Cyber Security Analyst

MANTECH•Virginia Beach, VA

3d•$75,800 - $127,000•Onsite

About The Position

MANTECH is seeking a Cyber Security Analyst to support operations in Virginia Beach, Virginia. This is an on-site, full-time position supporting national security projects. The analyst will support Risk Management Framework (RMF) execution and system authorization, implement and assess cybersecurity controls, maintain authorization documentation in eMASS, conduct continuous monitoring, and advise leadership on cybersecurity risk and compliance. Applicants must be U.S. citizens with an active Secret security clearance.

Requirements

Bachelor’s degree in computer science, cybersecurity, information systems, or a related field.
At least 2 years of direct RMF experience.
Security+ CE certification.
Experience with ACAS and eMASS training.
U.S. citizenship and an active Secret security clearance.
Ability to remain stationary for 70% of the time.
Ability to occasionally move around the office to access file cabinets and office machinery.

Nice To Haves

CISSP certification.
Experience with DISA STIG.

Responsibilities

Prepare for RMF execution and categorize systems through mission analysis, authorization-boundary definition, and documentation of network diagrams, hardware and software inventories, and data flows.
Determine mission criticality and apply relevant overlays to establish security control baselines in accordance with NIST SP 800-53 Revision 5 and DoD/Navy policy.
Select, tailor, and document security controls across the system lifecycle; lead stakeholder workshops, justify deviations using risk-based rationale, and record decisions in eMASS.
Develop and maintain the System Security Plan, cybersecurity policies and procedures, contingency and incident response plans, and security strategies aligned with organizational risk tolerance and mission objectives.
Implement and test security controls using DISA STIGs and SRGs, ACAS/Nessus vulnerability scans, and NIST SP 800-53A Revision 5 Assessment Procedures; validate configurations, patch levels, and access controls and document results in eMASS.
Upload supporting evidence, such as scan reports, configuration files, and screenshots, to substantiate compliance assertions and enable traceability.
Assess control and assessment-procedure effectiveness through testing, artifact review, and personnel interviews; determine compliance status, identify deficiency root causes, and document findings in eMASS.
Ensure non-compliant controls are associated with POA&M entries and complete risk analysis.
Maintain the RMF authorization package in eMASS, including the SSP, Security Authorization Package, engineering documentation, and network drawings; manage POA&Ms and support Security Assessment Report development and Authorizing Official decision-making.
Execute the System Level Continuous Monitoring Strategy, track compliance, perform monthly vulnerability scans, apply STIG updates, and conduct Annual Security Reviews.
Communicate significant findings to the Security Control Assessor and Authorizing Official and to inheriting systems; update the SSP and POA&M to reflect changes in risk posture.
Provide RMF, risk management, and security-strategy guidance; advise leadership on threats, control gaps, and mitigation priorities; help refine organizational security policies and promote adherence to security practices.