Senior Cyber Security Analyst - RMF & Linux Security Onsite

MANTECH; Virginia Beach (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

MANTECH is seeking a Senior Cyber Security Analyst to join the team in Virginia Beach, VA, onsite. You will support the AES team in RMF activities, focusing on security control implementation, assessment, and continuous monitoring for Linux and Windows environments.

Responsibilities include RMF execution prep, STIG-based control assessments, eMASS package management, SLCM, and security documentation. Must hold US citizenship with active clearance or eligibility.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field and 8+ years of combined experience in RMF processes and secure system engineering in DoD environments OR High School Diploma and 11 years of combined experience in RMF processes and secure system engineering in DoD environments
• Certified Information Systems Security Professional (CISSP) certification
• Security+ CE certification with ACAS and eMASS experience
• Experience with Linux and/or Windows
• Expertise and hands-on experience in applying DISA STIGs
• Hands-on experience with eMASS for RMF package management, POA&M maintenance, and risk assessment

Responsibilities

• Prepare for Risk Management Framework (RMF) execution and perform system categorization by conducting comprehensive mission analysis, defining the authorization boundary with detailed network diagrams, hardware/software inventories, and data flow documentation. Determine mission criticality and apply relevant overlays to establish the appropriate security control baseline per NIST SP 800-53 Rev 5 and DoD/Navy policy
• Select, tailor, implement, and assess security controls using DISA STIGs (with emphasis on Linux platforms), SRGs, SCAP, ACAS/Nessus vulnerability scans, and NIST SP 800-53A Assessment Procedures. Perform hands-on configuration, hardening, log analysis, and remediation on Linux systems, while applying equivalent controls and STIGs to Windows endpoints. Execute testing, validate configurations and access controls, document implementation status, test results, and evidence in eMASS, and manage POA&M entries with complete risk analysis
• Support system authorization by maintaining a complete and accurate RMF package in eMASS, including the SSP, POA&M, and supporting documentation. Coordinate workflow actions for Authorizing Official decision-making
• Conduct continuous monitoring by implementing the System Level Continuous Monitoring (SLCM) Strategy, with focus on Linux system logs and security events alongside Windows endpoint monitoring
• Conduct Annual Security Reviews (ASRs) and update the System Security Plan (SSP) and POA&M to reflect changes in risk posture
• Provide guidance on RMF compliance, risk management, and security strategies across all RMF steps.
• Advise leadership on emerging threats, control gaps, and mitigation priorities, particularly for Linux environments
• Retire and decommission systems at end-of-life. Execute data sanitization per DoD 5220.22-M, hardware disposition, and documentation closeout

Skills

RMF processes

Secure system engineering

Linux

Windows

eMASS knowledge

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related field

High School Diploma with 11 years experience in RMF processes and secure system engineering in DoD environments

Tools

eMASS

ACAS/Nessus

DISA STIGs

Job description

MANTECH is seeking a Senior Cyber Security Analyst to join the team in Virginia Beach, VA, onsite. You will support the AES team in RMF activities, focusing on security control implementation, assessment, and continuous monitoring for Linux and Windows environments.

Responsibilities include RMF execution prep, STIG-based control assessments, eMASS package management, SLCM, and security documentation. Must hold US citizenship with active clearance or eligibility.