Senior Cloud Information System Security Engineer
MANTECH seeks a motivated, career- and mission-focused Senior Cloud Information Systems Security Engineer (ISSE) to join our team in Chantilly, VA. This is an onsite position.
Responsibilities include but are not limited to:
- Lead, mentor, act as a SME (Subject Matter Expert) and supervise a team of contractor security professionals responsible for the end-to-end implementation of the Risk Management Framework (RMF) lifecycle for FBI IT systems.
- Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
- Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
- Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
- Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
- Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
- Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.
Minimum Qualifications:
- 10 + years of experience in secure design, analysis, and test of information security systems and products.
- 10 + years of experience applying methods, standards, and approaches for ensuring baseline security safeguards are appropriately implemented and documented.
- 10 + years of experience creating and updating security test plans for detecting and mitigating risk to information systems.
- Bachelor's degree or equivalent (6 additional years of experience) or Master's degree with 7 + years of relevant experience.
- Must possess one of the following DoD 8140.03 Advanced proficiency certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP.
Preferred Qualifications:
- Possession of a Cloud certification (e.g., AWS Certified Security - Specialty, CCSP, AWS Solutions Architect Associate, AZ-500, or Google Professional Cloud Security Engineer).
- Demonstrated experience leading RMF lifecycle teams across cloud and hybrid enterprise environments.
- Experience with DOJ/FBI GRC applications such as Xacta or JCAM.
Clearance Requirements:
- Active Top Secret clearance with SCI eligibility is required.
Physical Requirements:
- Must be able to remain in a stationary position 50% of the time.
- Needs to occasionally move about inside the office to access file cabinets and office machinery.
- Frequently communicates with co-workers, management, and customers, and must be able to exchange accurate information in these situations.