Senior Cloud Information System Security Engineer

MANTECH; Chantilly (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

MANTECH in Chantilly, VA seeks a Senior Cloud Information Systems Security Engineer (ISSE) to lead RMF lifecycle activities for FBI IT systems on site.

The role requires mentoring staff, coordinating risk management, and providing expert guidance on security controls in cloud and hybrid environments, with a focus on incident response and audit support.

Qualifications

• 10+ years in secure design and analysis of information security systems.
• Experience applying RMF/DIACAP-like frameworks and documenting safeguards.
• Experience creating security test plans and risk mitigation.

Responsibilities

• Lead, mentor, SME, and supervise a team of contractor security professionals responsible for RMF lifecycle implementation for FBI IT systems.
• Oversee and coordinate Prepare step activities, defining roles, responsibilities, and risk management strategies.
• Guide system categorization efforts to classify information systems per mission impact and regulatory requirements.
• Advise on selection, tailoring, and documentation of security controls aligned with system categorization and compliance.
• Oversee implementation of technical, operational, and management controls across lifecycles; ensure deliverables are complete.
• Ensure comprehensive security control assessments are planned, executed, and documented.
• Serve as principal technical advisor on cybersecurity, risk analysis, incident response, audit support.

Skills

Team leadership

RMF lifecycle

Risk management

Cybersecurity engineering

Education

Bachelor's degree

Master's degree

Tools

Xacta

JCAM

Job description

MANTECH seeks a motivated, career- and mission-focused Senior Cloud Information Systems Security Engineer (ISSE) to join our team in Chantilly, VA. This is an onsite position.

Responsibilities Include But Are Not Limited To

• Lead, mentor, act as a SME (Subject Matter Expert) and supervise a team of contractor security professionals responsible for the end-to-end implementation of the Risk Management Framework (RMF) lifecycle for FBI IT systems.
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.

Minimum Qualifications

• 10 + years of experience in secure design, analysis, and test of information security systems and products.
• 10 + years of experience applying methods, standards, and approaches for ensuring baseline security safeguards are appropriately implemented and documented.
• 10 + years of experience creating and updating security test plans for detecting and mitigating risk to information systems.
• Bachelor's degree or equivalent (6 additional years of experience) or Master's degree with 7 + years of relevant experience.
• Must possess one of the following DoD 8140.03 Advanced proficiency certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP.

Preferred Qualifications

• Possession of a Cloud certification (e.g., "AWS Certified Security - Specialty", CCSP, AWS Solutions Architect Associate, AZ-500, or Google Professional Cloud Security Engineer).
• Demonstrated experience leading RMF lifecycle teams across cloud and hybrid enterprise environments.
• Experience with DOJ/FBI GRC applications such as Xacta or JCAM.

Clearance Requirements

• Active Top Secret clearance with SCI eligibility is required.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets and office machinery.
• Frequently communicates with co-workers, management, and customers, and must be able to exchange accurate information in these situations.