Senior Information Systems Security Engineer

MANTECH; Huntsville (AL); On-site; USD 110,000 - 160,000; Full time

Job summary

MANTECH seeks a motivated Senior Information System Security Engineer (ISSE) to join our team in Huntsville, AL. The role focuses on defining cybersecurity requirements, architectures, and secure designs across information systems and networks.

Responsibilities include designing security solutions (CDS), implementing controls, managing vulnerabilities, and guiding compliance with RMF/ATO processes. A top-tier candidate will have extensive experience and relevant certifications, plus the ability

Qualifications

• Must meet one of the following education/experience combinations: HS diploma/GED with 14 years, Associate's with 10 years, Bachelor's with 8 years, or Master's with 6 years.
• Must hold at least one cert: CISSP (or Associate), CASP CE, CSSLP, CISSP-ISSEP, CISM, or CISSP-ISSAP.
• Familiarity with security tools such as Tenable Nessus/Security Center, IBM Guardium, HP WebInspect, and NMAP.
• Working knowledge of RMF, RMF-based ATO processes, and GRC tools.

Responsibilities

• Define and implement cybersecurity requirements, architectures, and secure system designs across information systems and networks.
• Design, develop, and integrate security solutions including Cross Domain Solutions (CDS).
• Implement network security controls to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
• Identify, assess, and mitigate vulnerabilities; recommend security posture enhancements.
• Maintain and track vulnerability data, POA&Ms, and remediation activities using GRC and enterprise tools.
• Lead stakeholder engagement through office hours and updated procedures for vulnerability management and compliance.

Skills

Cybersecurity expertise

RMF knowledge

Vulnerability management

GRC tooling

Stakeholder mgmt

Education

Bachelor's degree

Master's degree

Tools

Tenable Nessus

Security Center

IBM Guardium

HP WebInspect

NMAP

Job description

MANTECH seeks a motivated, career and customer-oriented Senior Information System Security Engineer (ISSE) to join our team in Huntsville, AL.

Responsibilities Include, But Are Not Limited To

• Define and implement cybersecurity requirements, architectures, and secure system designs across information systems and network environments
• Design, develop, and integrate security solutions, including Cross Domain Solutions (CDS), to support secure data flow and system interoperability
• Implement network security controls and countermeasures to ensure confidentiality, integrity, availability, authentication, and non-repudiation
• Identify, assess, and mitigate system and network vulnerabilities, recommending enhancements to strengthen overall security posture
• Maintain and track vulnerability data, POA&Ms, and remediation activities using GRC and enterprise tracking tools
• Lead stakeholder engagement through office hours, guidance, and updated procedures to support vulnerability management and compliance efforts
• Provide rapid response to data calls, RFIs, and leadership inquiries, including escalation and reporting of high-risk or non-compliant remediation actions

Minimum Qualifications

• Must meet one of the following levels of experience: A high school diploma/GED and 14 years’ experience, an Associate’s degree and 10 years’ experience, a Bachelors degree and 8 years’ experience, or a Master’s and 6 years’ experience.
• Hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP) (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), Certified Information Security Manager (CISM), or CISSP- Information System Security Architecture Professional (ISSAP).
• Familiarity with the use and operation of security tools including: Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications.
• Working knowledge of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and ATO processes.
• Experience with vulnerability management programs, including identification, tracking, and remediation of CVEs and Known Exploited Vulnerabilities (KEVs).
• Knowledge of federal cybersecurity directives and frameworks, including CISA Emergency Directives (EDs), Binding Operational Directives (BODs), and DOJ Vulnerability Patch Requirements (VPRs).
• Experience with Risk Management Framework (RMF), POA&M tracking, and governance, risk, and compliance (GRC) tools.

Preferred Qualifications

• Degree in Computer Science, Cybersecurity, or other cyber discipline.
• Ability to operate in high-tempo environments with rapid response requirements and strict deadlines.
• Strong organizational and process improvement skills to support reporting, tracking, and compliance initiatives.

Security Clearance Requirements

• Must have an active TOP SECRET security clearance and be willing and able to obtain SCI eligibility prior to start.
• Selected candidate must be willing to undergo a Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50%
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer
• Often positions self to maintain computers in the lab, including under the desks and in the server closet
• Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations