Full Time Employee Contractor
Become an integral part of a diverse team that leads the world in the Mission, Cyber, and Intelligence Solutions group. At ManTech International Corporation, you'll help protect our national security while working on innovative projects that offer opportunities for advancement.
Currently, ManTech is seeking a motivated, career and customer oriented Information System Security Engineer (ISSE) to join our team in the Vandenberg AFB area to provide unparalleled support to our customer and to begin an exciting and rewarding career within ManTech.
Information Systems Security Engineer (ISSE) (Cybersecurity engineer) for the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP/SCI network infrastructures and supported DoD agencies, such as HQAF, OSD and military compartments. Ensures that the appropriate operational security posture is maintained for assigned information systems and as such, works in close collaboration with the team lead as a key interface with senior government leadership, DoD Test communities, the ISSM, the CISO staff, and the Information System Owner. Serves as staff security advisor for technical issues related to Cybersecurity auditing tools, vulnerability management solutions, and continuous monitoring capabilities. Participates in all phases of systems accreditation activities including initial capabilities development, cybersecurity inspections, tests and reviews, system sustainment and disposal. Assesses architecture and current hardware limitations, defines and designs system specifications, input/output processes and working parameters for hardware/software compatibility. Conducts information system risk assessment and analysis which examines mitigating factors and resulting residual risk, document risks and make recommendations for residual risk determination to the ISSM & Security Controls Assessor (SCA). Conducts continuous audit reviews and analysis of the system to identify threats, vulnerabilities, and potential malicious activities. Researches and identifies security vulnerabilities and provide guidance to mitigate risks. Implements vulnerability management programs, including tracking and addressing IAVAs and security patches, and accessing applicability to existing systems. Capable of independent program supervision.
? Bachelor?s degree and 4 years related experience.
? Certification according to DoD Directive 8570.01-M, CISSP required (IAT/IAM level II).
? U.S. Citizenship and active Top Secret Clearance with SCI Eligibility (current SCI access preferred).
? Eligibility for access to Special Access Program Information and willingness to submit to a Counterintelligence polygraph.
? Security experience in operational and acquisition environments.
? Possess sound knowledge of requirements and methods to meet requirements delineated in the NIST 800-XX and DCID 6/3 / ICD-504 series of publications.
? Proficient in the identification, derivation, analysis, implementation, testing, deployment and management of cybersecurity requirements for collateral and multi-level classified information systems.
? Experience implementing and using various Cybersecurity tools (preferably DISA Assured Compliance Assessment Solution (ACAS) security suite, IBM QRadar, and GFI EventsManager ) including vulnerability assessment, patch management, audit collection, audit review, audit management, and end point protection.
? Proficient in the maturation of Cybersecurity architectures that successfully integrate the multiple Cybersecurity domains to include access control; OPSEC; telecommunications, network security, cryptography; application security; physical security and continuity and disaster recovery.
? Experience in managing all phases of the Risk Management Framework (RMF) activities including early concept development to system retirement
? Must have the ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel and industry partners.
? Possess a high degree of originality, creativity, initiative requiring minimal supervision.
? Demonstrated excellent verbal and written communication skills as well as strong organizational and time management abilities.
? Expert in managing and configuring DISA Assured Compliance Assessment Solution (ACAS) security suite, IBM QRadar, and GFI EventsManager.
? Experienced with security efforts related to modern Windows, Linux, UNIX, Cisco, SQL, Oracle databases, and VMWare.
? 5+ years of system administration experience with emphasis on security control implementation.
? Working knowledge of Microsoft Office (Word, PowerPoint, and Excel).
? Be highly flexible and capable of operating in a high-tempo, extremely fluid environment.
Must possess an active TS/SCI based upon a SSBI within the last five years to be considered for this position