Cybersecurity System Security Engineer II

$99,200 - $164,600/Yr

ManTech - Colorado Springs, CO

Full-time - Mid Level

Remote - Colorado Springs, CO

Professional, Scientific, and Technical Services

About the position

As a Cybersecurity System Security Engineer II at ManTech International Corporation, you will play a crucial role in safeguarding our national security through innovative projects. This position is based in Colorado Springs, CO, and is integral to our diverse team dedicated to protecting sensitive information and systems. You will serve as the Risk Management Framework (RMF) Cybersecurity Specialist, responsible for the day-to-day security analysis of RMF packages, ensuring timely updates and notifications. Your expertise will be essential in maintaining compliance with NIST 800-53 and NIST 800-171 controls, documenting their implementation in the Security Controls Traceability Matrix. In this role, you will provide support and recommendations to Program Managers and Security Authorities, helping to maintain appropriate information assurance (IA) postures for various programs and systems. You will conduct thorough reviews to identify and mitigate potential security weaknesses, ensuring that all security features applied to systems are functional and effective. Additionally, you will monitor and resolve Plans of Action and Milestones (POA&M) to address system vulnerabilities on assigned Information Systems. Your responsibilities will also include drafting and maintaining security Assessment and Authorization documentation, overseeing the development and implementation of information system security program policies, and representing the Government Program Manager in various working groups and advisory councils. This position requires a proactive approach to risk management and a commitment to maintaining the highest standards of security within the organization.

Responsibilities

• Serve as the RMF Cybersecurity Specialist for the organization's Systems.
• Maintain Day-to-Day security analysis of RMF packages to ensure timely updates and notifications.
• Update RMF Security Control Families as required and properly process through eMASS.
• Maintain thorough understanding of NIST 800-53 and NIST 800-171 controls and document implementation in Security Controls Traceability Matrix.
• Provide support and recommendations to Program Managers and Security Authorities to maintain appropriate information assurance (IA) posture(s) for programs and systems.
• Conduct reviews to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional.
• Monitor and resolve Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned Information Systems.
• Draft and/or prepare and maintain security Assessment and Authorization documentation (e.g. IA SOP, SSP, MSSP, RAR and SCTM).
• Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration with existing SAP network infrastructures.
• Develop and provide IA risk management recommendations to the customer.
• Represent the Government Program Manager in various SSE related working groups, advisory groups, and advisory council meetings.

Requirements

• Minimum of 6 years experience, including minimum 4 years' experience within SCI or SAP environment.
• Minimum 2 years of SAP relevant experience highly desired.
• Bachelor's degree in a related area or equivalent additional experience (4 years).
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 1 and Information Assurance Manager Level 2 within 6 months of the date of hire.
• Current Top-Secret Clearance with SCI Eligibility.
• Eligibility for access to Special Access Program Information.
• Willingness to submit to a Counterintelligence polygraph.

Nice-to-haves

• Familiarity with security policy/manuals and the appropriate ICDs/JAFANs/DOD Manuals and other guiding policy documents.
• Full understanding of Risk Management Framework (RMF) and Joint SAP Implementation Guide (JSIG) processes for system accreditation, along with legacy (DITSCAP, DIACAP) processes.
• Ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel, and industry partners.
• Working knowledge of Microsoft Office (Word, PowerPoint, and Excel).
• Possess a high degree of originality, creativity, initiative requiring minimal supervision.

Benefits

• Health Insurance
• Life Insurance
• Paid Time Off
• Holiday Pay
• Short Term and Long Term Disability
• Retirement and Savings
• Learning and Development opportunities
• Wellness programs
• Other optional benefit elections