Information System Security Officer

MANTECH; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

MANTECH seeks a motivated and customer-focused Information System Security Officer (ISSO) to join our team in Annapolis Junction, Maryland. You will support enterprise infrastructure for a global workforce, manage cybersecurity documentation, assess vulnerabilities, and drive RMF lifecycle activities in alignment with Sponsor policies.

Responsibilities include maintaining SSPs, performing vulnerability analysis, and coordinating with IPTs and vendors using Sponsor tools like Gatekeeper, Xacta,

Qualifications

• 10 years of relevant experience with a Bachelor's degree (or 4 additional years in lieu).
• Experience with sponsor tools such as Xacta, LatteArt, Gatekeeper, SEAR, SCANBOY.
• Experience managing POAMs, audit logs, and secure inventories.
• IAM I certification required (DoD 8140); examples include CAP/CND/Cloud+/GSLC/Security+ CE/HCISSP/CASP+CE/CISM/CISSP/CCISO).

Responsibilities

• Update and maintain hardware/software inventory records with change logs.
• Support Secure the Enterprise (STE) and Secure the Network (STN) activities.
• Review Xacta notices; ensure compliance documentation is accurate.
• Complete SEAR audit log records per Sponsor standards.
• Track, review, and resolve POAMs related to IAVA/IAVAx findings.
• Develop and maintain SSPs for new and existing systems.
• Analyze vulnerability scan results and coordinate remediation.

Skills

10 years of experience

Security awareness

Education

Bachelor's degree

Tools

Xacta

LatteArt

Gatekeeper

SEAR

SCANBOY

Job description

MANTECH seeks a motivated, career driven, and customer-focused Information System Security Officer (ISSO) to join our team in Annapolis Junction , Maryland.

You will play a critical role in supporting enterprise infrastructure capabilities for a global, mission-focused workforce. As an ISSO, you will work alongside customers, Integrated Product Teams (IPTs), and vendors to support the implementation and compliance of advanced EIT capabilities through Data Center & Compute Services. You will manage cybersecurity documentation, assess system vulnerabilities, and support the Risk Management Framework (RMF) lifecycle in alignment with Sponsor policies.

Responsibilities Include, But Are Not Limited To

• Update and maintain hardware and software inventory records, including associated change logs
• Support and coordinate Secure the Enterprise (STE) and Secure the Network (STN) activities
• Review and address Xacta notices and ensure compliance documentation is accurate and current
• Complete SEAR audit log records in accordance with Sponsor standards
• Track, review, and resolve POAMs (Plan of Action and Milestones) related to IAVA/IAVAx findings
• Develop and maintain System Security Plans (SSPs) for both new and existing systems
• Analyze vulnerability scan results and collaborate with system owners to implement remediation
• Leverage sponsor tools such as Gatekeeper, Xacta, SEAR, and LatteArt in daily operations

Minimum Qualifications

• 10 years of relevant experience with a Bachelors degree from an accredited college or university. 4 years of addition experience may be substituted for a Bachelors degree
• Experience with Xacta, LatteArt and other sponsor tools
• Experience managing POAMs, performing audit log reviews, and maintaining secure system inventories
• IAM I certification (DoD 8140 required upon start of employment. Acceptable certifications include CAP/CND/Cloud+/GSLC/Security + CE/HCISSP/CASP+CE/CISM/CISSP/ or CCISO)

Preferred Qualifications

• Knowledge of STE and STN processes and coordination
• Experience with Rev 5 and ServiceNow ICAM
• Experience with Gatekeeper, SEAR, SCANBOY
• Demonstrated experience in SSP development and incident response management

Clearance Requirements

• Must possess and maintain a current/active TS/SCI clearance with Polygraph

Physical Requirements

• Must be able to remain in a stationary position 50% of the time
• Occasionally moves about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, including delivering presentations. Must be able to exchange accurate information in these situations