Senior ISSO: RMF & Vulnerability Management Expert

MANTECH; Maryland; On-site; USD 110,000 - 180,000; Full time

Job summary

MANTECH seeks a motivated, career driven ISSO in Annapolis Junction, Maryland to join our team. You will support enterprise infrastructure capabilities for a global, mission-focused workforce and manage cybersecurity documentation, assess vulnerabilities, and support RMF lifecycle.

The role collaborates with customers, IPTs, and vendors, maintaining SSPs, tracking POAMs, and leveraging tools like Xacta and Gatekeeper to ensure compliance and secure operations.

Qualifications

• 10+ years of relevant information security experience; Bachelors acceptable with 4 years substitution
• Experience with Xacta, LatteArt and other sponsor tools
• Experience managing POAMs, audit logs, and inventory of secure systems
• IAM I certification or equivalent (CAP/CND/Cloud+/GSLC/Security+ CE/CISM/CISSP/CCISO)

Responsibilities

• Update and maintain hardware and software inventory records and change logs
• Support Secure the Enterprise (STE) and Secure the Network (STN) activities
• Review Xacta notices and ensure compliant documentation
• Complete SEAR audit log records per Sponsor standards
• Track, review and resolve POAMs for IAVA/IAVAx findings
• Develop and maintain System Security Plans (SSPs) for systems
• Analyze vulnerability scan results and coordinate remediation with owners
• Utilize Gatekeeper, Xacta, SEAR, and LatteArt in daily operations

Skills

RMF experience

Vulnerability assessment

Audit log review

POAM management

Security documentation

Incident response

Education

Bachelor's degree

IAM I certification (DoD 8140)

Tools

Xacta

LatteArt

Gatekeeper

SEAR

SCANBOY

Job description

MANTECH seeks a motivated, career driven ISSO in Annapolis Junction, Maryland to join our team. You will support enterprise infrastructure capabilities for a global, mission-focused workforce and manage cybersecurity documentation, assess vulnerabilities, and support RMF lifecycle.

The role collaborates with customers, IPTs, and vendors, maintaining SSPs, tracking POAMs, and leveraging tools like Xacta and Gatekeeper to ensure compliance and secure operations.