Cyber Security Analyst
About The Position
Shape the future of defense with MANTECH! Join a team dedicated to safeguarding our nation through advanced tech and innovative solutions. Since 1968, we've been a trusted partner to the Department of Defense, delivering cutting-edge projects that make a real impact. Dive into exciting opportunities in Cybersecurity, IT, Data Analytics and more. Propel your career forward and be part of something extraordinary. Your journey starts now-protect and innovate with MANTECH! MANTECH seeks a motivated, career and customer-oriented Cyber Security Analyst to join our team in Virginia Beach, VA. This is an onsite position. This position plays a vital role in protecting critical systems by supporting RMF execution, driving compliance initiatives, and helping shape cybersecurity strategy that aligns with Department of Defense and Navy directives.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field with 4+ years of experience in Information Systems Security Engineer (ISSE) or similar role, including 2+ years of direct RMF experience (Steps 0-6)
- 4+ additional years of IT/ISSE experience with 2+ years direct RMF experience can be substituted for a degree
- Hands-on experience with eMASS for RMF package management, POA&M maintenance, and risk assessment
- Proficiency with ACAS/Nessus vulnerability scanning and DISA STIG/SRG application
- Security+ CE certification with documented ACAS and eMASS training
- Must have a current/active DoD Secret security clearance
Nice To Haves
- Certified in Governance, Risk and Compliance (CGRC), CompTIA Advanced Security Practitioner (CASP+) CE, Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) (or Associate)
- Knowledge of Operational Technology (OT) systems and RMF application in OT environments
Responsibilities
- Prepare for Lead Risk Management Framework (RMF) execution by analyzing mission needs, defining system boundaries, and creating network diagrams and data flows to support accurate control selection and secure system design.
- Guide control selection and tailoring through stakeholder workshops, documenting decisions in Enterprise Mission Assurance Support Service (eMASS) and aligning cybersecurity plans with risk tolerance and mission priorities.
- Apply and test security controls using Defense Information Systems Agency Security Technical Implementation Guides (DISA STIGs), Security Requirements Guides (SRGs), Assured Compliance Assessment Solution (ACAS)/Nessus scans, and NIST 800-53A to ensure compliance and technical soundness.
- Conduct end-to-end testing on assets affecting system confidentiality, integrity, and availability, while documenting configurations, access controls, and compliance results in eMASS.
- Evaluate control effectiveness through testing, documentation review, and staff interviews, identifying issues, root causes, and mapping all findings to POA&M actions.
- Maintain full accreditation packages in eMASS, including all required documentation and diagrams, while managing Plan of Actions & Milestones (POA&M) entries with detailed risk analysis.
- Execute continuous monitoring by scanning for vulnerabilities, updating STIGs, and tracking system risk posture, ensuring all findings are clearly communicated to stakeholders.
- Deliver expert RMF guidance and risk management support, advising leaders on security trends and contributing to a culture of proactive cybersecurity.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Industry
Professional, Scientific, and Technical Services
Number of Employees
5,001-10,000 employees
