Job Description

Description

SAIC is looking for a Senior Cyber Security Engineer to implement cybersecurity solutions in compliance with the RMF, NIST, DoD, and Marine Corps/ Navy policies and standards to establish or sustain ATOs for information systems and networks. This is a Hybrid Remote position located out of California, Maryland and the candidate must be in proximity of one of the following locations: NAS Pax River, MD; MCAS New River, NC; MCAS Cherry Point, NC or California, MD.

Job responsibilities include:

• Provide cybersecurity oversight, direction, and guidance to the PMA 275 workforce in support of maintaining ATOs through the Risk Management Framework (RMF) process.
• Provide a consistent reporting environment to maintain and track IT assets and ensure systems are securely managed regardless of location by providing patch coverage across operating systems and applications for improved defense against the latest vulnerabilities.
• Monitor and report compliance with Marine Corps Cyber Operations Group (MCCOG) issued Marine Corps Enterprise Network (MCEN) Operational Directives (OPDRS) for all MCAGCC BSC/CAST IT systems, information systems, and network resources.
• Maintain and update a continuous Plan of Action and Milestones (POA&M) for reporting to the ISSO on the implementation of patches/updates on all client, server, and system security vulnerabilities using both automated scanning tools and manual compliance checks.
• Run and review vulnerability and compliance scans performed at the SAIC on all PMA 275 assets using current DoD Assured Compliance Assessment Solution (ACAS), or other approved solution(s) as required.
• Implement Information Assurance Vulnerability Alerts (IAVAs), OpDirs, Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), patches, and industry best practices to ensure cybersecurity compliance of PMA 275 systems.
• Prepare and maintain A&A-related documentation (i.e., site inventory, software baseline, equipment lists, ports, protocols, and services management (PPSM), self-assessment/test plans, etc.), POA&Ms, security plan, vulnerability scans, Security Assessment Report (SAR), contingency plans, information assurance vulnerability management plans, cybersecurity waiver requests, cybersecurity waiver extension requests, and Federal Information Security Management Act (FISMA) related reporting requirements within Marine Corps Certification and Accreditation Support Tool (MCCAST).

Qualifications

Education and Experience:

• Bachelor’s degree and five (5) years of related experience; years of experience may be substituted in lieu of a degree.

Required Knowledge, Skills, and Abilities:

• Working knowledge of the U.S. Marine Corp Enterprise Cybersecurity Manual 018 (ESCM O18).
• Well-versed in USMC and DoD cyber security compliance, instructions, policies, and regulations.
• Proficient in Risk Management Framework (RMF), Marine Corps Certification and Accreditation Support Tool (MCCAST) , Assured Compliance Assessment Solution (ACAS), Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), DoD Endpoint Security Solution (ESS), Windows (Server and Client) and RHEL environments, Microsoft Windows Server Update Services (WSUS).
• Documented experience and solid understanding of DoD enterprise network policies with a strong security mindset.

Required certifications:

• Hold DoD 8570.01-M, IAT Level II or greater certification (e.g. Security + CE).

Required clearance:

• Must have an active Secret security clearance. Higher level clearances are acceptable.

SAIC accepts applications on an ongoing basis and there is no deadline.


Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.

Job Tags

Similar Jobs