Senior Cloud Information Systems Security Engineer

MANTECH • Huntsville, AL

1h • Onsite

About The Position

MANTECH is seeking a motivated, career- and customer-oriented Senior Cloud Information Systems Security Engineer to join its team in Huntsville, Alabama. This is an onsite position. The engineer will lead and supervise security engineering efforts across the complete Risk Management Framework (RMF) lifecycle, guiding control selection, security assessments, and risk remediation so mission-critical systems can achieve and maintain operational authorization.

Requirements

• Bachelor's degree or equivalent experience; six additional years of experience may substitute for the degree.
• At least 8 years of experience in secure design, analysis, and testing of information security systems and products, or at least 6.5 years with a master's degree.
• At least 8 years of experience applying methods, standards, and approaches to ensure baseline security safeguards are appropriately implemented and documented, or at least 6.5 years with a master's degree.
• At least 8 years of experience creating and updating security test plans to detect and mitigate information-system risks, or at least 6.5 years with a master's degree.
• Must possess at least one of the following certifications: CISSP, CEH, CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, or GDSA.
• Must have a current and active Top Secret security clearance with SCI eligibility.
• Must be able to obtain and maintain a polygraph.

Nice To Haves

• Master’s degree in Computer Science, Cybersecurity, or a related technical discipline.
• Demonstrated experience leading cross-functional teams through complex cloud accreditation and authorization milestones.
• Expert knowledge of federal cyber risk, vulnerability management frameworks, and compliance automation platforms.

Responsibilities

• Lead and supervise security professionals managing end-to-end implementation of the RMF lifecycle for customer IT systems.
• Coordinate RMF preparation activities and guide system categorization based on mission impact and regulatory requirements.
• Advise on selecting, tailoring, and documenting security controls aligned with risk appetite and compliance standards.
• Direct deployment of technical, operational, and management controls throughout system lifecycles.
• Oversee security control assessments and prepare risk management documentation for system authorization and executive decisions.
• Manage ongoing monitoring, continuous assessment activities, and metric collection to adapt security strategies and maintain compliance.
• Provide subject-matter expertise on risk analysis, incident response, remediation, and audits.
• Communicate status and risks to stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior