Senior Information System Security Engineer

MANTECH is hiring a Senior Information System Security Engineer to develop accreditation packages for cloud systems in AWS and Azure environments. The role supports cybersecurity research, security requirements, A&A packages, and vulnerability mitigation for defense and national security projects.

Responsibilities:

• Performing cyber security research under NAVSEA for cloud and network solutions
• Developing, defining, and aiding in implementing cyber security policies and processes
• Defining IS and Network Environment security requirements in accordance with applicable cybersecurity requirements
• Supporting A&A packages for multiple projects
• Applying security expertise to new modernization cyber solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation for security policies and memorandum for records
• Developing Plan of Action and Milestones with proper Mitigations or Remediations, accordingly
• Developing approaches to mitigate IS and Cloud Network Environment vulnerabilities and recommend changes to network or network system components as needed
• Travel up to 25%

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, and 8+ years of relevant Information Systems experience
• 5+ years developing secure solutions for incident response, business continuity, and disaster recovery
• 3+ years implementing security controls and policies with emerging cybersecurity technologies, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits
• Must have an active Security+ certification
• Must be familiar with the use and operation of security tools including STIG Viewer, eMASSter, and Tenable Nessus and/or Security Center
• Experience working with federal compliance and guidance, including FISMA, RMF, Federal Enterprise Architecture Framework, DoDAF, NIST Cybersecurity Framework, NIST 800 series, FedRAMP and cloud-based security controls
• Must have an active Secret security clearance
• Master's degree
• Experience with cloud systems, cloud hosting environment, or cloud brokerages, preferably Navy
• One of the following certifications: Certified Information Systems Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), or CISSP- Information System Security Architecture Professional (ISSAP) or an equivalent security certification