Information System Security Engineer

MANTECH; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

MANTECH seeks a motivated, career- and customer-oriented Information System Security Engineer (ISSE) to join our team in Virginia Beach, VA. This is a remote position, offering opportunities to work on innovative and mission-critical national security projects.

You will develop accreditation packages for cloud systems in AWS and Azure, collaborate with a skilled team, and contribute to cyber security growth and experience in this field.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical field.
• 2+ years developing secure solutions for incident response, business continuity, and disaster recovery.
• 2+ years implementing security controls and policies with emerging cybersecurity technologies, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits.
• Active Security+ certification.
• Experience with security tools STIG Viewer, eMASSter, and Tenable Nessus and/or Security Center.
• Experience with cloud brokerages, preferably Navy.
• Knowledge of federal compliance/guidance including FISMA, RMF, NIST CSF, DoDAF, FedRAMP, and cloud-based security controls.

Responsibilities

• Performing cyber security research under NAVSEA for cloud and network solutions.
• Developing, defining, and aiding in implementing cyber security policies and processes.
• Defining IS and Network Environment security requirements in accordance with applicable cybersecurity requirements.
• Supporting A&A packages for multiple projects.
• Applying security expertise to new modernization cyber solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation for security policies and memoranda for records.
• Developing Plan of Action and Milestones with proper mitigations or remediations.
• Developing approaches to mitigate IS and Cloud Network Environment vulnerabilities and recommend changes to network or network system components as needed.
• Travel up to 25%.

Skills

Incident response

Business continuity

Disaster recovery

Access control

Privileged access management

Data security

Network security

Cloud security

Vulnerability management

Configuration management

Privacy

Audits

STIG Viewer

eMASSter

Tenable Nessus

Security Center

Cloud brokerages

FISMA

RMF

NIST Cybersecurity Framework

FedRAMP

CISSP

CASP CE

CSSLP

ISSEP

ISSAP

Interim Secret clearance

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field

3+ years of Information Systems experience

Security+ certification

Master’s degree

Tools

STIG Viewer

eMASSter

Tenable Nessus

Security Center

Job description

MANTECH seeks a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Virginia Beach, VA. This is a remote position.

As an ISSE, you will have the opportunity to work on innovative and mission-critical and national security projects. You will collaborate with a skilled team of professionals, responsible for developing accreditation packages for cloud systems in both AWS and Azure environments. This position offers great opportunities for technical growth and improved experience in Cyber Security.

Responsibilities Include But Are Not Limited To

• Performing cyber security research under NAVSEA for cloud and network solutions.
• Developing, defining, and aiding in implementing cyber security policies and processes.
• Defining IS and Network Environment security requirements in accordance with applicable cybersecurity requirements.
• Supporting A&A packages for multiple projects.
• Applying security expertise to new modernization cyber solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation for security policies and memorandum for records.
• Developing Plan of Action and Milestones with proper Mitigations or Remediations, accordingly.
• Developing approaches to mitigate IS and Cloud Network Environment vulnerabilities and recommend changes to network or network system components as needed.
• Travel up to 25%.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical field, and 3+ years of relevant Information Systems experience.
• 2+ years developing secure solutions for incident response, business continuity, and disaster recovery.
• 2+ years implementing security controls and policies with emerging cybersecurity technologies, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits.
• An active Security+ certification.
• Experience with the use and operation of security tools including STIG Viewer, eMASSter, and Tenable Nessus and/or Security Center.
• Experience with cloud brokerages, preferably Navy.
• Knowledge and experience working with federal compliance and guidance, including FISMA, RMF, Federal Enterprise Architecture Framework, DoDAF, NIST Cybersecurity Framework, NIST 800 series, FedRAMP and cloud-based security controls.

Preferred Qualifications

• Master’s degree.
• One of the following certifications: Certified Information Systems Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), or CISSP- Information System Security Architecture Professional (ISSAP) or an equivalent security certification.

Clearance Requirements

• Must have an Interim Secret clearance at a minimum with the ability to obtain an active Secret security clearance.

Physical Requirements

• The person in this position must be able to remain in a stationary position 50% of the time.
• Must be able to move around the office and operate office equipment.
• Frequently communicate with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.