Senior Cloud Information Systems Security Engineer

MANTECH; Huntsville (AL); On-site; USD 140,000 - 190,000; Full time

Job summary

Cybersecurity Jobs seeks a Lead RMF-focused security engineer to drive cloud security initiatives onsite in Huntsville, AL. You will supervise a team delivering RMF lifecycle activities for customer IT systems and guide system categorization based on mission impact and regulatory demands.

You will advise on selecting and tailoring security controls and lead the deployment of technical, operational, and management controls across lifecycles, ensuring sustained compliance and strong risk

Qualifications

• Bachelor’s degree or equivalent experience (6 additional years of experience in lieu of degree).
• 8+ years experience in the secure design, analysis, and testing of information security systems and products.
• 8+ years applying methods, standards, and approaches to ensure baseline security safeguards are implemented and documented.
• 8+ years creating and updating security test plans to detect and mitigate risk to information systems.
• Hold at least one required certification: CISSP, CEH, CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, or GDSA.

Responsibilities

• Lead and supervise a team delivering end-to-end RMF lifecycle for customer IT systems.
• Coordinate RMF preparation activities and guide system categorization based on mission impact and regulatory requirements.
• Advise on selection, tailoring, and documentation of security controls aligned to risk appetite and compliance standards.
• Direct deployment of controls across system lifecycles to support high-quality deliverables.
• Oversee security control assessments and prepare risk management documentation for system authorization.

Skills

RMF lifecycle

System categorization

Security controls tailoring

Risk assessment

Education

Bachelor's degree

Master’s degree

Job description

Lead RMF-focused cloud security engineering efforts onsite in Huntsville, AL.

Responsibilities

• Lead and supervise a team of security professionals delivering end-to-end implementation of the RMF lifecycle for customer IT systems.
• Coordinate RMF preparation activities and guide system categorization based on mission impact and regulatory requirements.
• Advise on selection, tailoring, and documentation of security controls aligned to risk appetite and compliance standards.
• Direct deployment of technical, operational, and management controls across system lifecycles to support high-quality deliverables.
• Oversee security control assessments and prepare risk management documentation needed for system authorization and executive decisions.
• Manage ongoing monitoring, continuous assessment, and metric collection to adapt security strategy and maintain sustained compliance.
• Provide subject-matter expertise in risk analysis, incident response, remediation, and audits; communicate status and risks to stakeholders.

Requirements

• Bachelor’s degree or equivalent experience (6 additional years of experience in lieu of degree).
• 8+ years experience in the secure design, analysis, and testing of information security systems and products (6.5+ years with a Master’s degree).
• 8+ years applying methods, standards, and approaches to ensure baseline security safeguards are implemented and documented (6.5+ years with a Master’s degree).
• 8+ years creating and updating security test plans to detect and mitigate risk to information systems (6.5+ years with a Master’s degree).
• Hold at least one required certification: CISSP, CEH, CCNP Enterprise, CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, or GDSA.

Preferred Qualifications

• Master’s degree in Computer Science, Cybersecurity, or a related technical discipline.
• Experience leading cross-functional teams through complex cloud accreditation and authorization milestones.
• Expert knowledge of federal cyber risk, vulnerability management frameworks, and compliance automation platforms.

Clearance Requirements

• Must have a current/active Top Secret clearance with SCI eligibility.
• Must be able to obtain and maintain a polygraph.

Physical Requirements

• Ability to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequent communication with co-workers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information.