Information System Security Officer

MANTECH; Corridor North (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

MANTECH is seeking a motivated Information System Security Officer (ISSO) to join our team in Annapolis Junction, MD. You will support enterprise infrastructure for a global mission-focused workforce, managing cybersecurity documentation, RMF lifecycle activities, and system vulnerabilities in alignment with Sponsor policies.

Responsibilities include maintaining SSPs, reviewing POAMs, and coordinating with IPTs and vendors on NIST RMF implementations and compliance.

Qualifications

• 10 years of relevant experience with a Bachelor's degree; 4 years can substitute for degree.
• Experience with sponsor tools such as Xacta and LatteArt.
• Experience managing POAMs, performing audit log reviews, and maintaining secure system inventories.
• IAM I certification (DoD 8140) or equivalent (CAP/CND/Cloud+/GSLC/Security+ CE/HCISSP/CASP+CE/CISM/CISSP/CCISO) preferred.

Responsibilities

• Update and maintain hardware and software inventory records and change logs.
• Support Secure the Enterprise (STE) and Secure the Network (STN) activities.
• Review Xacta notices and ensure accurate compliance docs.
• Complete SEAR audit logs per Sponsor standards.
• Track and resolve POAMs for IAVA/IAVAx findings.
• Develop and maintain SSPs for new and existing systems.
• Analyze vulnerability scans and coordinate remediation with owners.
• Utilize Gatekeeper, Xacta, SEAR, and LatteArt in daily operations.

Skills

Xacta

LatteArt

POAM management

RMF lifecycle

SSP development

Audit logs

Education

Bachelor's degree

Tools

Gatekeeper

Xacta

SEAR

LatteArt

SCANBOY

Job description

MANTECH seeks a motivated, career driven, and customer-focusedInformationSystem Security Officer (ISSO) to join our team inAnnapolis Junction, Maryland.

You will play a critical role in supporting enterprise infrastructure capabilities for a global, mission-focused workforce. As an ISSO, you will work alongside customers, Integrated Product Teams (IPTs), and vendors to support the implementation and compliance of advanced EIT capabilities through Data Center & Compute Services. You will manage cybersecurity documentation, assess system vulnerabilities, and support the Risk Management Framework (RMF) lifecycle in alignment with Sponsor policies.

Responsibilities include, but are not limited to:

• Update and maintain hardware and software inventory records, including associated change logs
• Support and coordinate Secure the Enterprise (STE) and Secure the Network (STN) activities
• Review and address Xacta notices and ensure compliance documentation is accurate and current
• Complete SEAR audit log records in accordance with Sponsor standards
• Track, review, and resolve POAMs (Plan of Action and Milestones) related to IAVA/IAVAx findings
• Develop and maintain System Security Plans (SSPs) for both new and existing systems
• Analyze vulnerability scan results and collaborate with system owners to implement remediation
• Leverage sponsor tools such as Gatekeeper, Xacta, SEAR, and LatteArt in daily operations
  

Minimum Qualifications:

• 10 years of relevant experience with a Bachelors degree from an accredited college or university. 4 years of addition experience may be substituted for a Bachelors degree
• Experience with Xacta, LatteArt and other sponsor tools
• Experience managing POAMs, performing audit log reviews, and maintaining secure system inventories
• IAM I certification (DoD 8140 required upon start of employment. Acceptable certifications include CAP/CND/Cloud+/GSLC/Security + CE/HCISSP/CASP+CE/CISM/CISSP/ or CCISO)
  

Preferred Qualifications:

• Knowledge of STE and STN processes and coordination
• Experience with Rev 5 and ServiceNow ICAM
• Experience with Gatekeeper, SEAR, SCANBOY
• Demonstrated experience in SSP development and incident response management

Clearance Requirements:

• Must possess and maintain a current/active TS/SCI clearance with Polygraph
  

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time
• Occasionally moves about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, including delivering presentations. Must be able to exchange accurate information in these situations