Cyber Engineer

SAIC•Suffolk, VA

About The Position

SAIC is seeking a Cyber Engineer with experience in U.S. Navy IT networks. The role supports cybersecurity and Information Assurance compliance for network infrastructure, applications, software, and customer systems. The Cyber Engineer manages vulnerability remediation and technical directive compliance, supports Risk Management Framework (RMF) Assessment and Authorization (A&A) activities, and assists government team leads with security documentation, reporting, assessments, and continuous monitoring. The position requires an active Secret clearance.

Requirements

Bachelor’s degree and at least two years of experience supporting an IT enterprise environment in a cyber, systems administration, engineering, or management capacity; additional experience may substitute for the degree.
Experience with the U.S. Navy’s RMF, including policy development, control testing, POA&M management, and configuration management.
Experience with Microsoft Office tools such as Excel, Word, and Visio; DoD tools such as eMASS and DADMS; reviewing compliance scans with security engineers; and conducting cybersecurity assessments using standards such as CIS Benchmarks and STIGs.
Broad technical experience related to IT operations, networks, operating systems, and systems administration.
Extensive knowledge of Information Security, Information Assurance, or cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
Security+ certification and one of the following: CCNA, CCNP, Enterprise Linux, VMware Professional, Windows 2019 or higher, or VMware Certified Associate. A six-month waiver to obtain the additional certification is authorized.
Active Secret security clearance.

Responsibilities

Manage Information Assurance Vulnerability Alert (IAVM) requirements, Communications Task Orders (CTOs), Security Technical Implementation Guide (STIG) compliance, and associated reporting.
Maintain compliance with IAVM-mandated timeframes for networks and infrastructure.
Identify cybersecurity requirements before customer migrations.
Perform DADMS and DITPR-DON additions and renewals.
Maintain security compliance for network applications and software, including responding to IAVMs, EXORS, OPORDs, and CTOs and tracking enterprise patches.
Support responses to cybersecurity and system data calls.
Provide Vulnerability Remediation Asset Manager (VRAM) data to support technical directive compliance and mitigation of known vulnerabilities.
Create, obtain, manage, and maintain RMF A&A packages for common control providers and information system owners.
Create and maintain packages in eMASS.
Assist government team leads with RMF documentation, including external connection requirements, IT interconnection agreements, security memorandums of agreement and record, risk assessments, vulnerability analyses, POA&Ms, and IAVM program support and guidance.
Track new STIG releases and deltas, and participate in STIG implementation.
Assist government team leads with audit-readiness reporting in accordance with Navy customer scoring cards.
Support development of processes for maintaining and enforcing infrastructure security.
Assist government team leads with IAVM requirements reporting.
Support security and Information Assurance requirements definition by identifying controls for systems and networks, recommending security maintenance and enforcement processes, and documenting A&A requirements and processes.
Execute security scans in accordance with DoD/DoN timeframes for infrastructure and customer systems.
Assist government team leads with reporting on customer-hosted systems' accreditation status.
Provide vulnerability assessment scans to government team leads upon request.
Evaluate, recommend, integrate, and implement automated continuous-monitoring capabilities supporting RMF and cybersecurity compliance.