Senior Information Systems Security Engineer

MANTECH; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

MANTECH seeks a motivated, career- and customer-oriented Senior Information Systems Security Engineer (ISSE) to join our team in Washington, D.C. This is an onsite position.

The ISSE will leverage their strong technical background to support accreditation efforts, respond to and implement required controls, and document actions to ensure compliant, secure networks and systems. Responsibilities include designing secure architectures, integrating CDS security measures, and maintaining evidence

Qualifications

• Bachelor's degree or equivalent in IT-related discipline; 6 additional years may substitute.
• 10+ years of information systems security experience, or 7+ years with a Master's.
• Industry certifications such as CCISO, CISSP, CISM, or equivalent.
• 4+ years in security disciplines: pentesting, forensics, incident response, or monitoring.
• Experience with accreditation processes and A&A BOE documentation.
• Familiarity with Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and NMAP.

Responsibilities

• Design secure architectures for IS/Network environments.
• Develop and implement network security measures and countermeasures.
• Integrate CDS security protocols for IS/Network environments.
• Create interface specs to mitigate vulnerabilities and advise changes.
• Ensure designs support vulnerability solutions and document controls.
• Maintain A&A documentation and support Sponsor accreditation processes.
• Collaborate with management and stakeholders to ensure compliant systems.

Skills

Cybersecurity concepts

A&A knowledge

Cross Domain Solutions (CDS)

Education

Bachelor's degree or equivalent in IT-related discipline

Master's degree preferred

Tools

Tenable Nessus

Security Center

IBM Guardium

HP WebInspect

NMAP

Job description

MANTECH seeks a motivated, career and customer-oriented Senior Information Systems Security Engineer (ISSE) to join our team in Washington, D.C. This is an onsite position.

The Information Systems Security Engineer (ISSE) will leverage their strong technical background and knowledge to support accreditation efforts, to include responding to/implementing/documenting required controls, and completing required tasks/actions.

Responsibilities Include But Are Not Limited To

• Designing secure architectures, hardware, operating systems, and software applications to ensure cybersecurity requirements are adequately addressed for the IS and Network Environment.
• Designing, developing, and implementing network security measures and specific countermeasures that provide confidentiality, integrity, availability, authentication, and non-repudiation.
• Integrating and implementing security protocols with Cross Domain Solutions (CDS) for use within the IS and Network Environment.
• Developing interface specifications and approaches to mitigate vulnerabilities while recommending changes to network system components as needed.
• Ensuring that network system designs support the seamless incorporation of directed cybersecurity vulnerability solutions.
• Documenting responses to required controls and maintaining a robust library of documentation to successfully navigate the Sponsor’s accreditation process.
• Working with management, internal teams, and stakeholders to ensure complete and functioning systems that meet all mission requirements.

Minimum Qualifications

• Bachelor's degree or equivalent (6 additional years of experience) in computer science, business management, or an IT-related discipline.
• 10 + years of related information systems security experience, or a Master's degree with 7+ years of experience.
• Posession of one or more relevant industry certifications, such as CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA, CCNP Enterprise, CISSP-ISSAP, GCIA, GDSA, or GICSP.
• 4 + years of focused experience in one or more of the following: computer network penetration testing and techniques; computer evidence seizure, computer forensic analysis, and data recovery; computer intrusion analysis and incident response, intrusion detection; computer network surveillance and monitoring; network protocols, network devices, multiple operating systems, and secure architectures.
• Significant experience navigating technical accreditation processes and creating Assessment & Authorization (A&A) Body of Evidence (BOE) documentation.
• Familiarity operating standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).

Preferred Qualifications

• Hands-on experience utilizing cyber risk and compliance automation tools.
• Self-starter with excellent interpersonal skills who is able to work across teams, organize boards, and drive change throughout an organization.

Clearance Requirements

• Must have a current/active TS/SCI.
• Ability to obtain and maintain a polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, and other equipment.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations.