Cyber Engineer

SAIC•Coronado, CA

1d•Hybrid

About The Position

SAIC is seeking a Cybersecurity Specialist to support a Navy contract in San Diego, CA. This role focuses on Assessment and Authorization (A&A) cybersecurity efforts for the NIWC PAC code 82000, specifically for the Research, Development, Test & Evaluation (RDT&E) network. The Cybersecurity Vulnerability Analyst II will act as a Risk Management Framework (RMF) Subject Matter Expert (SME) for network security architectures, designs, implementations, and operations across three NIWC Pacific RDT&E systems, networks, and applications. The position will also provide engineering and technical support for testing systems, software, tools, and products, identifying operational and functional requirements for new and existing systems, and developing system security approaches that include defining potential threats, vulnerabilities, safeguards, and risk factors. This is a hybrid/remote role, and candidates must be local to San Diego, CA.

Requirements

Must be local to San Diego, CA.

Responsibilities

Perform analysis of cybersecurity directives, policies, and instructions, including Communications Task Orders (CTOs), Fragmentary/Task/Operation Orders (FRAG/TASK/OPORDs), IA Vulnerability Management (IAVM), Public Key Infrastructure (PKI) guidance, ACAS, and STIG requirements.
Ensure configuration, asset, remediation, and mitigation management supports vulnerability management efforts within the DODIN.
Identify and provide guidance on security-relevant configurations for DoD.
Ensure compliance with DoD vulnerability notification and corrective action processes.
Coordinate vulnerability risk reports and assessments within NIWC PAC as required.
Interface with Senior Cybersecurity Engineer and NIWC Pacific supported programs/projects to provide technical consulting/advisory support services for accurate vulnerability management of NIWC Pacific Corporate, Program of Record (POR), operationally supported, and various RDT&E and joint assets to the Navy's Vulnerability Remediation and Asset Management (VRAM) tool or other government-directed tools.
Assist with determining the impact of compliance with directives on the security and operability of the RDT&E network and make recommendations to the government regarding strategies to meet compliance objectives.
Assist with tracking and reporting compliance status in the Vulnerability Remediation Asset Manager (VRAM) and similar reporting tools.
Perform risk analysis/independent verification on security configuration and STIG finding risk reports/POA&Ms for devices on the RDT&E network.
Support Federal Information Security Management Act (FISMA) data reporting requirements.