Senior Information System Security Engineer

MANTECH is a trusted partner to the Department of Defense, delivering cutting-edge projects that make a real impact. They are seeking a Senior Information System Security Engineer to work on innovative and mission-critical national security projects, focusing on developing accreditation packages for cloud systems in AWS and Azure environments.

Responsibilities:

• Performing cyber security research under NAVSEA for cloud and network solutions
• Developing, defining, and aiding in implementing cyber security policies and processes
• Defining IS and Network Environment security requirements in accordance with applicable cybersecurity requirements
• Supporting A&A packages for multiple projects
• Applying security expertise to new modernization cyber solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation for security policies and memorandum for records
• Developing Plan of Action and Milestones with proper Mitigations or Remediations, accordingly
• Developing approaches to mitigate IS and Cloud Network Environment vulnerabilities and recommend changes to network or network system components as needed
• Travel up to 25%

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, and 8+ years of relevant Information Systems experience
• 5+ years developing secure solutions for incident response, business continuity, and disaster recovery
• 3+ years implementing security controls and policies with emerging cybersecurity technologies, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits
• Must have an active Security+ certification
• Must be familiar with the use and operation of security tools including STIG Viewer, eMASSter, and Tenable Nessus and/or Security Center
• Experience with cloud brokerages, preferably Navy
• Experience working with federal compliance and guidance, including FISMA, RMF, Federal Enterprise Architecture Framework, DoDAF, NIST Cybersecurity Framework, NIST 800 series, FedRAMP and cloud-based security controls
• Must have an active Secret security clearance
• Master's degree
• One of the following certifications: Certified Information Systems Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), or CISSP- Information System Security Architecture Professional (ISSAP) or an equivalent security certification