Information Systems Security Engineer

MANTECH seeks a motivated, career and customer-oriented Information Systems Security Engineer (ISSE). This position is based in Linthicum Heights, MD.

As an Information Systems Security Engineer, you will be crucial in designing, implementing, and maintaining secure system architecture based on the organization's specific technologies and security frameworks. You will play a key role in mitigating risks and ensuring compliance with stringent government regulations such as RMF, FISMA, and NIST 800-53. This includes integrating security measures throughout the entire development life cycle of IT systems and applications.

This role supports the Cryptographic Solutions Program, providing essential technical expertise for National Security Systems (NSS) cryptographic products.

Responsibilities include but are not limited to:

• Develop and implement secure system architectures for new and existing systems.
• Design security solutions to mitigate risks and ensure compliance with government regulations (e.g., RMF, FISMA, NIST 800-53).
• Integrate security measures into the development of IT systems and applications.
• Conduct risk assessments, security audits, and vulnerability assessments on systems and applications.
• Evaluate and implement security tools, including firewalls, intrusion detection/prevention systems, and encryption technologies.
• Support Risk Management Framework (RMF) processes for system accreditation.
• Prepare and maintain essential security accreditation documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&Ms).
• Collaborate closely with system architects, developers, and administrators to implement security requirements.

Minimum Qualifications:

• Bachelor's degree in a technical field; An additional 4 years of relevant work experience might be substituted for a degree.
• 14+ years of professional experience as an Information Systems Security Engineer (ISSE) in programs of similar size and scope.
• Department of Defense (DoD) IASAE Level 2 certification, such as a CISSP or equivalent.
• Proficiency in administering, securing, and troubleshooting Linux-based systems.
• Hands-on experience working with LatteArt, CIVET, and/or Biscotti frameworks, platforms, or tools.
• Strong understanding of networking concepts and protocols, including TCP/IP, DNS, DHCP, HTTP/S, and VPNs.
• Knowledge of network security principles, such as segmentation, secure communications, and monitoring.
• Experience with system certification and accreditation (C&A) processes.
• Ability to perform vulnerability assessments, threat modeling, and risk analysis.

Preferred Qualifications:

• Certifications relevant to Linux or specific networking technologies (e.g., RHCSA, RHCE, or CCNA).
• Understanding of encryption technologies and cryptographic principles.
• Knowledge of access control models, auditing, and secure system design.
• Familiarity with Firewalls, routers, and intrusion detection/prevention systems.
• Experience with shell scripting and common Linux security tools.

Security Clearance Requirements:

• Current/active TS/SCI with Polygraph

Physical Requirements:

• Ability to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations.