Cyber Engineer

SAIC•Suffolk, VA

About The Position

SAIC is seeking a Cyber Engineer experienced with US Navy IT networks. The role supports cybersecurity and Information Assurance compliance for enterprise infrastructure, networks, applications, and customer systems. The Cyber Engineer manages vulnerability remediation and technical directives, supports Risk Management Framework (RMF) Assessment and Authorization activities, maintains eMASS packages, and assists government team leads with compliance reporting and documentation. The position also supports security engineering, vulnerability assessment, STIG implementation, and continuous monitoring.

Requirements

Bachelor’s degree and at least two years of experience supporting an IT enterprise environment in a cyber, system administration, engineering, or management capacity; additional years of experience may substitute for the degree.
Experience with the US Navy’s Risk Management Framework (RMF), including policy development, control testing, POA&M management, and configuration management.
Experience using Microsoft Office tools such as Excel, Word, and Visio.
Experience working with DoD tools such as eMASS and DADMS.
Experience working with security engineers to review compliance scans.
Experience performing cybersecurity assessments using standards such as CIS Benchmarks and STIGs.
Broad technical experience related to IT operations, networks, operating systems, and system administration.
Extensive knowledge of Information Security, Information Assurance, or cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
Security+ certification and one of the following: CCNA, CCNP, Enterprise Linux, VMWare Professional, Windows 2019 or higher, or VMWare Certified Associate. A six-month waiver is authorized to obtain the certification.
Active Secret security clearance.

Responsibilities

Ensure Information Assurance Vulnerability Alert Management (IAVM), Communications Task Orders (CTOs), and STIG compliance and reporting.
Maintain compliance with IAVM-mandated timeframes for networks and infrastructure.
Identify cybersecurity requirements before customer migration.
Perform DADMS and DITPR-DON additions and renewals.
Maintain security compliance for network applications and software, including responding to IAVMs, EXORS, OPORDs, and CTOs and tracking patches in an enterprise environment.
Support responses to cybersecurity and system data calls.
Provide Vulnerability Remediation Asset Manager (VRAM) data to support technical directive compliance and mitigation of known vulnerabilities.
Create, obtain, manage, and maintain RMF Assessment and Authorization packages for common control providers and information system owners.
Create and maintain packages in eMASS.
Assist government team leads with RMF documentation, including external connection requirements, IT interconnection agreements, security memorandums of agreement and record, risk assessments, vulnerability analyses, and POA&Ms.
Provide IAVM program support and guidance.
Track new STIG releases and their changes, and participate in STIG implementation.
Assist government team leads with audit-readiness reporting in accordance with Navy customer scoring cards.
Support development of processes for maintaining and enforcing infrastructure security.
Assist government team leads with IAVM requirements reporting and customer-hosted systems accreditation status reporting.
Support security and Information Assurance requirements definition by identifying controls for systems and networks.
Recommend processes for maintaining and enforcing security and Information Assurance for systems and networks.
Document A&A requirements and processes in support of security engineering.
Execute security scans for infrastructure and customer systems in compliance with DoD/DoN standard timeframes.
Provide vulnerability assessment scans to government team leads upon request.
Evaluate, recommend, integrate, and implement innovative automated continuous-monitoring capabilities supporting RMF and cybersecurity compliance.