3+ years in Information Systems Security program support.
2+ years conducting vulnerability scans with Rapid7 Nexpose or similar tools.
Familiarity with ICD-503 controls, CNSS 1253 guidelines, and NIST RMF accreditation workflows.
Understanding of system security design and enclave security baselines.
Responsibilities
Perform comprehensive assessments of systems and networks to identify security vulnerabilities.
Execute compliance audits and vulnerability assessments using enterprise security tools.
Lead A&A activities to support accreditation and special approval authorizations.
Develop and maintain system Security Plans and documentation for Security Test and Evaluation milestones.
Conduct Information Systems Security Engineering tasks, including architecture reviews and verification testing.
Validate security baselines and recommend safeguards while tracking corrective actions.
Benefits
Health Insurance
Life Insurance
Paid Time Off
Holiday Pay
Short-term and long-term Disability
Retirement and Savings
Learning and Development opportunities
Wellness programs
Full Job Description
Assessment & Authorization (A&A) Specialist to join our team in Herndon, VA.
Responsibilities include but are not limited to:
Perform comprehensive assessments of systems and networks within the networking environment or enclaves to identify configuration deviations, policy non-compliance, and security vulnerabilities.
Execute passive compliance audits and active vulnerability assessments using enterprise security scanning solutions such as Rapid7 Nexpose.
Lead system assessment and authorization (A&A) activities to establish, maintain, and support accreditation and special approval authorizations in accordance with ICD-503, CNSS 1253, and NIST standards.
Develop, update, and maintain system Security Plans, Body of Evidence (BOE) documentation, and Plan of Action and Milestones (POA&M) to support formal Security Test and Evaluation (ST&E) milestones.
Perform Information Systems Security Engineering (ISSE) tasks, including system architecture reviews, security requirement decomposition, and verification testing.
Validate established security baselines, recommend safeguards, and conduct periodic system audit reviews while tracking corrective actions to closure.
Minimum Qualifications:
High School Diploma
3+ years of experience supporting an Information Systems Security program and guiding system users on technical security compliance.
2+ years of specialized experience conducting vulnerability scans and analyzing results using Rapid7 Nexpose or similar enterprise scanning tools.
Experience with ICD-503 controls, CNSS 1253 guidelines, and NIST Risk Management Framework (RMF) accreditation workflows.
Understanding of system security design, enclave security baselines, and security technology implementation.
Preferred Qualifications:
Certified Information Systems Security Professional (CISSP) or DoD 8570/8140 IAM/IAT Level II or III baseline certification.
Experience integrating host-based (HIDS) and network-based (NIDS/IPS) intrusion detection and prevention technologies.
Ability to perform systems analysis, process definition, requirements decomposition, and project management.
Strong interpersonal, briefing, and technical writing skills with experience communicating complex security findings to mission stakeholders.
Clearance Requirement: An active/current TS/SCI with polygraph clearance is required for this position.
Physical Requirements:
Must be able to remain in a stationary position 50% of the time.
The projected compensation range for this position is $91,600.00-$153,800.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, MANTECH invests in its employees beyond just compensation. MANTECH's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.
About ManTech International
ManTech International Corporation is an American defense contracting firm that was founded in 1968. The company provides cybersecurity, intelligence, and defense solutions to the United States Government. ManTech has over 9,000 employees and operates in 40 countries worldwide. The company's services include software development, systems engineering, and enterprise IT solutions. ManTech has been awarded numerous contracts by the U.S. Department of Defense and other government agencies.
