Assessment and Authorization Specialist

MANTECH•Herndon, VA

17h•$91,600 - $153,800•Onsite

About The Position

MANTECH is seeking a motivated, career- and customer-oriented Assessment & Authorization (A&A) Specialist to join its team in Herndon, Virginia. The role supports government intelligence agencies and focuses on assessing and authorizing information systems, identifying security weaknesses, and maintaining security documentation and accreditation. The specialist also performs Information Systems Security Engineering activities and validates security baselines and corrective actions. The position is onsite and requires an active/current TS/SCI clearance with polygraph. The listed projected compensation range is $91,600 to $153,800. MANTECH describes benefits that may be available depending on the position, including health and life insurance, paid time off, holiday pay, short- and long-term disability, retirement and savings, learning and development, wellness programs, and other optional benefits.

Requirements

High school diploma.
At least 3 years of experience supporting an Information Systems Security program and guiding system users on technical security compliance.
At least 2 years of specialized experience conducting vulnerability scans and analyzing results using Rapid7 Nexpose or similar enterprise scanning tools.
Experience with ICD-503 controls, CNSS 1253 guidelines, and NIST Risk Management Framework (RMF) accreditation workflows.
Understanding of system security design, enclave security baselines, and security technology implementation.
Active/current TS/SCI clearance with polygraph.
Ability to remain in a stationary position 50% of the time.

Nice To Haves

Certified Information Systems Security Professional (CISSP) or DoD 8570/8140 IAM/IAT Level II or III baseline certification.
Experience integrating host-based (HIDS) and network-based (NIDS/IPS) intrusion detection and prevention technologies.
Ability to perform systems analysis, process definition, requirements decomposition, and project management.
Strong interpersonal, briefing, and technical writing skills, including experience communicating complex security findings to mission stakeholders.

Responsibilities

Assess systems and networks within networking environments or enclaves to identify configuration deviations, policy non-compliance, and security vulnerabilities.
Execute passive compliance audits and active vulnerability assessments using enterprise security scanning solutions such as Rapid7 Nexpose.
Lead system assessment and authorization activities to establish, maintain, and support accreditation and special approval authorizations in accordance with ICD-503, CNSS 1253, and NIST standards.
Develop, update, and maintain system Security Plans, Body of Evidence (BOE) documentation, and Plans of Action and Milestones (POA&M) for formal Security Test and Evaluation (ST&E) milestones.
Perform Information Systems Security Engineering (ISSE) tasks, including system architecture reviews, security requirement decomposition, and verification testing.
Validate security baselines, recommend safeguards, conduct periodic system audit reviews, and track corrective actions to closure.