What are the responsibilities and job description for the Cybersecurity Analyst position at ManTech?
ManTech seeks a Cybersecurity Analyst to perform analysis of cybersecurity packages using the Risk Management Framework (RMF) process to achieve an Authority to Operate (ATO) while supporting the Marine Corps Systems Command (MCSC) in Quantico, VA. This position works closely with government officials and senior engineers.
Responsibilities include, but are not limited to:
Ensure system documentation reflects current system security configurations to include hardware and software components, data flow, interconnections, and ports, protocols, and services, etc.
Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.).
Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions.
Conduct daily, weekly, monthly compliance monitoring of assigned systems for all RMF steps.
Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations.
Provide compliance monitoring metrics and reporting to Agency leadership.
Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis.
Provide Quality Reviews of security documentation to ensure accuracy and compliance throughout the RMF process.
Assist in the preparation and review of documentation to include System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Authorization Recommendations (ARs), Cybersecurity Strategies (CSSs), and other A&A artifacts.
Minimum Qualifications:
Bachelors Degree and at least 5 years of related experience to include the following (additional 2 years of experience can be substituted in lieu of degree):
Must be compliant with DoD 8140 at an intermediate or advanced level. Thus, will need a CASP CE, Security , CISSP, or CISM certification.
Experience and expert knowledge on NIST guidelines, FISMA, Cybersecurity principles and methodologies, Executive Orders (EO's), Office of Management and Budget (OMB) Memorandums, Federal, DoD and CISA Technical Reference Architectures, Maturity Models, Risk Management Framework (RMF), Cybersecurity Framework (CSF), and technical knowledge of IT systems.
Knowledge of and experience using relevant cybersecurity and analysis tools such as Archer, Nessus Security Center, Splunk, etc.
Knowledge of cybersecurity threats, risks, and vulnerabilities and how to mitigate them.
Must be able to conduct system analysis and quality reviews to detect performance issues
Perform enterprise-wide strategic systems planning, business information planning, business and analysis.
Apply reverse engineering and re-engineering disciplines to develop migration strategic and planning documents
Preferred Qualifications:
USMC or Navy Validator certified
Experience with cloud-based environments and technologies is preferred.
Well versed in developing compliance solutions to resolve weaknesses or challenges
An analytical mind with excellent problem-solving ability.
Good communication skills and have good interpersonal, organizational, and analytical skills.
Clearance Requirements:
Must have an active Secret security clearance.
Physical Requirements:
This job largely operates in a professional office environment.
Ability to sit for extended periods of time.
