What are the responsibilities and job description for the Cyber Security Analyst position at MANTECH?
MANTECH seeks a motivated, career and customer-oriented Cyber Security Analyst to support our operations in Virginia Beach, VA. This is an onsite position.
In this role, you will be involved in securing critical defense systems by applying rigorous Risk Management Framework (RMF) standards. You will work closely with stakeholders to ensure that cybersecurity architecture and controls meet the highest levels of integrity and compliance.
Responsibilities Include But Are Not Limited To
In this role, you will be involved in securing critical defense systems by applying rigorous Risk Management Framework (RMF) standards. You will work closely with stakeholders to ensure that cybersecurity architecture and controls meet the highest levels of integrity and compliance.
Responsibilities Include But Are Not Limited To
- Prepare for RMF execution by defining authorization boundaries, performing system categorization, and applying NIST SP 800-53 security control overlays.
- Lead the selection and tailoring of security controls, documenting all risk-based justifications and decisions within the Enterprise Mission Assurance Support Service (eMASS).
- Develop and maintain essential cybersecurity documentation, including the System Security Plan (SSP), Contingency Plans, and Incident Response Plans.
- Implement and test security controls using DISA STIGs, SRGs, and ACAS/Nessus vulnerability scans to ensure full-scope compliance across all assets.
- Assess the effectiveness of security implementations by conducting independent testing and documenting findings to resolve non-compliant controls through the POA&M process.
- Support the system authorization process by managing RMF accreditation packages and coordinating formal workflow actions for Authorizing Official (AO) decisions.
- Execute continuous monitoring strategies, including monthly vulnerability scans and annual security reviews, to maintain an acceptable system risk posture.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field
- 1 years of Cybersecurity, Information Security, or related experience
- A CompTIA Security CE certification
- ISC2 Certified in Governance, Risk and Compliance (CGRC), ISACA Certified Information Security Manager (CISM), ISC2 Certified Information Systems Security Professional (CISSP) (or Associate).
- U.S. citizenship required and a current or active Secret clearance
- The person in this position must be able to remain in a stationary position 50% of the time.
- Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.