Cyber Operations Support Specialist

MANTECH•Fort Detrick, MD

1d•$88,200 - $147,200•Hybrid

About The Position

MANTECH seeks a motivated, customer-oriented Cyber Operations Support Specialist to support a Department of War medical logistics program in Fort Detrick, Maryland. This is a hybrid position with three days onsite and two days remote. The role helps protect enterprise information systems and critical health IT infrastructure through continuous monitoring, RMF activities, and management of Authorization to Operate (ATO) packages. The specialist supports cybersecurity compliance and risk management for mission-critical medical logistics systems, including managing RMF artifacts in eMASS, conducting vulnerability scans with ACAS, maintaining configuration compliance, and coordinating remediation. The position also supports assessments and reviews and communicates security risks to technical teams, program leadership, and government stakeholders.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Science, or Information Systems; alternatively, six years of relevant experience combined with one qualifying certification.
Qualifying certifications for the experience-based education alternative include Security+, CySA+, CCSP, Cloud+, GICSP, GISF, GSEC, CISSP-ISSEP, CISSO, FITSP-O, GCLD, GCSA, GSNA, or RCCE Level 1.
At least three years of relevant experience in RMF, cybersecurity, or information assurance supporting enterprise-scale programs.
Proven experience executing Department of War RMF processes, maintaining eMASS packages, managing ATO lifecycles, and supporting IV&V activities.
Hands-on experience with ACAS vulnerability scanning, analysis of findings, and POA&M development and tracking.
Strong written and verbal communication skills, including the ability to explain technical security risks clearly to non-technical stakeholders.
Must be a U.S. citizen and hold a current Public Trust clearance or higher, subject to a Tier 2 investigation for DoD CAC eligibility.
Ability to remain stationary 50% of the time; occasionally move about the office to access equipment or communicate with coworkers, management, and customers, including through presentations.

Nice To Haves

Experience supporting Defense Health Agency (DHA), Military Health System (MHS), or medical logistics IT systems.
An active certification such as Security+, CISSP, CAP, CISM, or equivalent.
Familiarity with security configuration standards for Red Hat Enterprise Linux 9/10, Windows Server 2022, and Windows 11.
Background supporting DevSecOps, Agile, or hybrid/cloud enterprise architectures.

Responsibilities

Drive continuous monitoring and Risk Management Framework (RMF) activities to preserve system authorization and improve the security posture of mission-critical medical logistics systems.
Manage RMF package lifecycles, control implementation, and authorization artifacts within eMASS to ensure compliance with Department of War cybersecurity standards.
Execute enterprise vulnerability scans using ACAS, analyze security findings, and collaborate with engineering teams to develop and track remediation strategies.
Maintain system hardening and configuration compliance using DISA STIGs and STIG Viewer across Linux and Windows environments.
Develop and manage Plans of Action and Milestones (POA&Ms), including risk statements, corrective milestones, resource needs, and closure evidence.
Support security control assessments, risk assessments, annual reviews, and Independent Verification and Validation (IV&V) efforts.
Deliver risk reports and briefings to technical teams, program leadership, and government stakeholders.