Information Systems Security Engineer

MANTECH seeks a motivated, career and customer-oriented Information Systems Security Engineer (ISSE). This position is based in Linthicum Heights, MD.

As an Information Systems Security Engineer, you will be crucial in designing, implementing, and maintaining secure system architecture based on the organization's specific technologies and security frameworks. You will play a key role in mitigating risks and ensuring compliance with stringent government regulations such as RMF, FISMA, and NIST 800-53. This includes integrating security measures throughout the entire development life cycle of IT systems and applications.

This role supports the Cryptographic Solutions Program, providing essential technical expertise for National Security Systems (NSS) cryptographic products.

Responsibilities include, but are not limited to:

• Develop and implement secure system architectures for new and existing systems.
• Design security solutions to mitigate risks and ensure compliance with government regulations (e.g., RMF, FISMA, NIST 800-53).
• Integrate security measures into the development of IT systems and applications.
• Provide technical input for selecting security controls and technologies.
• Conduct risk assessments, security audits, and vulnerability assessments on systems and applications.
• Evaluate and implement security tools, including firewalls, intrusion detection/prevention systems, and encryption technologies.
• Support Risk Management Framework (RMF) processes for system accreditation.
• Prepare and maintain essential security accreditation documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&Ms).
• Collaborate closely with system architects, developers, and administrators to implement security requirements.

Minimum Qualifications:

• Bachelor's degree in a technical field; An additional 4 years of relevant work experience might be substituted for a degree.
• 14+ years of professional experience as an Information Systems Security Engineer (ISSE) in programs of similar size and scope.
• Department of Defense (DoD) IASAE Level 2 certification, such as a CISSP or equivalent.
• Proficiency in administering, securing, and troubleshooting Linux environments (Ubuntu and Red Hat) as well as Windows Server (Active Directory).
• Hands-on experience working with LatteArt, CIVET, and/or Biscotti frameworks, platforms, or tools.
• Knowledge of network security engineering involving routers, switches, and firewalls as well as protocols such as TCP/IP, DNS, and VPNs.
• Proficiency with vulnerability management and security monitoring tools, specifically Nessus for assessments and the ELK Stack for SIEM and log analysis.
• Experience with system certification and accreditation (C&A) processes.

Preferred Qualifications:

• Certifications relevant to Linux or specific networking technologies (e.g., RHCSA, RHCE, or CCNA).
• Understanding of encryption technologies and cryptographic principles.
• Knowledge of access control models, auditing, and secure system design.
• Experience with shell scripting and common Linux security tools.

Security Clearance Requirements:

• Current/active TS/SCI with Polygraph

Physical Requirements:

• Ability to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers via email, phone, and/or virtual communication, which may involve delivering presentations.