Information System Security Officer

MANTECH; San Diego (CA); On-site; USD 110,000 - 170,000; Full time

Job summary

MANTECH is seeking a motivated Information System Security Officer to join our team in San Diego, CA. This onsite role focuses on securing information systems in accordance with DoD RMF requirements and organizational policies.

You will maintain A&A documentation, manage RMF packages, oversee continuous monitoring, and support incident response. Qualified candidates have a Security+ and 4+ years of information security experience, with DoD-related knowledge and a Top Secret/SCI eligibility

Qualifications

• Bachelor’s degree with 4+ years of information systems security experience, or equivalent experience (11+ years if no degree).
• Security+ Certification.
• 3+ years’ experience with RMF, ICD 503, NIST SP 800-53, JSIG, or DJSIG.
• Knowledge of current DoD authorization practices.

Responsibilities

• Maintain A&A documentation per JSIG, NIST SP 800-37, and NIST SP 800-53 with SSPs, Contingency Plans, and Incident Response procedures.
• Track POA&M deficiencies and provide quarterly status updates to the ISSM and SCA.
• Implement Continuous Monitoring to ensure ongoing authorization packages.
• Oversee audit log collection systems and perform weekly reviews to maintain system integrity.
• Manage hardware and software inventories, ensuring assets remain vendor-supported.
• Maintain security tools, patch management, and vulnerability programs in coordination with Cybersecurity team.
• Assess changes with CCB to evaluate security impacts.
• Facilitate annual security awareness and role-based training, account verification, and ISSM support.

Skills

RMF / DoD security

Security+ certification

DoD security knowledge

Education

Bachelor’s degree in IT / Cyber Security / CS / IS Management / Engineering

Associates degree + 6 years experience

High School Diploma + 11+ years experience

Job description

MANTECH seeks a motivated, career and customer-oriented Information System Security Officer to join our team in San Diego, CA. This is an onsite position.

Responsibilities Include But Are Not Limited To

• Maintain Assessment & Authorization (A&A) documentation in accordance with JSIG, NIST SP 800-37, and NIST SP 800-53, including SSPs, Contingency Plans, and Incident Response procedures
• Track compliance deficiencies using Plans of Action and Milestones (POA&M) through mitigation or risk acceptance, delivering quarterly status updates to the ISSM and SCA
• Implement and execute the Continuous Monitoring strategy to ensure ongoing compliance with authorization packages
• Oversee audit log collection systems and perform weekly reviews to maintain system integrity
• Manage hardware and software inventories, ensuring all deployed assets remain actively vendor-supported
• Maintain security tools, patch management processes, and vulnerability management programs in coordination with the Cybersecurity team
• Assess proposed system configuration changes as part of the Change Control Board (CCB) to evaluate security impacts
• Facilitate annual security awareness and role-based training, personnel account verification, and general ISSM support

Minimum Qualifications

• Bachelor’s degree preferably in IT, Cyber Security, Computer Science, Information Systems Management, Engineering, or similar field of study with 4+ years of information systems security experience, or an Associates degree with 6 additional years of relevant experience, or High School Diploma with 11+ years’ experience in lieu of degree
• Security+ Certification
• 3+ years’ experience with Risk Management Framework (RMF), ICD 503, NIST SP800-53, JSIG, or DJSIG
• Knowledge and experience with current authorization practices, specifically within the DoD

Preferred Qualifications

• Masters degree preferably in IT, Cyber Security, Computer Science, Information Systems Management, Engineering, or similar field of study
• Experience with security efforts related to modern Windows, Cloud computing, Linux, UNIX, Cisco, SQL or Oracle databases, and virtual computing
• Experience implementing and using various Cyber Security tools including vulnerability assessment, patch management, audit collection, audit review, audit management, and end point protection

Clearance Requirements

• Must have an active Top Secret clearance with the ability to obtain an SCI

Physical Requirements

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.