Operational Cybersecurity

Saic; Augusta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking an Operational Cybersecurity SME to join our Fort Gordon team in Georgia. You will review DISA STIGs, ACAS scans, and AIEA infrastructure configurations, producing remediation guidance and quarterly hardening materials.

The role requires DoD cybersecurity framework experience, STIG/SCAP mastery, and an active TS/SCI with poly eligibility. Travel up to ~10% is expected to support INSCOM G7 requirements.

Qualifications

• 5+ years of hands-on experience with DoD or federal cybersecurity frameworks.
• ACAS Expertise: Practical experience managing Tenable Nessus/SecurityCenter tools.
• eMASS Proficiency: Confident navigating eMASS and managing RMF control checklists.
• STIG & SCAP Mastery: Proven ability to apply STIGs and verify compliance using the STIG Viewer and SCAP tools.
• Active Security+ certification.
• DOD 8140 IAT Level III Certification such as SecurityX / CASP.
• Excellent organizational, written, and oral communication skills.
• Ability to occasionally travel (~10%) in support of INSCOM G7 requirements.

Responsibilities

• Review, comment, and update DISA STIG Checklists in accordance with the Quarterly Build Cycle and provide remediation guidance/instructions.
• Review ACAS scans and compile open plugins for remediation and AFL documentation.
• Review AIEA Infrastructure hosts, software, and configurations; map applicable checklists.
• Generate STIG Hardening Guide with checklist, version, and applicable VM quarterly.
• Provide Cybersecurity expertise at the DoD 8140 IAM II level.
• Demonstrate STIG/SCAP mastery using STIG Viewer and SCAP tools.
• Experience with CI DPED IaaS environment is a plus.

Skills

DoD/federal cybersecurity frameworks

ACAS

eMASS

STIG/SCAP

Security+ certification

DOD 8140 IAT Level III

TS/SCI clearance

Poly clearance eligibility

Travel readiness

Communication skills

Education

Bachelor's degree + 5+ years

Master's degree + 3+ years

PhD + 0 years

Tools

Nessus

SecurityCenter

STIG Viewer

SCAP toolkit

Windows

RHEL

VMware

Job description

Description

SAIC is seeking an Operational Cybersecurity SME to join our team at Fort Gordon, Georgia.

Job Responsibilities:

• Review, provide comments, and update DISA STIG Checklists in accordance with the Quarterly Build Cycle. STIG vulnerabilities marked as opened will be compiled including resolution recommendations/instructions and provided to GISA for review/remediation
• Review and provide comments on ACAS scans in accordance with the Quarterly Build Cycle. Open Plugins will be compiled, provided to GISA for review/remediation. Any Open Plugins that were not closed prior to the Build Release date/shipment will be documented and added to the Anticipated Findings List (AFL) for Cybersecurity to document
• Review the Army Intelligence Enterprise Architecture (AIEA) Infrastructure hosts, software, and configuration; review updated DISA STIG checklists and provide listing of applicable checklists
• Generate STIG Hardening Guide to include checklist, version, and applicable VM on a quarterly basis
• Support shall provide Cybersecurity expertise at the DoD 8140 Information Assurance Manager II Level
• Have experience with Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) review/development, Assured Compliance Assessment Solution (ACAS) scan review, Windows, RHEL, VMware, and other COTs products
• Experience with the Converged Infrastructure (CI) Distributed Processing, Exploitation, Dissemination (DPED) Infrastructure as a Service (IaaS) environment is a plus

Qualifications

Required Education:

• Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience

Required Qualifications:

• 5 years of hands-on experience with DoD or federal cybersecurity frameworks
• ACAS Expertise: Practical experience managing Tenable Nessus/SecurityCenter tools
• eMASS Proficiency: Confident navigating eMASS and managing RMF control checklists
• STIG & SCAP Mastery: Proven ability to apply STIGs and verify compliance using the STIG Viewer and SCAP tools
• Active Security+ certification
• DOD 8140 IAT Level III Certification such as SecurityX / CASP
• Excellent organizational, written, and oral communication skills
• Ability to occasionally travel (~10%) in support of INSCOM G7 requirements

Clearance:

• Candidate must have an active TS/SCI security clearance with ability to obtain a Poly. (Clearance must be listed and active in DISS.)