Information System Security Officer

MANTECH; Maryland; Presencial; USD 110.000 - 180.000; Tempo integral

Resumo da vaga

MANTECH seeks a motivated, career driven ISSO in Annapolis Junction, Maryland to join our team. You will support enterprise infrastructure capabilities for a global, mission-focused workforce and manage cybersecurity documentation, assess vulnerabilities, and support RMF lifecycle.

The role collaborates with customers, IPTs, and vendors, maintaining SSPs, tracking POAMs, and leveraging tools like Xacta and Gatekeeper to ensure compliance and secure operations.

Qualificações

• 10+ years of relevant information security experience; Bachelors acceptable with 4 years substitution
• Experience with Xacta, LatteArt and other sponsor tools
• Experience managing POAMs, audit logs, and inventory of secure systems
• IAM I certification or equivalent (CAP/CND/Cloud+/GSLC/Security+ CE/CISM/CISSP/CCISO)

Responsabilidades

• Update and maintain hardware and software inventory records and change logs
• Support Secure the Enterprise (STE) and Secure the Network (STN) activities
• Review Xacta notices and ensure compliant documentation
• Complete SEAR audit log records per Sponsor standards
• Track, review and resolve POAMs for IAVA/IAVAx findings
• Develop and maintain System Security Plans (SSPs) for systems
• Analyze vulnerability scan results and coordinate remediation with owners
• Utilize Gatekeeper, Xacta, SEAR, and LatteArt in daily operations

Conhecimentos

RMF experience

Vulnerability assessment

Audit log review

POAM management

Security documentation

Incident response

Formação

Bachelor's degree

IAM I certification (DoD 8140)

Ferramentas

Xacta

LatteArt

Gatekeeper

SEAR

SCANBOY

Descrição da vaga

MANTECH seeks a motivated, career driven, and customer-focused Information System Security Officer (ISSO) to join our team in Annapolis Junction , Maryland.
You will play a critical role in supporting enterprise infrastructure capabilities for a global, mission-focused workforce. As an ISSO, you will work alongside customers, Integrated Product Teams (IPTs), and vendors to support the implementation and compliance of advanced EIT capabilities through Data Center & Compute Services. You will manage cybersecurity documentation, assess system vulnerabilities, and support the Risk Management Framework (RMF) lifecycle in alignment with Sponsor policies.

Responsibilities Include, But Are Not Limited To

• Update and maintain hardware and software inventory records, including associated change logs
• Support and coordinate Secure the Enterprise (STE) and Secure the Network (STN) activities
• Review and address Xacta notices and ensure compliance documentation is accurate and current
• Complete SEAR audit log records in accordance with Sponsor standards
• Track, review, and resolve POAMs (Plan of Action and Milestones) related to IAVA/IAVAx findings
• Develop and maintain System Security Plans (SSPs) for both new and existing systems
• Analyze vulnerability scan results and collaborate with system owners to implement remediation
• Leverage sponsor tools such as Gatekeeper, Xacta, SEAR, and LatteArt in daily operations

Minimum Qualifications

• 10 years of relevant experience with a Bachelors degree from an accredited college or university. 4 years of addition experience may be substituted for a Bachelors degree
• Experience with Xacta, LatteArt and other sponsor tools
• Experience managing POAMs, performing audit log reviews, and maintaining secure system inventories
• IAM I certification (DoD 8140 required upon start of employment. Acceptable certifications include CAP/CND/Cloud+/GSLC/Security + CE/HCISSP/CASP+CE/CISM/CISSP/ or CCISO)

Preferred Qualifications

• Knowledge of STE and STN processes and coordination
• Experience with Rev 5 and ServiceNow ICAM
• Experience with Gatekeeper, SEAR, SCANBOY
• Demonstrated experience in SSP development and incident response management

Clearance Requirements

• Must possess and maintain a current/active TS/SCI clearance with Polygraph

Physical Requirements

• Must be able to remain in a stationary position 50% of the time
• Occasionally moves about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, including delivering presentations. Must be able to exchange accurate information in these situations