Defensive Cyber Operations Analyst

Saic; Kittery (ME); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking a Defensive Cyber Operations Analyst to support Portsmouth Naval Shipyard IT programs, actively monitoring for threats with HBSS/SIEM, conducting investigations, and coordinating incident response to maintain secure systems in a on-site role in Kittery, ME.

Responsibilities include RMF lifecycle support, vulnerability management, and assisting Navy RMF/ATO processes, with a focus on DoD cyber standards and best practices.

Qualifications

• RMF process experience and lifecycle adherence for DoD/Navy systems
• Experience obtaining and maintaining Navy ATOs
• Proficiency with DoD tools for vulnerability scans
• Experience maintaining Vulnerability Management (VM) and HBSS
• Skills in incident response and reporting
• Familiarity with SIEM sensor platforms
• Ability to work under supervision on security tasks

Responsibilities

• Scan equipment on PSNS and IMF network for vulnerabilities using DoD tools
• Assist local SysAdmins in maintaining VM control
• Coordinate incident response and reporting processes
• Configure, operate, and maintain HBSS and ensure policy compliance
• Configure and maintain SIEM sensor platforms
• Apply Navy RMF principles to ensure DoD/Navy compliance
• Support documentation for ATOs and RMF activities
• Maintain VM and endpoint compliance on systems
• Provide on-site support including basic network tasks for ship cable maintenance and COMSEC

Skills

RMF process

ATO support

Vulnerability scanning

HBSS / endpoint security

SIEM configuration

Incident response coordination

DoD cybersecurity tools

Education

Bachelor's degree or equivalent experience

Tools

HBSS

SIEM platforms

DoD standard software tools

Job description

Description

SAIC is seeking a Defensive Cyber Operations Analyst to support the Portsmouth Naval Shipyard (PNSY) Information Technology Programs for the Dept of the Navy. This initiative leverages advanced technologies and integrates critical defense systems to optimize ship maintenance through IT applications, systems, and training, ensuring sustained mission success in naval ship maintenance operations.

Work is performed on site in Kittery, ME.

ROLE: Actively monitor, detect, and respond to cybersecurity threats and incidents within an organization. Utilize advanced security tools and technologies, such as Host-Based Security System (HBSS) and Security Information Event Management (SIEM) platforms, to continuously monitor network traffic, identify vulnerabilities, and detect suspicious activities. Conduct thorough investigations of security incidents, implement incident response protocols, and coordinate remediation efforts to mitigate potential risks. Collaborate with IT teams to enforce security policies, deploy updates, and ensure the overall integrity and confidentiality of information systems. Provide expert analysis on emerging threats, recommend proactive security measures, and contribute to the development of robust cybersecurity strategies. Play a critical role in maintaining a secure operational environment by ensuring rapid identification and response to cybersecurity threats. Utilize DoD standard software tools to conduct vulnerability scans and assist local Systems Administrators in maintaining positive Vulnerability Management (VM) control of systems. Additionally, demonstrate expertise in supporting Navy Risk Management Framework (RMF) compliance and the process of obtaining and maintaining Authorization to Operate (ATO) for Navy systems.

RESPONSIBILITIES

• Scan: Utilize DoD standard software tools to conduct vulnerability scans of all equipment on the PSNS and IMF network for vulnerabilities
• Vulnerability Management (VM): Assist local Systems Administrators in maintaining positive VM control of systems under their control
• Incident Response: Assist with the identification, protection, detection, response, and recovery of cybersecurity incidents, and coordinate incident response and reporting processes
• Host-Based Security System (HBSS): Assist with configuring, operating, troubleshooting, and maintaining endpoint security protection technologies inclusive of HBSS; and ensuring compliance with established policies and procedures and higher headquarters guidance
• Security Information Event Management (SIEM): Assist with configuring, operating, troubleshooting, and maintaining sensor platforms
• Risk Management Framework (RMF): Apply Navy RMF principles and processes to ensure that systems comply with DoD and Navy cybersecurity policies and guidelines.
• Authorization to Operate (ATO): Support efforts related to obtaining and maintaining ATOs, including the preparation and submission of required documentation
• NNPP: Assist with maintaining VM and endpoint compliance
• Provide on-site support, including basic network administration, basic network server administration and customer support for ship cable maintenance and repair activities at the PNSY [to] include Communication Security (COMSEC) and a majority of End Device Support items

Qualifications

EDUCATION

Bachelor’s degree at four (4) years of experience, or additional years of experience considered in lieu of degree

REQUIRED EXPERTISE

• Demonstrated experience with the Navy Risk Management Framework (RMF) process and the ability to support the RMF lifecycle to ensure adherence to cybersecurity standards and best practices
• Experience in obtaining and maintaining Authorization to Operate (ATO) for Navy systems
• Proficiency in utilizing DoD standard software tools to conduct thorough vulnerability scans on network equipment
• Experience assisting in the maintenance of positive Vulnerability Management (VM) control and configuring, operating, troubleshooting, and maintaining endpoint security technologies, including Host-Based Security System (HBSS)
• Skills in supporting the identification, protection, detection, response, and recovery of cybersecurity incidents, and coordinating incident response and reporting processes
• Familiarity with configuring and maintaining Security Information Event Management (SIEM) sensor platforms
• Capable of working under the direction and supervision of senior personnel, contributing to maintaining VM and endpoint compliance

REQUIRED CERTIFICATION: CompTIA Security+

REQUIRED CLEARANCE: Active Secret clearance

DESIRED CERTIFICATION: Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.