Senior Information System Security Engineer

MANTECH seeks a Senior Information System Security Engineer to develop accreditation packages for cloud systems in AWS and Azure environments. The role supports cybersecurity research, security requirements and policies, A&A packages, and vulnerability mitigation for mission-critical national security projects.

Responsibilities:

• Performing cyber security research under NAVSEA for cloud and network solutions
• Developing, defining, and aiding in implementing cyber security policies and processes
• Defining IS and Network Environment security requirements in accordance with applicable cybersecurity requirements
• Supporting A&A packages for multiple projects
• Applying security expertise to new modernization cyber solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation for security policies and memorandum for records
• Developing Plan of Action and Milestones with proper Mitigations or Remediations, accordingly
• Developing approaches to mitigate IS and Cloud Network Environment vulnerabilities and recommend changes to network or network system components as needed
• Travel up to 25%

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field, and 8+ years of relevant experience
• 5+ years of developing secure solutions for incident response, business continuity, and disaster recovery
• 3+ years of implementing security controls and policies with emerging cybersecurity technologies, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits
• Must have an active Security+ certification
• Must have an AWS Cloud Certification
• Must be familiar with the use and operation of security tools including AWS Inspector, STIG Viewer, eMASSter, and Tenable Nessus and/or Security Center
• Knowledge and experience working with federal compliance and guidance, including FISMA, RMF, Federal Enterprise Architecture Framework, DoDAF, NIST Cybersecurity Framework, NIST 800 series, FedRAMP and cloud-based security controls
• Must possess an active Secret Clearance
• Experience with cloud systems, cloud hosting environment, or cloud brokerages, preferably Navy
• Master's degree in Computer Science, Information Technology, Engineering, or a related technical field
• One of the following certifications: Certified Information Systems Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), or CISSP- Information System Security Architecture Professional (ISSAP) or an equivalent security certification