MANTECH seeks a motivated, career and customer-oriented Test and Evaluation Cyber Expert to join our team in Washington, D.C. This is a hybrid position with one day per month onsite.
Responsibilities include but are not limited to:
Provide operational Test and Evaluation expertise on a wide range of activities and missions supporting systems for cyber security and cyber resilience to include review of requirements, test planning, test execution, data management, and test reporting with a strong focus on assessing the confidentiality, integrity, and availability of systems and data against cyber threats
Perform T&E technical analysis on a multi-disciplinary team, providing technical advisory and technical oversight to the government T&E division lead with a focus on cyber systems, industrial control systems, operational technology (OT) security, cyber table top exercises and cyber vulnerability and penetration assessment (CVPA) testing, and adversarial assessments
Analyze and provide input to T&E Master Plans with an emphasis on cyber resilience, security controls validation (e.g., NIST SP 800-53), and compliance with cybersecurity regulations
Work with government clients on T&E WIPT’s to establish and monitor the program’s execution towards milestones, key events, significant accomplishment criteria, and coordinate information between organizations with a focus on identifying and mitigating cyber risks throughout the system lifecycle
Review and provide feedback to Acquisition Program documents such as the Mission Needs Statement, Operational Requirements Documents, Concept of Operations, and Test and Evaluation Master Plan, specifically addressing cybersecurity requirements, threat modeling, and security testing strategies
Provide Cyber Resilience testing input and updates to Cyber Resilience guidebooks, Letter of Assessment, and other T&E documents
Teach Cyber Resilience T&E topics in DHS T&E workshops or T&E classes
Required Qualifications:
Master’s degree in Computer Science, Systems Engineering, Information Systems, or a related field
15+ years of Test and Evaluation experience with a significant portion dedicated to cyber security testing and evaluation of complex IT, OT, and cloud-based systems
Ability to teach T&E topics, particularly in the domain of cyber security testing methodologies, (e.g., Cyber Table Tops, Adversarial Assessment, Cyber Attack Methods, Cyber threats) and best practices
Technical writing experience, with the ability to document complex cybersecurity test plans, penetration test reports, vulnerability assessment findings, and mitigation recommendations
Experience working on a DOD or DHS acquisition program performing cyber resilience testing
Desired Qualifications:
Experience with DHS acquisition policy and DHS systems engineering lifecycle with specific experience in cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001), red teaming, and blue teaming methodologies
Defense Acquisition University or DHS Level III Test and Evaluation Certification or equivalent
Knowledge and/or experience with DHS Acquisition Directives and Acquisition Lifecycle Framework (MD102/ALF); knowledge, understanding and/or experience with the DHS (or DoD equivalent) Test and Evaluation policies, procedures and best practices for conducting, monitoring and reviewing operational test and evaluation
Clearance Requirements:
Must possess active Secret clearance
Must be able to obtain DHS suitability
Physical Requirements:
Must be able to remain in a stationary position 50%
Frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations