Senior Cloud Information System Security Engineer

MANTECH • Washington, DC

8d • Onsite

About The Position

MANTECH seeks a motivated, career- and mission-focused Senior Cloud Information Systems Security Engineer (ISSE) to join our team in Washington, D.C. or Huntsville, AL. This is an onsite position. The role involves leading, mentoring, and supervising a team of contractor security professionals responsible for the end-to-end implementation of the Risk Management Framework (RMF) lifecycle for FBI IT systems. The position requires overseeing and coordinating activities within the Prepare step, guiding system categorization, advising on security control selection and implementation, and ensuring comprehensive security control assessments. The Senior ISSE will serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.

Requirements

• 10 + years of experience in secure design, analysis, and test of information security systems and products.
• 10 + years of experience applying methods, standards, and approaches for ensuring baseline security safeguards are appropriately implemented and documented.
• 10 + years of experience creating and updating security test plans for detecting and mitigating risk to information systems.
• Bachelor's degree or equivalent (6 additional years of experience) or Master's degree with 7 + years of relevant experience.
• Must possess one of the following DoD 8140.03 Advanced proficiency certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP.
• Active Top Secret clearance with SCI eligibility is required.

Nice To Haves

• Possession of a Cloud certification (e.g., AWS Certified Security - Specialty, CCSP, AWS Solutions Architect Associate, AZ-500, or Google Professional Cloud Security Engineer).
• Demonstrated experience leading RMF lifecycle teams across cloud and hybrid enterprise environments.
• Experience with DOJ/FBI GRC applications such as Xacta or JCAM.

Responsibilities

• Lead, mentor, act as a SME (Subject Matter Expert) and supervise a team of contractor security professionals responsible for the end-to-end implementation of the Risk Management Framework (RMF) lifecycle for FBI IT systems.
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior