Information System Security Engineer

General information

Requisition # R58878 Locations USA-VA-Herndon Posting Date 03/03/2025 Security Clearance Required TS/SCI w/ Poly Remote Type Onsite Time Type Full time

Description & Requirements

Unlock the secrets of intelligence with ManTech! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we’ve been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now—unleash your potential with ManTech!

ManTech seeks an Information Systems Security Engineer (ISSE) to join our team in Herndon, Virginia. Join ManTech and help protect our country against cyber adversaries by creating robust and cutting-edge cybersecurity solutions.
 

Responsibilities include, but are not limited to:

• Review and assess Risk Management Framework (RMF) authorization body of evidence for classified information systems, to include System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, and Security Assessment Plan

• Review new and existing systems for technical compliance with IA directives and protection of data at all classification levels including SCI

• Advise on in-depth security design review and threat/risk assessments

• Provide inputs to technical artifacts, including Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTM), and Risk Assessment Reports (RARs)

• Conduct site visits (as required) and assessments to inspect IA plans and security control implementations and support Incident Response Team (IRT) activities

Minimum Qualifications: 

• Bachelor’s degree and 3+ years of technical experience or High School Diploma and 7+ years of technical experience

• 3+ years of implementing NIST 800-53, Rev 4 and the Risk Management Framework (RMF)

• 3+ years of using information security and assurance practices and principles for the customer

• 3+ years of experience with Windows and Linux environments

• 3+ years of experience with virtualization or cloud environments

• Experience with information security tools such as MS Active Directory, Splunk, ACAS/Nessus, McAfee and AWS Security

• DoD 8570 IAT Level II certification or higher

Preferred Qualifications: 

• Knowledge of enterprise cyber defense tools and technologies such as SIEM systems, SysMon, network and host based IDS and IPS, network and host-based malware detection and prevention, Endpoint Detection & Response (EDR) and Network Detection & Response (NDR), Network and Host malware detection and prevention (EDR/NDR) tools, forensics tools and applications, Web/Email gateway security technologies, Security Orchestration, Automation and Response (SOAR) and cloud based platforms su