Strategic Acquisition Security Architect

MANTECH; Quantico (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

MANTECH seeks a motivated Acquisition Security Risk Analyst to support a USMC contract out of Quantico, VA. The role focuses on creating an enterprise-grade risk posture guide and integrating CPI, CCIP regulations, and DoD standards across the acquisition lifecycle.

The ideal candidate has 5+ years of experience in security engineering, program protection, or supply chain risk, and hands-on authoring of governance playbooks within defense programs. DoD policy familiarity is required.

Qualifications

• Bachelor’s degree with 5+ years in System Security Engineering, Program Protection or Supply Chain Risk Management.
• Experience authoring program protection guidance and enterprise security frameworks.
• Knowledge of DoD policies (DoDI 5000.83, 5200.44, 5200.39, 5000.90).
• Familiarity with NIST SP 800-161 Rev.1 and SP 800-53 Rev.5 standards.
• Ability to integrate CPI, FOIC regulations, and CI feeds into risk plans.

Responsibilities

• Author an Acquisition Security Risk Posture Guide linking CPI, CSRM, SCRM/C-SCRM, CI, and system security engineering.
• Translate defense mandates into practical playbooks, decisions trees, and risk frameworks for leadership.
• Map MCFs/MCCs to hardware, firmware, and software to support criticality workflows.
• Structure supplier risk tiers, SBOM/HBOM governance across acquisition milestones.
• Incorporate anti-tamper and hardware assurance to deter reverse engineering and counterfeit parts.
• Integrate CPI protection, horizontal workflows, and risk feeds into milestone decisions.
• Align DFARS, NIST SP 800-171, and CMMC with delivered product security and enterprise risk.

Skills

System Security Engineering

Program Protection

Supply Chain Risk Management

Security policy authoring

DoD policy familiarity

Vendor risk analysis

Education

Bachelor's degree

Tools

SBOM/HBOM governance

Job description

MANTECH seeks a motivated Acquisition Security Risk Analyst to support a USMC contract out of Quantico, VA. The role focuses on creating an enterprise-grade risk posture guide and integrating CPI, CCIP regulations, and DoD standards across the acquisition lifecycle.

The ideal candidate has 5+ years of experience in security engineering, program protection, or supply chain risk, and hands-on authoring of governance playbooks within defense programs. DoD policy familiarity is required.