Cyber Engineer

SAIC•Suffolk, VA

22h

About The Position

SAIC is seeking a Cyber Engineer with experience supporting U.S. Navy IT networks. The role supports cybersecurity and Information Assurance compliance for enterprise infrastructure, networks, applications, and customer systems. It includes vulnerability and technical directive management, Risk Management Framework (RMF) documentation and package maintenance, security assessments, and continuous monitoring. The engineer also supports government team leads with reporting, documentation, and cybersecurity requirements.

Requirements

Bachelor’s degree and at least two years of experience supporting an IT enterprise environment in a cyber, system administration, engineering, or management capacity; additional experience may substitute for the degree.
Experience with the U.S. Navy’s RMF, including policy development, control testing, POA&M management, and configuration management.
Experience using Microsoft Office tools such as Excel, Word, and Visio.
Experience working with DoD tools such as eMASS and DADMS.
Experience working with security engineers to review compliance scans.
Experience performing cybersecurity assessments using standards such as CIS Benchmarks and STIGs.
Broad technical experience in IT operations, networks, operating systems, and system administration.
Extensive knowledge of information security, Information Assurance, and cybersecurity analysis supporting systems, networks, applications, and cross-domain solutions.
Security+ certification and one of the following: CCNA, CCNP, Enterprise Linux, VMware Professional, Windows 2019 or higher, or VMware Certified Associate. A six-month waiver is authorized to obtain the credential.
Active Secret security clearance.

Responsibilities

Manage Information Assurance Vulnerability Alerts (IAVMs), Communications Task Orders (CTOs), Security Technical Implementation Guide (STIG) compliance, and reporting.
Maintain compliance with IAVM-mandated timeframes for networks and infrastructure.
Identify cybersecurity requirements before customer migrations.
Perform DADMS and DITPR-DON additions and renewals.
Maintain security compliance for network applications and software, including responding to IAVMs, EXORS, OPORDs, and CTOs, and tracking enterprise patches.
Support responses to cybersecurity and system data calls.
Provide Vulnerability Remediation Asset Manager (VRAM) data to support technical directive compliance and mitigation of known vulnerabilities.
Create, obtain, manage, and maintain RMF Assessment and Authorization (A&A) packages for common control providers and information system owners.
Create and maintain packages in eMASS.
Assist government team leads with RMF documentation, including external connection requirements, IT interconnection agreements, security memorandums of agreement and record, risk assessments, vulnerability analyses, POA&Ms, and IAVM program support and guidance.
Track new STIG releases and changes, and participate in STIG implementation.
Assist government team leads with Audit Readiness reporting in accordance with Navy customer scoring cards.
Support development of processes for maintaining and enforcing infrastructure security.
Assist government team leads with IAVM requirements reporting.
Define security and Information Assurance requirements by identifying controls for systems and networks; recommend processes for maintaining and enforcing security; and document A&A requirements and processes in support of security engineering.
Execute security scans for infrastructure and customer systems in accordance with DoD/DoN standard timeframes.
Assist government team leads with reporting on customer-hosted system accreditation status.
Provide vulnerability assessment scans to government team leads upon request.
Evaluate, recommend, integrate, and implement automated continuous monitoring capabilities supporting RMF and cybersecurity compliance.