMs (Information Assurance Vulnerability Management) and FCB (Field Change Bulletin) notices
• Experience being a Navy Qualified Validator
• OS certification (Linux+, RHEL, Microsoft, Cisco CCENT/CCNA)

Clearance Information

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY

Travel Requirements

• Up to 15% travel

About Us

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

EEO

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.

Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact [e-mail] for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.