Test and Evaluation Cyber Expert

MANTECH•Washington, DC

5d•$128,800 - $214,500•Hybrid

About The Position

MANTECH seeks a motivated, career and customer-oriented Test and Evaluation Cyber Expert to join our team in Washington, D.C. This is a hybrid position with one day per month onsite. This role involves providing operational Test and Evaluation expertise on a wide range of activities and missions supporting systems for cyber security and cyber resilience. The position requires a strong focus on assessing the confidentiality, integrity, and availability of systems and data against cyber threats, performing T&E technical analysis on a multi-disciplinary team, and providing technical advisory and oversight to the government T&E division lead. Key areas of focus include cyber systems, industrial control systems, operational technology (OT) security, cyber table top exercises, cyber vulnerability and penetration assessment (CVPA) testing, and adversarial assessments. The role also involves analyzing and providing input to T&E Master Plans with an emphasis on cyber resilience, security controls validation (e.g., NIST SP 800-53), and compliance with cybersecurity regulations. Collaboration with government clients on T&E WIPT’s to establish and monitor program execution, coordinate information between organizations, and identify/mitigate cyber risks throughout the system lifecycle is essential. Additionally, the position requires reviewing and providing feedback on Acquisition Program documents, specifically addressing cybersecurity requirements, threat modeling, and security testing strategies, as well as providing Cyber Resilience testing input and updates to relevant guidebooks and documents. The role may also involve teaching Cyber Resilience T&E topics in DHS T&E workshops or classes.

Requirements

Master’s degree in Computer Science, Systems Engineering, Information Systems, or a related field
15+ years of Test and Evaluation experience with a significant portion dedicated to cyber security testing and evaluation of complex IT, OT, and cloud-based systems
Ability to teach T&E topics, particularly in the domain of cyber security testing methodologies, (e.g., Cyber Table Tops, Adversarial Assessment, Cyber Attack Methods, Cyber threats) and best practices
Technical writing experience, with the ability to document complex cybersecurity test plans, penetration test reports, vulnerability assessment findings, and mitigation recommendations
Experience working on a DOD or DHS acquisition program performing cyber resilience testing
Must possess active Secret clearance
Must be able to obtain DHS suitability

Nice To Haves

Experience with DHS acquisition policy and DHS systems engineering lifecycle with specific experience in cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001), red teaming, and blue teaming methodologies
Defense Acquisition University or DHS Level III Test and Evaluation Certification or equivalent
Knowledge and/or experience with DHS Acquisition Directives and Acquisition Lifecycle Framework (MD102/ALF); knowledge, understanding and/or experience with the DHS (or DoD equivalent) Test and Evaluation policies, procedures and best practices for conducting, monitoring and reviewing operational test and evaluation

Responsibilities

Provide operational Test and Evaluation expertise on a wide range of activities and missions supporting systems for cyber security and cyber resilience to include review of requirements, test planning, test execution, data management, and test reporting with a strong focus on assessing the confidentiality, integrity, and availability of systems and data against cyber threats
Perform T&E technical analysis on a multi-disciplinary team, providing technical advisory and technical oversight to the government T&E division lead with a focus on cyber systems, industrial control systems, operational technology (OT) security, cyber table top exercises and cyber vulnerability and penetration assessment (CVPA) testing, and adversarial assessments
Analyze and provide input to T&E Master Plans with an emphasis on cyber resilience, security controls validation (e.g., NIST SP 800-53), and compliance with cybersecurity regulations
Work with government clients on T&E WIPT’s to establish and monitor the program’s execution towards milestones, key events, significant accomplishment criteria, and coordinate information between organizations with a focus on identifying and mitigating cyber risks throughout the system lifecycle
Review and provide feedback to Acquisition Program documents such as the Mission Needs Statement, Operational Requirements Documents, Concept of Operations, and Test and Evaluation Master Plan, specifically addressing cybersecurity requirements, threat modeling, and security testing strategies
Provide Cyber Resilience testing input and updates to Cyber Resilience guidebooks, Letter of Assessment, and other T&E documents
Teach Cyber Resilience T&E topics in DHS T&E workshops or T&E classes