Senior Cyber Security Analyst

MANTECH; Virginia Beach (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

MANTECH seeks a Senior Cyber Security Analyst to join the Advance Electronic Systems team in Virginia Beach, VA. This onsite role focuses on RMF implementation, security control assessment, and continuous monitoring with emphasis on Linux and Windows environments.

You will manage RMF packages in eMASS, perform vulnerability scans with ACAS/Nessus, and advise leadership on risk mitigation and compliance across DoD policies.

Qualifications

• Bachelor’s degree in IT, CS, cybersecurity, information systems, or related field.
• 8+ years of RMF and secure system implementation in DoD environments, with 4+ years on Linux.
• CISSP certification.
• Experience with DISA STIGs.
• Experience with operating systems including Linux, Windows, and RTOS variants.
• Security+ CE certification with ACAS and eMASS training.
• Hands-on eMASS for RMF package management, POA&M, and risk assessment.
• Proficiency with ACAS/Nessus vulnerability scanning and remediation.

Responsibilities

• Prepare RMF execution and system categorization with network diagrams, inventories, and data flow documentation.
• Configure, harden, test, and remediate Linux and Windows endpoints per STIGs and NIST 800-53 controls.
• Maintain RMF packages in eMASS (SSP, POA&M, evidence) and coordinate actions for Authorizing Official decisions.
• Implement and monitor System Level Continuous Monitoring (SLCM) with focus on Linux logs and Windows security events.
• Update SSP and POA&M reflecting changes in risk posture; provide RMF guidance to leadership.
• Retire and decommission systems with data sanitization and proper disposition.

Skills

RMF processes

Linux systems

Windows environments

eMASS

DISA STIGs

ACAS/Nessus

Risk assessment

Education

Bachelor’s degree in Information Technology / Cybersecurity

Tools

DISA STIGs

SCAP

ACAS/Nessus

eMASS

Job description

MANTECH seeks a motivated, career and customer-oriented Senior Cyber Security Analyst to join our team in Virginia Beach, VA. This is a onsite position.

As a Senior Cyber Security Analyst, you will provide direct support to the Advance Electronic Systems (AES) team and its customers in support of Risk Management Framework (RMF) activities. This role focuses on security control implementation, assessment, continuous monitoring, and RMF compliance, with primary emphasis on Linux systems and supporting knowledge of Windows environments. You will serve as the point of contact for all cybersecurity-related matters, including security control implementation, documentation, and compliance activities.

Responsibilities Include, But Are Not Limited To

• Prepare for Risk Management Framework (RMF) execution and perform system categorization by conducting comprehensive mission analysis, defining the authorization boundary with detailed network diagrams, hardware/software inventories, and data flow documentation. Determine mission criticality and apply relevant overlays to establish the appropriate security control baseline per NIST SP 800-53 Rev 5 and DoD/Navy policy.
• Select, tailor, implement, and assess security controls using DISA STIGs (with emphasis on Linux platforms), SRGs, SCAP, ACAS/Nessus vulnerability scans, and NIST SP 800-53A Assessment Procedures. Perform hands‑on configuration, hardening, log analysis, and remediation on Linux systems, while applying equivalent controls and STIGs to Windows endpoints. Execute testing, validate configurations and access controls, document implementation status, test results, and evidence in eMASS, and manage POA&M entries with complete risk analysis.
• Support system authorization by maintaining a complete and accurate RMF package in eMASS, including the SSP, POA&M, and supporting documentation. Coordinate workflow actions for Authorizing Official decision‑making.
• Conduct continuous monitoring by implementing the System Level Continuous Monitoring (SLCM) Strategy, with focus on Linux system logs and security events alongside Windows endpoint monitoring.
• Conduct Annual Security Reviews (ASRs) and update the System Security Plan (SSP) and POA&M to reflect changes in risk posture.
• Provide guidance on RMF compliance, risk management, and security strategies across all RMF steps. Advise leadership on emerging threats, control gaps, and mitigation priorities, particularly for Linux environments.
• Retire and decommission systems at end‑of‑life. Execute data sanitization per DoD 5220.22‑M, hardware disposition, and documentation closeout.

Minimum Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field
• 8+ years of combined experience in RMF processes and secure system implementation and maintenance in DoD environments, with at least 4+ years of hands‑on experience securing Linux systems and working knowledge of Windows environments.
• Certified Information Systems Security Professional (CISSP) certification
• Experience with DISA STIG’s
• Experience with utilizing operating systems, including real‑time operating systems. Examples includes: QNX, Linux, VXWorks, LynxOS, Microsoft XP embedded, Microsoft IoT, and Microsoft Windows.
• Security+ CE certification with documented ACAS and eMass training
• Hands‑on experience with eMASS for RMF package management, POA&M maintenance, and risk assessment.
• Proficiency with ACAS/Nessus vulnerability scanning, analysis, and remediation of findings from DISA STIGs, SRGs, or SCAP.

Preferred Qualifications

• Familiarity with network topology documentation in air‑gapped environments.
• 2+ years executing full SDLC in DoD environments.
• Certified in CompTIA Linux +, Governance, Risk and Compliance (CGRC), CompTIA SecurityX

Clearance Requirements

• US Citizenship required and an active Secret Security Clearance with ability to obtain Top Secret if required.

Physical Requirements

• Must be able to remain in a stationary position: 10%.
• Frequently communicates with co‑workers, management, and customers, which may involve delivering presentations