MANTECH seeks a motivated, career and customer-oriented Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This is an on-site position.
The Senior ISSO will leverage their strong technical background and knowledge to support accreditation efforts, to include creating Body of Evidence (BOE) documentation, responding to/implementing/documenting required controls, and completing required tasks and actions.
Responsibilities Include but are not limited to:
- Create, update, maintain, and interpret required Body of Evidence (BOE) documentation to navigate system accreditation processes.
- Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of system security configurations and practices.
- Conduct required vulnerability scans, review reports to identify vulnerabilities, and perform comprehensive vulnerability analysis.
- Develop, oversee, and track Plans of Action and Milestones (POAMs) to effectively mitigate discovered security risks.
- Coordinate with system owners, ISSMs, and team resources to diagnose operational issues and implement necessary technology solutions.
- Document and implement plans detailing security postures, proper configurations, and secure remote access capabilities for applications.
Minimum Qualifications:
- 10 + years of related information systems security experience, or a Master's degree with 7 + years of experience.
- Bachelor's Degree or equivalent (6 additional years of experience).
- Must possess one or more relevant industry certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Security Manager - Informatin System Security Management Professional (CISSP-ISSMP), Certified Information Security Manager (CISM), Federal IT Security Professional - Manager (FITSP-M), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), Global Industrial Cyber Security Professional (GICSP), or GIAC Security Leadership (GSLC).
- Significant experience navigating technical accreditation processes, meeting strict security requirements, and creating A&A Body of Evidence (BOE) documentation.
- Familiarity operating standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).
- Proven experience managing complex network documentation, inventorying networks, and working across large technical teams to drive a standardized security agenda.
Preferred Qualifications:
- Possession of a Cloud Certification.
- Hands-on experience utilizing cyber risk and compliance automation tools.
- Self-starter with excellent interpersonal skills, capable of organizing boards and driving change across organizational teams.
Clearance Requirements:
- Current/Active TS/SCI Required.
- Abilty to obtain and maintain a polygraph.
Physical Requirements:
- Must be able to remain in a stationary position 50% of the time.
- Needs to occasionally move about inside the office to access file cabinets, office machinery, and other equipment.
- Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
- Must be able to exchange accurate information in these situations.