Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Software Engineering, or a related STEM field with 4 years of equivalent professional experience.
Certifications such as CASP+ (SecurityX), CGRC, CISSP, CISM, CCISO, or equivalent are required.
Proficiency in Red Hat Enterprise Linux (RHEL 8/9) administration and command-line operations.
Ability to work independently while collaborating with a diverse team.
Responsibilities
Support a specialized team in developing advanced analysts for the Joint Staff over the next 2-5 years.
Design, test, and apply automated baseline hardening scripts using Ansible, Bash, and Python for security compliance.
Collaborate with developers to integrate automated security testing into CI/CD pipelines using tools like Git and Gradle.
Package, deploy, and secure application containers with Docker and Kubernetes, ensuring secure runtimes and image provenance.
Develop and maintain core RMF security packages, including System Security Plans and Continuous Monitoring plans within the Xacta eGRC portal.
Execute routine vulnerability scans and analyze findings to coordinate patch cycles and eliminate false positives.
Formulate actionable Plan of Action & Milestones (POA&M) for non-compliant controls, working closely with system engineers.
Benefits
Opportunity to work on advanced projects for the Joint Staff.
Engagement with cutting-edge technologies in cybersecurity and containerization.
Collaboration with a diverse team of specialists in a dynamic environment.
Potential for professional growth and development in a government contracting role.
Full Job Description
Description
Providing support to a specialized team in the development of advanced analysts for the Joint Staff to be fielded in the next 2-5 years. Work will be at the 16th Air Force in San Antonio, Texas
Designing, testing, and applying automated baseline hardening scripts (Ansible playbooks, Bash, Python) to enforce DISA Security Technical Implementation Guides and Security Requirements Guides across five on-premises RHEL Linux servers, PostgreSQL instances, and container platforms
Partnering with Java/Python streaming analytics developers to embed automated security testing into Continuous Integration and Continuous Delivery or Deployment pipelines (Git, Gradle), implementing Static Application Security Testing (SAST) and Software Composition Analysis (SCA) via SonarQube or comparable tools
Packaging, deploying, and securing application containers utilizing Docker and Kubernetes; validating container image provenance, eliminating baseline CVEs, and configure secure container runtimes
Using experience in Assessment & Authorization (A&A) developing, maintaining, and updating core RMF security packages-including System Security Plans (SSP), Continuous Monitoring (ConMon) plans, and Security Assessment Plans (SAP)-within the Xacta eGRC portal
Executing routine vulnerability scans using ACAS (Tenable Nessus) and Security Content Automation Protocol (SCAP) compliance benchmarks across the five-server enclave; analyzing findings, eliminating false positives, and coordinating patch cycles
Required to formulate actionable Plan of Action & Milestones (POA&M) entries for identified non-compliant controls, working closely with system engineers to resolve findings and mitigate operational risk
#LI-DG1
Requirements
Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Software Engineering or STEM discipline with 4 years of additional equivalent professional experience
CASP+ (SecurityX), CGRC (formerly CAP), CISSP, CISM, CCISO, or equivalent
Red Hat Enterprise Linux (RHEL 8/9) administration, command-line operations, system service management, and SELinux configuration
Ability to work independently while leveraging a team of diverse specialties
Desired Skills
Direct hands-on experience running ACAS / Tenable Nessus vulnerability scans and interpreting STIG Viewer / SCAP results
Experience drafting or maintaining System Security Plans (SSPs) and navigating Xacta or eMASS
Working knowledge of Joint and USAF doctrine, specifically defensive cyber operations
Experience in programming and system design
Prior experience supporting AF-SCI or NSANet-connected systems.
Active CASP+ (SecurityX) or CISSP certification
Direct experience writing Ansible playbooks to automate DISA STIG remediation (e.g., automated STIG lockdown scripts)
Familiarity with database administration, access controls, and STIG checklist validation for PostgreSQL
Demonstrated familiarity with NIST SP 800-53 Rev. 5, NIST SP 800-37, and DoD/CNSSI security directives
Demonstrated experience deploying and securing containerized applications using Docker and Kubernetes (or Podman)
Clearance Information
SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET / SCI LEVEL WITH Poly-CI ELIGIBILITY
Travel Requirements
Yes, 10%
About Scientific Research Corporation
Scientific Research Corporation provides innovative solutions to the U.S. Government, private industry, and international markets.
Scientific Research Corporation was founded in 1988 and was headquartered in Atlanta, Georgia.
Scientific Research Corporation Careers
Joining Scientific Research Corporation means becoming part of a world-class team of professionals who are committed to pioneering scientific and technological innovations. This esteemed company offers a plethora of job opportunities that pave the way for personal and professional growth in numerous cutting-edge fields.
Explore Career Opportunities
Scientific Research Corporation is actively hiring and continually seeks talented individuals who are eager to drive innovation and lead in their respective fields. With a variety of positions available, candidates can find the perfect match for their skills and career ambitions.
Internship Programs
For those starting their career journey, Scientific Research Corporation provides robust internship programs designed to offer hands-on experience in a dynamic environment. Internships are a cornerstone of the company's commitment to nurturing new talent and fostering leadership skills among the future leaders of the industry.
Professional Growth and Development
At Scientific Research Corporation, the growth of its team members is a priority. The company supports career advancement through comprehensive professional development and diversity training programs. These initiatives ensure that every employee has the opportunity to excel and innovate within their roles.
Culture and Benefits
The culture at Scientific Research Corporation is built on a foundation of diversity and inclusion, where every team member’s contribution is valued. Employees enjoy a range of benefits designed to support their professional and personal lives, including competitive health benefits, retirement plans, and flexible working conditions.
Networking and Leadership
Employees at Scientific Research Corporation are encouraged to engage in networking opportunities within and beyond the company. This fosters a culture of collaboration and continuous learning. Leadership within the company is not just about guiding others but also about driving forward the mission of innovation and excellence.
Applying for a Position
To apply for a position at Scientific Research Corporation, candidates should prepare their resume to highlight relevant experience and skills. The interview process is designed to assess not only professional qualifications but also a candidate's alignment with the company’s values and culture.
Stay Connected with Scientific Research Corporation Careers
Prospective candidates are encouraged to stay informed about new job opportunities and company news by subscribing to job alert emails. This ensures that they do not miss out on exciting and rewarding employment opportunities at Scientific Research Corporation.
Join the Team
Search open positions that match your skills and interests. Scientific Research Corporation looks for passionate, curious, creative, and solution-driven team players.
SEARCH SCIENTIFIC RESEARCH CORPORATION JOBS
Keep Up to Date
Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who are part of Scientific Research Corporation.
READ CAREERS BLOG
Job Alert Emails
Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover what exciting and rewarding opportunities await at Scientific Research Corporation.