Information System Security Engineer

MANTECH; Chantilly (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

MANTECH is seeking an Information System Security Engineer (ISSE) in Chantilly, VA to advise a government intelligence customer. You will apply ISSE expertise to protect information systems and support security certification activities.

As a senior ISSE, you will review risk, design secure enclaves, and coordinate with military and civilian personnel. A TS/SCI with Polygraph is required to perform this role.

Qualifications

• Bachelor's degree and 4+ years of relevant experience, or HS diploma with 9+ years of experience.
• Familiarity with information system security principles.
• Experience interfacing with military, civilian, and contractor personnel at all levels.
• Knowledge of IC/DoD policies, procedures, and instructions.
• Applied system security engineering in design, life cycle, risk management and security testing.
• One of IAM Level I certifications: CAP, GSLC, CISM, CASP, CISSP, CCISCO, Security+.

Responsibilities

• Perform or review security assessments to identify vulnerabilities and mitigation options.
• Design and implement secure networking, computing, and enclave environments.
• Assist in security planning, risk analysis, and RMF activities for systems and networks.
• Review C&A documentation for completeness and compliance.
• Support IC and DoD security processes per ICD 503 and IC business rules.
• Assist architects in applying security functionality to enterprise solutions.
• Travel up to 25% CONUS.

Skills

InfoSec principles

IA policy knowledge

Briefing stakeholders

NIST RMF familiarity

Security engineering

Education

Bachelor's Degree

High School Diploma/GED

Tools

Trellix ePolicy Orchestrator

Tenable Security Center

Splunk

Job description

MANTECH seeks a motivated, career and customer-oriented Information System Security Engineer ISSE to join our team in Chantilly, VA.

As a Senior Information System Security Engineer ISSE, you will use your technical ISSE and IA experience to provide advice, assistance, and guidance to a government intelligence customer.

Responsibilities Include, But Are Not Limited To

• Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.
• Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
• Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
• Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content.
• Support security authorization activities in compliance with Information System Certification and Accreditation Process (ICD 503), the NIST Risk Management Framework (RMF) process, and prescribed ICs business processes for security engineering.
• Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of government security policy and enterprise solutions.
• Occasional travel, 25% CONUS

Minimum Qualifications

• Bachelor’s Degree and 4 years of relevant experience, or high school diploma/GED and 9 years of relevant experience
• Familiarity with information system security principles.
• Experience with interfacing and briefing military, civilian, and contractor personnel at all levels.
• Knowledge of security-related IC and DoD policies, procedures and operating instructions.
• Experience in applying system security engineering expertise in one or more of the following: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification, authentication, and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing.
• One of the following certifications required Information Assurance Management (IAM) Level I: CAP, GSLC, CISM, CASP, CISSP, CCISCO, Security+.

Preferred Qualifications

• Experience in supporting the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
• Experience in supporting the building of security architectures and enforcing the design and implementation of trusted relations among external systems and architectures.
• Experience as a primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments.
• Experience in assessing and mitigating system security threats/risks throughout the program life cycle.
• Experience with Trellix ePolicy Orchestrator
• Experience Tenable Security Center
• Experience with Splunk

Security Clearance Requirement

• Active/current TS/SCI with Polygraph is required.

Physical Requirements

• Must be able to be in a stationary position more than 50% of the time
• Must be able to communicate, converse, and exchange information with peers and senior personnel
• Constantly operates a computer and other office equipment