Cybersecurity Ops Analyst

SAIC • Panama City Beach, FL

2d • Onsite

About The Position

SAIC is searching for a Cybersecurity Ops Analyst to join their team supporting the JEXC2 Program, based in Panama City, FL. In this critical role, the analyst will be responsible for maintaining the security posture of authorized systems, ensuring compliance with DoD cybersecurity policies and regulations, and actively participating in the Risk Management Framework (RMF) lifecycle. This position requires a strong understanding of cybersecurity principles, excellent technical skills, and the ability to work both independently and collaboratively within a dynamic environment, supporting Echelon III cybersecurity activities and contributing to the overall security of the organization.

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field. 4 additional years of experience in lieu of degree.
• 2+ years of experience in cybersecurity or information assurance roles with direct experience implementing and maintaining systems under the Risk Management Framework (RMF).
• DoD 8570 IAT Level II certification (e.g., Security+, GSEC, SSCP, CCNA Security).
• Experience with eMASS and vulnerability scanning tools (e.g., ACAS/Nessus).
• Strong understanding of DoD cybersecurity policies and procedures and DISA STIGs.
• Active Secret Clearance.

Responsibilities

• Maintain authorized systems’ Plan of Action and Milestones (POA&M) throughout the life cycle (eMASS POA&M Updates, Accreditation Follow-on (ACF), Request submissions, etc.).
• Ensure eMASS/DITPR-DON records are maintained and up-to-date. Validate all system software against Department of Navy Application and Database Management System (DADMS).
• Serve as the Vulnerability Remediation Asset Manager (VRAM) Subject Matter Expert (SME), managing VRAM uploads, validating vulnerability remediation data, and coordinating required actions to maintain system cybersecurity compliance.
• Prepare/review Memorandum for The Record (MFR) and Security Assessment Reports (SAR) for systems requiring baseline change modifications (RMF Use Cases).
• Prepare, validate, and route Federal Information Security Management Act (FISMA) documentation (Annual Security Review (ASR), Security Control Tests (SCT), and Contingency Plan control testing).
• Participate in engineering peer-reviews. Review Engineering Change Request (ECR) documents for cybersecurity compliance requirements (DISA STIGs, National Security Agency (NSA), National Institute of Standards and Technology (NIST) and/or Commercial best practice configuration guidance).
• Maintain situational awareness of all proposed system changes and ensure that all proposed system minor, major or tech refresh updates are vetted against cybersecurity compliance requirements.
• Track/monitor Vulnerability Remediation Asset Manager (VRAM) for Information Assurance Vulnerability Management (IAVM) bulletins and respond as needed.
• Maintain approved Cybersecurity Workforce (CSWF) Baseline industry certifications in accordance with cyber directives.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level