Senior Information Systems Security Officer

MANTECH; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

MANTECH seeks a Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This on-site role oversees security configurations, accreditation processes, and vulnerability management to protect critical information systems.

The successful candidate will manage BOE documentation, coordinate with system owners, and lead remediation through POAMs while maintaining strict security postures and incident readiness.

Qualifications

• 10+ years of related information systems security experience or a Master’s degree with 7+ years of experience
• Bachelor's Degree or equivalent (6 additional years of experience)
• Must possess one or more relevant industry certifications: CISSP, CISSP-ISSMP, CISM, FITSP-M, GCIA, GCIH, GICSP, GSLC
• Significant experience navigating technical accreditation processes and creating BOE documentation
• Familiarity with Nessus, Security Center, Guardium, WebInspect, and NMAP

Responsibilities

• Create, update, maintain, and interpret required BOE documentation for accreditation processes
• Ensure day-to-day implementation, oversight, and maintenance of system security configurations
• Conduct vulnerability scans and perform vulnerability analysis
• Develop and track POAMs to mitigate security risks
• Coordinate with system owners, ISSMs, and teams to diagnose issues and implement solutions
• Document plans detailing security postures, configurations, and secure remote access for applications

Skills

Security governance

Vulnerability management

BOE documentation

Stakeholder coordination

Network security

Education

Bachelor's degree or equivalent

Master's degree with 7+ years experience

Tools

Tenable Nessus

IBM Guardium

HP WebInspect

NMAP

Security Center

Job description

MANTECH seeks a motivated, career and customer-oriented Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This is an on-site position.

Responsibilities Include But Are Not Limited To

• Create, update, maintain, and interpret required Body of Evidence (BOE) documentation to navigate system accreditation processes.
• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of system security configurations and practices.
• Conduct required vulnerability scans, review reports to identify vulnerabilities, and perform comprehensive vulnerability analysis.
• Develop, oversee, and track Plans of Action and Milestones (POAMs) to effectively mitigate discovered security risks.
• Coordinate with system owners, ISSMs, and team resources to diagnose operational issues and implement necessary technology solutions.
• Document and implement plans detailing security postures, proper configurations, and secure remote access capabilities for applications.

Minimum Qualifications

• 10 + years of related information systems security experience, or a Master's degree with 7 + years of experience.
• Bachelor's Degree or equivalent (6 additional years of experience).
• Must possess one or more relevant industry certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Security Manager - Informatin System Security Management Professional (CISSP-ISSMP), Certified Information Security Manager (CISM), Federal IT Security Professional - Manager (FITSP-M), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), Global Industrial Cyber Security Professional (GICSP), or GIAC Security Leadership (GSLC).
• Significant experience navigating technical accreditation processes, meeting strict security requirements, and creating A&A Body of Evidence (BOE) documentation.
• Familiarity operating standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).
• Proven experience managing complex network documentation, inventorying networks, and working across large technical teams to drive a standardized security agenda.

Preferred Qualifications

• Possession of a Cloud Certification.
• Hands-on experience utilizing cyber risk and compliance automation tools.
• Self-starter with excellent interpersonal skills, capable of organizing boards and driving change across organizational teams.

Clearance Requirements

• Current/Active TS/SCI Required.
• Abilty to obtain and maintain a polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, and other equipment.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations.