Cybersecurity Ops Analyst

Saic; Panama City Beach (FL); On-site; USD 85,000 - 120,000; Full time

Job summary

SAIC is seeking a Cybersecurity Ops Analyst to support the JEXC2 Program in Panama City, FL. You will maintain the security posture of authorized systems, ensure RMF compliance, and actively participate in the RMF lifecycle.

You will work with eMASS, DADMS, and vulnerability scanning tools, serving as a VRAM SME and preparing security documentation. DoD policy adherence and an active Secret Clearance are required.

Qualifications

• Bachelor's degree required or 4 additional years of relevant experience in lieu of degree.
• 2+ years of cybersecurity or information assurance experience with RMF.
• DoD 8570 IAT Level II certification (e.g., Security+, GSEC, SSCP, CCNA Security).
• Experience with eMASS and vulnerability scanning tools (ACAS/Nessus).
• Strong understanding of DoD cybersecurity policies and DISA STIGs.
• Active Secret Clearance.

Responsibilities

• Maintain POA&M and lifecycle updates (eMASS related).
• Validate eMASS/DITPR-DON records and DADMS compliance.
• Serve as VRAM SME, manage VRAM data and remediation actions.
• Prepare MFR and SAR for RMF Use Case changes.
• Prepare and route FISMA documents (ASR, SCT, Contingency testing).
• Participate in engineering peer-reviews and review ECRs for cybersecurity requirements.
• Monitor system changes against cybersecurity compliance.
• Track IAVM bulletins and maintain CSWF Baseline certifications.

Skills

RMF Knowledge

Vulnerability Management

Cybersecurity Operations

Documentation

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

4 years of experience in lieu of degree

Tools

eMASS

ACAS/Nessus

DADMS

DISA STIGs

Job description

Description

SAIC is searching for aCybersecurity Ops Analyst to join our team supporting the JEXC2 Program, based in Panama City, FL.

In this critical role, you will be responsible for maintaining the security posture of authorized systems, ensuring compliance with DoD cybersecurity policies and regulations, and actively participating in the Risk Management Framework (RMF) lifecycle. This position requires a strong understanding of cybersecurity principles, excellent technical skills, and the ability to work both independently and collaboratively within a dynamic environment, supporting Echelon III cybersecurity activities and contributing to the overall security of our organization.

Responsibilities

• 1.Maintain authorized systems’ Plan of Action and Milestones (POA&M) throughout the life cycle (eMASS POA&M Updates, Accreditation Follow-on (ACF), Request submissions, etc.).
• 2.Ensure eMASS/DITPR-DON records are maintained and up-to-date. Validate all system software against Department of Navy Application and Database Management System (DADMS).
• 3.Serve as the Vulnerability Remediation Asset Manager (VRAM) Subject Matter Expert (SME), managing VRAM uploads, validating vulnerability remediation data, and coordinating required actions to maintain system cybersecurity compliance.
• 3.Prepare/review Memorandum for The Record (MFR) and Security Assessment Reports (SAR) for systems requiring baseline change modifications (RMF Use Cases).
• 4.Prepare, validate, and route Federal Information Security Management Act (FISMA) documentation (Annual Security Review (ASR), Security Control Tests (SCT), and Contingency Plan control testing).
• 6. Participate in engineering peer-reviews. Review Engineering Change Request (ECR) documents for cybersecurity compliance requirements (DISA STIGs, National Security Agency (NSA), National Institute of Standards and Technology (NIST) and/or Commercial best practice configuration guidance).
• 6.Maintain situational awareness of all proposed system changes and ensure that all proposed system minor, major or tech refresh updates are vetted against cybersecurity compliance requirements.
• 7.Track/monitor Vulnerability Remediation Asset Manager (VRAM) for Information Assurance Vulnerability Management (IAVM) bulletins and respond as needed.
• 8.Maintain approved Cybersecurity Workforce (CSWF) Baseline industry certifications in accordance with cyber directives

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field. 4 additional years of exerpeince in lieu of degree.
• 2+ years of experience in cybersecurity or information assurance roles with direct experience implementing and maintaining systems under the Risk Management Framework (RMF).
• DoD 8570 IAT Level II certification (e.g., Security+, GSEC, SSCP, CCNA Security).
• Experience with eMASS and vulnerability scanning tools (e.g., ACAS/Nessus).
• Strong understanding of DoD cybersecurity policies and procedures and DISA STIGs.
• Active Secret Clearance