Cyber Engineer

SAIC•Suffolk, VA

10h•Onsite

About The Position

SAIC is seeking a Cyber Engineer with experience in U.S. Navy IT networks. The role supports cyber security and Information Assurance compliance for infrastructure, networks, applications, and customer systems. Responsibilities include vulnerability and directive management, Risk Management Framework (RMF) documentation and package maintenance, security assessments, compliance reporting, and development of security processes and continuous monitoring capabilities. The position is full-time, on-site in Suffolk, Virginia, with day-shift hours and approximately 10% travel.

Requirements

Bachelor’s degree and at least two years of experience supporting an IT enterprise environment in a cyber, system administration, engineering, or management capacity; additional experience may substitute for the degree.
Experience with the U.S. Navy’s RMF, including policy development, control testing, POA&M management, and configuration management.
Experience with Microsoft Office tools such as Excel, Word, and Visio.
Experience with DoD tools such as eMASS and DADMS.
Experience working with security engineers to review compliance scans.
Experience performing cybersecurity assessments using standards such as CIS Benchmarks and STIGs.
Broad technical experience related to IT operations, networks, operating systems, and system administration.
Extensive knowledge of Information Security, Information Assurance, or cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
Security+ certification and one of the following: CCNA, CCNP, Enterprise Linux, VMWare Professional, Windows 2019 or higher, or VMWare Certified Associate. A six-month waiver is authorized to obtain the certification.
Active Secret security clearance.

Responsibilities

Manage Information Assurance Vulnerability Alerts (IAVMs), Communications Task Orders (CTOs), STIG compliance, and related reporting.
Maintain compliance with IAVM-mandated timeframes for the network and infrastructure.
Identify cybersecurity requirements before customer migration.
Perform DADMS and DITPR-DON additions and renewals.
Maintain security compliance for network applications and software, including responses to IAVMs, EXORs, OPORDs, and CTOs, and track enterprise infrastructure patches.
Provide support for cybersecurity and system data calls.
Provide Vulnerability Remediation Asset Manager (VRAM) data to support compliance with technical directives and mitigation of known vulnerabilities.
Create, obtain, manage, and maintain RMF Assessment and Authorization (A&A) packages for common control provider and information system owner packages.
Create and maintain packages in eMASS.
Assist government team leads with RMF documentation, including external connection requirements, IT interconnection agreements, security memorandums of agreement and record, risk assessments, vulnerability analyses, POA&Ms, and IAVM program support and guidance.
Track new STIG releases and their changes, and participate in STIG implementation.
Assist government team leads with audit-readiness reporting in accordance with Navy customer scoring cards.
Support development of processes for maintaining and enforcing infrastructure security.
Assist government team leads with IAVM requirements reporting.
Define security and Information Assurance requirements by identifying controls for systems and networks, and recommend processes for maintaining and enforcing security.
Document A&A requirements and processes in support of security engineering.
Execute security scans for infrastructure and customer systems in accordance with DoD/DoN standard timeframes.
Assist government team leads with reporting on customer-hosted system accreditation status and provide vulnerability assessment scans upon request.
Evaluate, recommend, integrate, and implement automated continuous monitoring capabilities to support RMF and cybersecurity compliance.