Senior Cloud Information System Security Engineer

MANTECH is seeking a Senior Cloud Information System Security Engineer (ISSE) to support information protection, security architecture design, and cybersecurity requirement alignment within a network environment. This role will contribute to security engineering efforts tied to ATO and RMF processes and will help ensure network system designs meet specified protection needs.

Location

• Huntsville, AL (onsite)

Primary Responsibilities

• Identify information protection needs for an IS and Network Environment, and define security requirements in alignment with applicable cybersecurity requirements
• Design security architectures for use within the IS and Network Environment, including designing and developing cybersecurity-enabled products
• Integrate and/or implement security with Cross Domain Solutions (CDS) for use within the IS and Network Environment
• Develop and implement security designs for new or existing network system(s), ensuring that hardware, operating systems, and software application designs address cybersecurity requirements
• Design, develop, and implement network security measures that support confidentiality, integrity, availability, authentication, and non-repudiation, including specific cybersecurity countermeasures
• Develop interface specifications for the IS and Network Environment, and develop approaches to mitigate IS and Network Environment vulnerabilities with recommendations for network or network system component changes
• Ensure network system(s) designs support the incorporation of FBI directed cybersecurity vulnerability solutions

Required Qualifications

• Meet one of the following experience levels: High school diploma/GED with 14 years’ experience, Associate’s degree with 10 years’ experience, Bachelors degree with 8 years’ experience, or Master’s degree with 6 years’ experience
• Hold at least one of the following certifications: CISSP (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, Certified Secure Software Lifecycle Professional (CSSLP), CISSP- Information System Security Engineering Professional (ISSEP), CISM, or CISSP- Information System Security Architecture Professional (ISSAP)
• Hold at least one of the following cloud-related certifications: AWS Certified Cloud Practitioner, AWS Certified Security – Specialty, (ISC)2 Certified Cloud Security Professional (CCSP), AWS Certified Solutions Architect – Associate, AZ-500: Microsoft Certified: Azure Security Engineer Associate, or Google - Professional Cloud Security Engineer
• Be familiar with the use and operation of security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), and/or similar applications
• Maintain working knowledge of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and ATO processes

Technologies

• Cross Domain Solutions (CDS)
• Tenable Nessus
• Security Center
• IBM Guardium
• HP WeblInspect
• Network Mapper (NMAP)
• National Institute of Standards and Technology (NIST) Risk Management Framework (RMF)
• ATO processes
• AWS Certified Cloud Practitioner
• AWS Certified Security – Specialty
• (ISC)2 Certified Cloud Security Professional (CCSP)
• AWS Certified Solutions Architect – Associate
• AZ-500: Microsoft Certified: Azure Security Engineer Associate
• Google - Professional Cloud Security Engineer

Preferred Qualifications

• Degree in Computer Science, Cybersecurity, or other cyber discipline

Clearance Requirements

• Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to start
• Selected candidate must be willing to undergo a Polygraph

Physical Requirements

• Must be able to remain in a stationary position 50%
• Needs to occasionally move about inside the office to access file cabinets and office machinery
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer
• Often positions self to maintain computers in the lab, including under desks and in the server closet
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information in these situations