Information System Security Engineer

MANTECH; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

MANTECH in Washington, DC is seeking a motivated Information System Security Engineer (ISSE) to join our team across Washington, DC; Chantilly, VA; Quantico, VA; or Huntsville, AL. The ISSE will identify protection needs and define security requirements for the IS and Network Environment.

Responsibilities include designing security architectures, integrating security with CDS where applicable, developing secure designs for networks, and ensuring RMF/ATO compliance.

Qualifications

• Must meet one of the following education/experience combinations: high school + 14 yrs, Associate + 7 yrs, Bachelor + 5 yrs, or Master + 3 yrs.
• Hold at least one of the following certifications: CISSP (or Associate), CASP CE, CSSLP, CISSP-ISSEP, or CISSP-ISSAP.
• Familiarity with security tools including Tenable Nessus/Security Center, IBM Guardium, HP WebInspect, NMAP, or similar.
• Working knowledge of NIST RMF and ATO processes.

Responsibilities

• Identify information protection needs for the IS and Network Environment. Define security requirements accordingly.
• Design security architectures for IS/Network Environments and develop cybersecurity-enabled products.
• Integrate security with Cross Domain Solutions (CDS).
• Develop security designs for new or existing networks ensuring cybersecurity requirements are addressed.
• Design, develop, and implement network security measures ensuring confidentiality, integrity, availability, authentication, and non-repudiation.

Skills

RMF knowledge

ISSE experience

Security architecture

Vulnerability assessment

NIST standards

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Master's degree in Computer Science or Cybersecurity (preferred)

Tools

Tenable Nessus

Security Center

IBM Guardium

HP WebInspect

NMAP

Job description

MANTECH seeks a motivated, career and customer-oriented Information System Security Engineer (ISSE) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL.

Responsibilities Include, But Are Not Limited To

• Identify information protection needs for an IS and Network Environment. Define IS and Network Environment security requirements in accordance with applicable cybersecurity requirements


• Design security architectures for use within the IS and Network Environment. Design and develop cybersecurity-enabled products for use within an IS and Network Environment


• Integrate and/or implement security with Cross Domain Solutions (CDS) for use within an IS and Network Environment


• Develop and implement security designs for new or existing network system(s). Ensure that the design of hardware, operating systems, and software applications adequately address cybersecurity requirements for the IS and Network Environment


• Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation. Design, develop, and implement specific cybersecurity countermeasures for the IS and Network Environment


• Develop interface specifications for the IS and Network Environment. Develop approaches to mitigate IS and Network Environment vulnerabilities and recommend changes to network or network system components as needed


• Ensure that network system(s) designs support the incorporation of FBI directed cybersecurity vulnerability solutions

Minimum Qualifications

• Must meet one of the following levels of experience: A high school diploma/GED and 14 years’ experience, an Associate’s degree and 7 years’ experience, a Bachelors degree and five years’ experience, or a Master’s and 3 years’ experience.


• Hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP) (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), or CISSP- Information System Security Architecture Professional (ISSAP).


• Familiarity with the use and operation of security tools including: Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications.


• Working knowledge of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and ATO processes.

Preferred Qualifications

• Degree in Computer Science, Cybersecurity, or other cyber discipline.

Security Clearance Requirements

• Must have a current/active Top Secret security clearance with eligibility to obtain SCI prior to starting this position.


• Selected candidate must be willing to undergo a Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50%


• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.


• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer


• Often positions self to maintain computers in the lab, including under the desks and in the server closet


• Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations