Senior Cloud Information System Security Engineer
Job Description
MANTECH is hiring a Senior Cloud Information System Security Engineer (ISSE) to support onsite cybersecurity work in Washington, DC.
Responsibilities
- Assess information protection needs for an Information System (IS) and Network Environment, and define security requirements aligned to applicable cybersecurity requirements
- Design security architectures for IS and Network Environment use, including cybersecurity-enabled products for deployment within those environments
- Integrate and/or implement security with Cross Domain Solutions (CDS) for use within an IS and Network Environment
- Develop and implement security designs for new and existing network system(s), ensuring hardware, operating systems, and software applications address required cybersecurity controls
- Design and implement network security measures supporting confidentiality, integrity, availability, authentication, and non-repudiation
- Create and apply specific cybersecurity countermeasures for the IS and Network Environment
- Produce interface specifications for the IS and Network Environment
- Develop approaches to mitigate IS and Network Environment vulnerabilities; recommend changes to network or network system components as needed
- Ensure network system(s) designs support incorporation of FBI directed cybersecurity vulnerability solutions
Requirements
- Experience level requirement (must meet one):
- High school diploma/GED + 14 years experience
- Associate’s degree + 10 years experience
- Bachelor’s degree + 8 years experience
- Master’s degree + 6 years experience
- Certification requirement (must hold at least one):
- CISSP (or Associate)
- CompTIA Advanced Security Practitioner (CASP) CE
- Certified Secure Software Lifecycle Professional (CSSLP)
- CISSP- Information System Security Engineering Professional (ISSEP)
- Certified Information System Manager (CISM)
- CISSP- Information System Security Architecture Professional (ISSAP)
- Cloud/security certification requirement (must hold at least one):
- AWS Certified Cloud Practitioner
- AWS Certified Security – Specialty
- (ISC)2 Certified Cloud Security Professional (CCSP)
- AWS Certified Solutions Architect – Associate
- AZ-500: Microsoft Certified: Azure Security Engineer Associate
- Google - Professional Cloud Security Engineer
- Familiarity using security tools including: Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications
- Working knowledge of NIST Risk Management Framework (RMF) and ATO processes
- Master’s degree required per minimum education
Technologies
- Tenable Nessus
- Security Center
- IBM Guardium
- HP WeblInspect
- Network Mapper (NMAP)
- NIST Risk Management Framework (RMF)
- ATO processes
- Cross Domain Solutions (CDS)
- AWS Certified Cloud Practitioner
- AWS Certified Security – Specialty
- (ISC)2 Certified Cloud Security Professional (CCSP)
- AWS Certified Solutions Architect – Associate
- AZ-500: Microsoft Certified: Azure Security Engineer Associate
- Google - Professional Cloud Security Engineer
- CISSP
- CompTIA Advanced Security Practitioner (CASP) CE
- Certified Secure Software Lifecycle Professional (CSSLP)
- CISSP- Information System Security Engineering Professional (ISSEP)
- Certified Information System Manager (CISM)
- CISSP- Information System Security Architecture Professional (ISSAP)
Preferred Qualifications
- Degree in Computer Science, Cybersecurity, or other cyber discipline
Clearance Requirements
- Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to start
- Selected candidate must be willing to undergo a Polygraph
Physical Requirements
- Must be able to remain in a stationary position 50%
- Needs to occasionally move about inside the office to access file cabinets and office machinery
- Constantly operates a computer and other office productivity machinery (calculator, copy machine, computer printer)
- Often positions self to maintain computers in the lab, including under desks and in the server closet
- Frequently communicates with coworkers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information