Cyber Engineer

SAIC•Suffolk, VA

About The Position

SAIC is seeking a Cyber Engineer with experience supporting US Navy IT networks. The role supports cybersecurity and Information Assurance compliance across network infrastructure, applications, software, and customer systems. It includes vulnerability and patch management, security assessments and scans, RMF Assessment and Authorization (A&A) documentation, and continuous monitoring. The Cyber Engineer also supports government team leads with reporting, documentation, and security engineering processes.

Requirements

Bachelor’s degree and at least two years of experience supporting an IT enterprise environment in a cyber, system administration, engineering, or management capacity; additional experience may be accepted in lieu of a degree.
Experience with the US Navy’s Risk Management Framework (RMF), including policy development, control testing, POA&M management, and configuration management.
Experience with Microsoft Office tools such as Excel, Word, and Visio.
Experience working with DoD tools such as eMASS and DADMS.
Experience working with security engineers to review compliance scans.
Experience performing cybersecurity assessments using standards such as CIS Benchmarks and STIGs.
Broad technical experience related to IT operations, networks, operating systems, and system administration.
Extensive knowledge of Information Security, Information Assurance, or cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
Security+ certification and one of the following: CCNA, CCNP, Enterprise Linux, VMware Professional, Windows 2019 or higher, or VMware Certified Associate. A six-month waiver is authorized to obtain the certification.
Active Secret security clearance.

Responsibilities

Manage Information Assurance Vulnerability Alerts (IAVMs), Communications Task Orders (CTOs), Security Technical Implementation Guide (STIG) compliance, and related reporting.
Maintain compliance with IAVM-mandated timeframes for networks and infrastructure; respond to IAVMs, EXORS, OPORDs, and CTOs; and track enterprise patches.
Identify cybersecurity requirements before customer migration.
Perform DADMS and DITPR-DON additions and renewals.
Maintain security compliance for network applications and software.
Respond to cybersecurity and system data calls.
Provide Vulnerability Remediation Asset Manager (VRAM) data to demonstrate compliance with technical directives and mitigate known vulnerabilities.
Create, obtain, manage, and maintain RMF A&A packages for common control providers and information system owners; create and maintain packages in eMASS.
Assist government team leads with RMF documentation, including External Connection requirements, IT Interconnection Agreements, Security Memorandums of Agreement and Record, risk assessments, vulnerability analyses, POA&Ms, and IAVM program support and guidance.
Track new STIG releases and their changes, and participate in STIG implementation.
Assist government team leads with audit-readiness reporting in accordance with Navy customer scoring cards and with IAVM requirements reporting.
Support development of processes for maintaining and enforcing infrastructure security.
Define security and IA requirements by identifying controls for systems and networks; recommend processes for maintaining and enforcing security for identified systems and networks in support of security engineering.
Document A&A requirements and processes in support of security engineering.
Execute security scans within DoD/DoN standard timeframes for infrastructure and customer systems, and provide vulnerability assessment scans to government team leads upon request.
Assist government team leads with reporting on the accreditation status of customer-hosted systems.
Evaluate, recommend, integrate, and implement innovative automated continuous-monitoring capabilities in support of RMF and cybersecurity compliance.