Cybersecurity Specialist

Description

SAlC is seeking a Cybersecurity Specialist to support the U.S. Army Combat Capabilities Development Command (CCDEVCOM), Engineering and Systems Integration (ESl) Directorate, Quick Reaction Capability (QRC) Branch.

This position is on-site in Aberdeen, MD on Aberdeen Proving Ground (APG).

ln support of the information Analysis Center Multiple Award Contract (lAC MAC) and Task Order (TO), SAlC is seeking a qualified, cleared, and experienced professional who has in-depth experience in the achievement of strategic goals and objectives related to the ongoing execution and maturity of its cybersecurity and assessment and authorization (A&A) programs.

Job Responsibilities:

• Support the maintenance and upkeep of system packages using a GRC application (e.g., eMASS / XACTA) and/or customer tool(s) to ensure auditability and report on the security posture of assigned systems.
• Support the Army's risk management process by maintaining visibility and awareness of changes to the cyber threat landscape that impact the security posture of their assigned systems and ensure efforts to address security risk are executed efficiently and on schedule.
• Interface broadly with internal branch customers as well as external branch stakeholders to support achievement of the program's strategic goals and objectives and mature its A&A capabilities and services.
• Work independently and as a member of a team to guide federal customers through the Risk Management Framework, focusing on A&A and continuous monitoring lifecycles.
• Execute A&A and ongoing authorization activities and provide guidance and technical direction to SO and Federal ISSOs, as required. Serve as a interface on status of packages for their assigned systems.
• Collaborate with the Security Engineering and Architecture team members on risk assessments, impact assessments, vulnerability and compliance management and security change requests to ensure system compliance, up-to-date package information, and that all system changes are being executed within the configuration control lifecycle.
• Support the GRC PM and GRC Lead in ensuring a coordinated and collaborated approach on whole-of-program efforts in support of RMF/CSF maturity.
• Provide technical guidance and best practices to the team and customers to ensure that the agency achieves maximum value from its IT investments.

Qualifications

Required Education:

• Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and zero (0) years or more experience; four (4) years of experience considered in lieu of degree.

Required Skills:

• Demonstrated experience with establishing, implementing, and maintaining the A&A lifecycle using the NIST RMF.
• Experience with vulnerability scanning reports and findings from Nessus, Security Center, and/or EvaluateStig.
• Demonstrated knowledge in the field of risk management and compliance to efficiently work on and apply frameworks including ISO, NIST CSF, NIST 800-53, NIST 800-171, NIST 800-137, NIST 1800 series, etc.
• Demonstrated experience with the development and update of policies to align with OMB, DHS, NIST, CNSS, ICD, Congressional and other cybersecurity mandates, and directives.
• Experience with Application Security Audits and Risk Scoring.
• Maintain updated knowledge in the field of risk management and compliance to efficiently work on frameworks including NIST CSF, ISO, NIST 800-53, NIST 800-34 etc.
• Ability to independently manage tasks across multiple competing priorities and work tasks in parallel to maintain deadlines.
• Must be able to lift, pull, push and carry up to 30 pounds, unassisted, on a regular basis.
• Ability to stand, walk, bend, kneel, squat, climb ladders/equipment, and crawl for extended periods.
• Must have physical stamina to perform repetitive tasks throughout the workday.
• Strong hand-eye coordination to operate tools and machinery safely.
• May be asked to work outdoors in all-weather conditions.
• Must be able to move and arrange heavy supplies and equipment.

Clearance:

• Must have an active TS/SCI with current CI polygraph.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.