Cybersecurity Engineer

ManTech - Philadelphia, PA

Full-time - Senior

Philadelphia, PA

Professional, Scientific, and Technical Services

About the position

ManTech is seeking a motivated Cybersecurity Engineer to join their team in Philadelphia, PA. This full-time, hybrid position involves leading cybersecurity initiatives for Navy Operational Technology (OT) systems, including incident response, risk assessments, and the development of security plans and procedures. The role requires a strong background in cybersecurity engineering and experience with ICS infrastructure and network security.

Responsibilities

• Lead the development and update of incident response plans for Navy Operational Technology (OT) systems.
• Lead a team of ISSMs/ISSEs to provide cybersecurity evaluations and risk assessments.
• Lead the development of plans, instructions, guidance, and standard operating procedures to support the security of OT systems.
• Evaluate and prioritize vulnerabilities in OT systems for hardening, patching, or other corrective actions.
• Lead the remediation activities to address cybersecurity incidents, including forensic activities to document the scope of the incident and system remediation activities to close the incident.
• Write after action reviews.
• Evaluate public and non-public incident data to identify potential vulnerabilities in specified systems.
• Develop and implement corrective actions to reduce or eliminate the identified risks.
• Create, edit, and manage changes to network or system access control lists on specialized cyber security applications and systems.
• Update the rules and custom content of specialized cyber security applications and systems.
• Troubleshoot cyber security systems hardware and software when issues occur.
• Test and evaluate new cyber security applications or tools, rules, access controls, and configurations of cyber security platforms.
• Develop solutions to implement Defense in Depth principles and practices.
• Identify potential conflicts with implementation of any cyber security tools within the enterprise and develop recommendations to remediate these conflicts.
• Support enterprise mitigation efforts based on the specific monitoring and filtering capabilities of existing cyber security infrastructure.
• Analyze life-cycle configuration management of applications, rules, filters, and configurations of managed cyber security systems.
• Provide subject matter expertise in the creation, editing, and management of rules and filters for specialized cyber security systems.
• Contribute to the completion of milestones associated with specific projects.
• Provide solutions to a variety of technical problems of moderate scope and complexity.
• Advise customers and colleagues on a wide variety of topics including cyber security risk management.
• Lead projects with notable risk and complexity; develop the strategy for project execution.

Requirements

• A minimum of ten (10) or more years of professional experience in cybersecurity engineering.
• Experience leading incident response teams.
• Five (5) or more years of professional experience with ICS infrastructure, networks, and/or network security.
• Two (2) or more years of experience with IT infrastructure, networks, and/or network security.
• One (1) or more years of experience using vulnerability analysis tools.
• One (1) or more years of experience applying and/or using and/or analyzing cybersecurity controls such as intrusion detection systems, intrusion prevention systems, firewall configurations, and access control lists.
• One or more years of experience maintaining and configuring various operating systems such as Windows, Linux, VxWorks, or other Embedded Operating Systems.
• Master's level degree in Cybersecurity, Computer, Electrical, or Electronics Engineering or Mathematics with field of concentration in computer science, or a Cybersecurity related degree from an ABET accredited program.
• Offensive Security Certified (OSCP) or Certified Ethical Hacker (CEH).
• Certified Computer Security Incident Handler, GIAC Certified Incident Handler (GCIH).
• DoD 8140/8570 IAT Level II Certification (CCNA-Security, CySA+, CND, Security+ CE).