Senior Information Systems Security Officer

MANTECH seeks a motivated, career and customer-oriented Senior Information Systems Security Officer (ISSO) to join our team in Washington, D.C. This is an on-site position.

The Senior ISSO will leverage their strong technical background and knowledge to support accreditation efforts, to include creating Body of Evidence (BOE) documentation, responding to/implementing/documenting required controls, and completing required tasks and actions.

• Create, update, maintain, and interpret required Body of Evidence (BOE) documentation to navigate system accreditation processes.
• Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of system security configurations and practices.
• Conduct required vulnerability scans, review reports to identify vulnerabilities, and perform comprehensive vulnerability analysis.
• Develop, oversee, and track Plans of Action and Milestones (POAMs) to effectively mitigate discovered security risks.
• Coordinate with system owners, ISSMs, and team resources to diagnose operational issues and implement necessary technology solutions.
• Document and implement plans detailing security postures, proper configurations, and secure remote access capabilities for applications.

• 10 + years of related information systems security experience, or a Master's degree with 7 + years of experience.
• Bachelor's degree or equivalent (6 additional years of experience) in mathematics, telecommunications, electrical engineering, computer engineering, computer science, or a closely related IT discipline.
• Significant experience navigating technical accreditation processes, meeting strict security requirements, and creating A&A Body of Evidence (BOE) documentation.
• Familiarity operating standard security and discovery tools including Tenable Nessus, Security Center, IBM Guardium, HP Web Inspect, and Network Mapper (NMAP).
• Proven experience managing complex network documentation, inventorying networks, and working across large technical teams to drive a standardized security agenda.

• Certified Information Systems Security Professional (CISSP) certification.
• Hands-on experience utilizing cyber risk and compliance automation tools.
• Self-starter with excellent interpersonal skills, capable of organizing boards and driving change across organizational teams.

• Current/Active TS/SCI Required.
• Ability to obtain and maintain a polygraph.

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, and other equipment.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations.