MANTECH seeks a motivated, career and customer-oriented Senior Security Control Assessor (SCA) to join our team in Washington, D.C., Chantilly, VA, Quantico, VA, or Huntsville, AL.
Responsibilities include, but are not limited to:
- Provides overall configuration management infrastructure and environment to the product development team. Developing or modifying CM plans, policies, and procedures tailored to the complexity and scope of the developmental or operational system
- Ensure that FBI ISs are operated, maintained, and disposed of in accordance with the internal security policies and practices outlined in the approved Security Assessment and Authorization (SAA) package. Manage the SAA process for new FBI ISs and legacy FBI ISs migrating into the GRC application
- Provide baseline security controls to the system owner, contingent upon the IS’s security categorization, type of information processed and entity type. Provide a recommendation to the Authorizing Official, in consultation with the system owner, regarding systems’ impact levels and ISs’ authorization boundary
- Initiate, coordinate, and recommend to the FBI Authorizing Official all Interconnection Security Agreement (ISAs), Memorandum of Understanding (MOUs), and Memorandum of Agreement (MOAs) that permit the interconnection of an FBI IS with any non-FBI or joint-use IS
- Perform an independent review of the System Security Plan (SSP) and make approval decisions. Request and negotiate the level of testing required for an IS with the Enterprise Information Security Section and the FBI Authorizing Official.
- Coordinate IS security inspections, tests, and reviews with the Security and system owner. Submit the final SAA package to the FBI Authorizing Official for a security ATO decision. Supporting developmental and operational systems, creating and maintaining configuration baselines. Performing change control and configuration audits
- Ensure that the Security ATO Electronic Communication (EC) is serialized into Sentinel under the applicable case file number. Advise the FBI Authorizing Official of IS vulnerabilities and residual risks.
Minimum Qualifications:
- A minimum of 7 years of experience serving as an ISSR or in a similar role at a cleared facility
- A minimum of 10 years’ experience in a computer science or cybersecurity related field
- Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP) or other certifications exemplifying skill sets such as those described in DoD Instruction 8570.1. IAM Level III proficiency.
- Experience with the use and operation of security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP Weblnspect, Network Mapper (NMAP), and/or similar applications
Preferred Qualifications:
- Bachelor's or advanced degree in Computer Science, Cybersecurity, or other cyber discipline
Security Clearance Requirements:
- Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting this position.
- Must be willing to sit for a polygraph if required.
Physical Requirements:
- Must be able to remain in a stationary position 50%.
- Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
- Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.
- Often positions self to maintain computers in the lab, including under the desks and in the server closet.
- Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.