> Markdown version of [/jobs/ext/2677661-operational-cybersecurity](https://www.wearedevelopers.com/jobs/ext/2677661-operational-cybersecurity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Operational Cybersecurity

- **Company:** Science Applications International Corporation
- **Location:** Augusta, GA, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cyber Security, Information Systems, Distributed Computing Environment, Infrastructure as a Service (IaaS), Red Hat Enterprise Linux, Security Content Automation Protocol, Tenable Nessus, Vmware
- **Published:** September 2, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3373930582&tx=UT5652THT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Have experience with Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) review/development, Assured Compliance Assessment Solution (ACAS) scan review, Windows, RHEL, VMware, and other COTs products.
 * Experience with the Converged Infrastructure (CI) Distributed Processing, Exploitation, Dissemination (DPED) Infrastructure as a Service (IaaS) environment is a plus

Qualifications

Required Education:

Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience., * 5 years of hands-on experience with DoD or federal cybersecurity frameworks

 * ACAS Expertise: Practical experience managing Tenable Nessus/SecurityCenter tools
 * eMASS Proficiency: Confident navigating eMASS and managing RMF control checklists
 * STIG & SCAP Mastery: Proven ability to apply STIGs and verify compliance using the STIG Viewer and SCAP tools
 * Active Security+ certification
 * DOD 8140 IAT Level III Certification such as SecurityX / CASP
 * Excellent organizational, written, and oral communication skills
 * Ability to occasionally travel (~10%) in support of INSCOM G7 requirements

Clearance:

 * Candidate must have an active TS/SCI security clearance with ability to obtain a Poly. (Clearance must be listed and active in DISS.)

## Description

* Review, provide comments, and update DISA STIG Checklists in accordance with the Quarterly Build Cycle. STIG vulnerabilities marked as opened will be compiled including resolution recommendations/instructions and provided to GISA for review/remediation.
 * Review and provide comments on ACAS scans in accordance with the Quarterly Build Cycle. Open Plugins will be compiled, provided to GISA for review/remediation. Any Open Plugins that were not closed prior to the Build Release date/shipment will be documented and added to the Anticipated Findings List (AFL) for Cybersecurity to document.
 * Review the Army Intelligence Enterprise Architecture (AIEA) Infrastructure hosts, software, and configuration; review updated DISA STIG checklists and provide listing of applicable checklists.
 * Generate STIG Hardening Guide to include checklist, version, and applicable VM on a quarterly basis.
 * Support shall provide Cybersecurity expertise at the DoD 8140 Information Assurance Manager II Level.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)