> Markdown version of [/jobs/ext/1484050-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/1484050-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst

- **Company:** Mantech International Corporation
- **Location:** Virginia Beach, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Information Systems Security Architecture Professional, SAP (Applications), Information Security Management System, Information Technology, Nessus
- **Published:** July 29, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9062895/cyber-security-analyst

## About the Role

seeks a motivated, career and customer-oriented to join our team in This is an position., * Bachelor's degree in Computer Science, Cybersecurity, Information systems, or related fields

 * 2+ years of Risk Management Framework (RMF) experience
 * Security+ CE certification with documented ACAS and eMASS training

 * ISC2 Certified in Governance, Risk and Compliance (CGRC), ISACA Certified Information Security Manager (CISM), ISC2 Certified Information Systems Security Professional (CISSP) (or Associate).

 * U.S. Citizenship required and an active or current Secret Clearance

 * The person in this position must be able to remain in a stationary position 70% of the time.
 * Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.

## Description

* Define authorization boundaries, analyze mission criticality, apply overlays (Privacy, Space, CDS), and establish the initial NIST SP 800-53 Rev 5 control baseline.
 * Lead stakeholder workshops to select, tailor, and document security controls in eMASS; author and maintain the System Security Plan (SSP), Contingency Plan, and Incident Response Plan.
 * Execute full-scope control testing using DISA STIGs/SRGs, ACAS/Nessus scans, and NIST SP 800-53A APs; document compliance status and upload supporting evidence in eMASS.
 * Evaluate AP compliance across the boundary, identify deficiency root causes, and trace all non-compliant controls to POA&Ms with detailed risk analyses.
 * Maintain complete eMASS accreditation packages (SSP, SAP, topology, POA&Ms) and coordinate formal workflow actions to support Security Control Assessor (SCA) and Authorizing Official (AO) risk decisions.
 * Execute System-Level Continuous Monitoring (SLCM) strategies via monthly ACAS scans, STIG updates, and Annual Security Reviews (ASRs) to maintain ongoing authorization.
 * Provide expert RMF guidance to leadership, refine organizational cybersecurity policies, and ensure compliance with DoD, Navy, and NIST standards across the system lifecycle.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Independently together: how micro-applications improve developer experience + app performance](https://www.wearedevelopers.com/videos/452-independently-together-how-micro-applications-improve-developer-experience-app-performance)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)