Senior Information System Security Engineer

MANTECH

16h•$117,000 - $195,100•Remote

About The Position

MANTECH seeks a motivated, career- and customer-oriented Senior Information System Security Engineer (ISSE) to join its team in Norfolk, Virginia. The position is fully remote and supports innovative, mission-critical national security projects. The ISSE will collaborate with a skilled team to develop accreditation packages for cloud systems in AWS and Azure environments, with opportunities for technical growth and cybersecurity experience. The role requires an active Secret clearance and travel of up to 25%.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical field, and 8 or more years of relevant experience.
At least 5 years of experience developing secure solutions for incident response, business continuity, and disaster recovery.
At least 3 years of experience implementing security controls and policies with emerging cybersecurity technologies, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits.
Active Security+ certification.
AWS Cloud Certification.
Familiarity with security tools including AWS Inspector, STIG Viewer, eMASSter, and Tenable Nessus and/or Security Center.
Knowledge and experience with federal compliance and guidance, including FISMA, RMF, Federal Enterprise Architecture Framework, DoDAF, NIST Cybersecurity Framework, NIST 800 series, FedRAMP, and cloud-based security controls.
Active Secret clearance.

Nice To Haves

Experience with cloud systems, cloud hosting environments, or cloud brokerages, preferably in the Navy.
Master’s degree in Computer Science, Information Technology, Engineering, or a related technical field.
One of the following certifications or an equivalent security certification: CISSP, CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP-ISSEP, or CISSP-ISSAP.

Responsibilities

Perform cybersecurity research under NAVSEA for cloud and network solutions.
Develop, define, and assist in implementing cybersecurity policies and processes.
Define information system and network environment security requirements in accordance with applicable cybersecurity requirements.
Support authorization and accreditation (A&A) packages for multiple projects.
Apply security expertise to modernization cybersecurity solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation for security policies and memoranda for records.
Develop Plans of Action and Milestones with appropriate mitigations or remediations.
Develop approaches to mitigate information system and cloud network environment vulnerabilities and recommend changes to network or network system components as needed.
Travel up to 25%.