Cyber Operations Support Specialist

MANTECH seeks a motivated, career- and customer-oriented Cyber Operations Support Specialist to join our team in Fort Detrick, MD. This is a hybrid position with 3 days onsite and 2 days remote.

Join a high-impact Department of War (DoW) medical logistics program dedicated to supporting mission-critical healthcare systems. In this role, you will play a key part in protecting enterprise information systems, driving continuous monitoring, managing Authorization to Operate (ATO) packages, and safeguarding critical health IT infrastructure.

Responsibilities include but are not limited to:

• Drive continuous monitoring and Risk Management Framework (RMF) activities to preserve system authorization and elevate the overall security posture of mission-critical medical logistics systems.
• Manage RMF package lifecycles, control implementation, and authorization artifacts within eMASS to ensure full compliance with DoW cybersecurity standards.
• Execute enterprise vulnerability scans using ACAS, analyze security findings, and collaborate with engineering teams to formulate and track remediation strategies.
• Maintain system hardening and configuration compliance using DISA STIGs and STIG Viewer across Linux and Windows environments.
• Develop and manage Plan of Action and Milestones (POA&Ms), clearly defining risk statements, corrective milestones, resource needs, and closure evidence.
• Support security control assessments, risk assessments, annual reviews, and Independent Verification and Validation (IV&V) efforts.
• Deliver concise risk reports and briefings to technical teams, program leadership, and government stakeholders to enable informed cybersecurity decisions.

Minimum Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Science, or Information Systems; OR 6 years of relevant experience combined with one qualifying certification (Security+, CySA+, CCSP, Cloud+, GICSP, GISF, GSEC, CISSP-ISSEP, CISSO, FITSP-O, GCLD, GCSA, GSNA, or RCCE Level 1).
• 3+ years of relevant experience in RMF, cybersecurity, or information assurance supporting enterprise-scale programs.
• Proven experience executing DoW RMF processes, maintaining eMASS packages, managing ATO lifecycles, and supporting IV&V activities.
• Hands-on experience with ACAS vulnerability scanning, findings analysis, and POA&M development and tracking.
• Strong written and verbal communication skills with a demonstrated ability to translate technical security risks into clear briefings for non-technical stakeholders.

Preferred Qualifications:

• Experience supporting Defense Health Agency (DHA), Military Health System (MHS), or medical logistics IT systems.
• Active certification such as Security+, CISSP, CAP, CISM, or equivalent.
• Familiarity with security configuration standards for Red Hat Enterprise Linux 9/10, Windows Server 2022, and Windows 11.
• Background supporting DevSecOps, Agile, or hybrid/cloud enterprise architectures.

Clearance Requirements:

• Must be a U.S. Citizen and hold a current Public Trust clearance (or higher), subject to a Tier 2 (T2) investigation for DoD CAC eligibility.

Physical Requirements:

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations.