Senior Cloud Information System Security Engineer
Job Description
MANTECH is seeking a Senior Cloud Information System Security Engineer (ISSE) to support information protection, security architecture design, and cybersecurity requirement alignment within a network environment. This role will contribute to security engineering efforts tied to ATO and RMF processes and will help ensure network system designs meet specified protection needs.
Location
- Huntsville, AL (onsite)
Primary Responsibilities
- Identify information protection needs for an IS and Network Environment, and define security requirements in alignment with applicable cybersecurity requirements
- Design security architectures for use within the IS and Network Environment, including designing and developing cybersecurity-enabled products
- Integrate and/or implement security with Cross Domain Solutions (CDS) for use within the IS and Network Environment
- Develop and implement security designs for new or existing network system(s), ensuring that hardware, operating systems, and software application designs address cybersecurity requirements
- Design, develop, and implement network security measures that support confidentiality, integrity, availability, authentication, and non-repudiation, including specific cybersecurity countermeasures
- Develop interface specifications for the IS and Network Environment, and develop approaches to mitigate IS and Network Environment vulnerabilities with recommendations for network or network system component changes
- Ensure network system(s) designs support the incorporation of FBI directed cybersecurity vulnerability solutions
Required Qualifications
- Meet one of the following experience levels: High school diploma/GED with 14 years’ experience, Associate’s degree with 10 years’ experience, Bachelors degree with 8 years’ experience, or Master’s degree with 6 years’ experience
- Hold at least one of the following certifications: CISSP (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), CISM, or CISSP- Information System Security Architecture Professional (ISSAP)
- Hold at least one of the following cloud-related certifications: AWS Certified Cloud Practitioner, AWS Certified Security – Specialty, (ISC)2 Certified Cloud Security Professional (CCSP), AWS Certified Solutions Architect – Associate, AZ-500: Microsoft Certified: Azure Security Engineer Associate, or Google - Professional Cloud Security Engineer
- Be familiar with the use and operation of security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications
- Maintain working knowledge of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and ATO processes
Technologies
- Cross Domain Solutions (CDS)
- Tenable Nessus
- Security Center
- IBM Guardium
- HP WeblInspect
- Network Mapper (NMAP)
- National Institute of Standards and Technology (NIST) Risk Management Framework (RMF)
- ATO processes
- AWS Certified Cloud Practitioner
- AWS Certified Security – Specialty
- (ISC)2 Certified Cloud Security Professional (CCSP)
- AWS Certified Solutions Architect – Associate
- AZ-500: Microsoft Certified: Azure Security Engineer Associate
- Google - Professional Cloud Security Engineer
Preferred Qualifications
- Degree in Computer Science, Cybersecurity, or other cyber discipline
Clearance Requirements
- Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to start
- Selected candidate must be willing to undergo a Polygraph
Physical Requirements
- Must be able to remain in a stationary position 50%
- Needs to occasionally move about inside the office to access file cabinets and office machinery
- Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer
- Often positions self to maintain computers in the lab, including under desks and in the server closet
- Frequently communicates with co-workers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information in these situations