Junior Offensive Cyber Engineer

USA-VA-Stafford

Full-time

Onsite

Entry Level

MANTECH is a trusted partner to the Department of Defense, delivering cutting-edge projects that make a real impact. They are seeking a Junior Offensive Cyber Engineer to perform analysis of cybersecurity packages and support the Marine Corps Systems Command in Quantico, VA.

Apply Now

Responsibilities

The position requires someone with Offensive Cyber experience (penetration testing/red team/exploitation) and willing to do hands-on work
Ensure system documentation reflects current system security configurations to include hardware and software components, data flow, interconnections, and ports, protocols, and services, etc
Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.)
Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions
Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions
Assist in the preparation and review of documentation to include System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Authorization Recommendations (ARs), Cybersecurity Strategies (CSSs), and other A&A artifacts
Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations
Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis

Qualification

Required

Bachelor's degree and at least 2 years of related cybersecurity experience (additional 2 years of experience can be substituted in lieu of degree)
Must be compliant with DoD 8140 at an intermediate or advanced level. Thus, will need a CASP+CE, Security+, CISSP, or CISM certification
Experience and expert knowledge on NIST guidelines, FISMA, Cybersecurity principles and methodologies, Executive Orders (EO's), Office of Management and Budget (OMB) Memorandums, Federal, DoD and CISA Technical Reference Architectures, Maturity Models, Risk Management Framework (RMF), Cybersecurity Framework (CSF), technical knowledge of IT systems
The position requires someone with Offensive Cyber experience (penetration testing/red team/exploitation) and willing to do hands-on work
Ensure system documentation reflects current system security configurations to include hardware and software components, data flow, interconnections, and ports, protocols, and services, etc
Perform Compliance reviews and analyses to verify compliance with federal requirements (e.g., EO, OMB Memos, A-130, NIST SP 800-37, 800-53, FIPS199, and FIPS-200, etc.)
Perform analyses of security implementations for assigned systems pertaining to people, processes, and technologies, identify gaps and recommend solutions
Assist in the preparation and review of documentation to include System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Authorization Recommendations (ARs), Cybersecurity Strategies (CSSs), and other A&A artifacts
Research major obstacles related to the ever-changing FISMA requirements, which customers will need to overcome and provide recommendations
Provide updates and input to the GRC SharePoint sites to include document uploads, page updates, access requests, permissions, etc. on an ongoing basis

Preferred

USMC or Navy Validator certified
OSCP / OSEP / CPTS Certifications
Experience with cloud-based environments and technologies
An analytical mind with excellent problem-solving ability
Good communication skills and have good interpersonal, organizational, and analytical skills