> Markdown version of [/jobs/ext/2675760-senior-cloud-information-system-security-engineer](https://www.wearedevelopers.com/jobs/ext/2675760-senior-cloud-information-system-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Information System Security Engineer - **Company:** Mantech International Corporation - **Location:** Chantilly, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Xacta, Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Information Security Management, Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Information Technology - **Published:** September 1, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9131460/senior-cloud-information-system-security-engineer ## About the Role * 10 + years of experience in secure design, analysis, and test of information security systems and products. * 10 + years of experience applying methods, standards, and approaches for ensuring baseline security safeguards are appropriately implemented and documented. * 10 + years of experience creating and updating security test plans for detecting and mitigating risk to information systems. * Bachelor's degree or equivalent (6 additional years of experience) or Master's degree with 7 + years of relevant experience. * Must possess one of the following DoD 8140.03 Advanced proficiency certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CISSP-ISSAP, CySA+, GSLC, GSNA, CCNP Enterprise, GCIA, GDSA, or GICSP., * Possession of a Cloud certification (e.g., AWS Certified Security - Specialty, CCSP, AWS Solutions Architect Associate, AZ-500, or Google Professional Cloud Security Engineer). * Demonstrated experience leading RMF lifecycle teams across cloud and hybrid enterprise environments. * Experience with DOJ/FBI GRC applications such as Xacta or JCAM. Clearance Requirements: * Active Top Secret clearance with SCI eligibility is required. Physical Requirements: * Must be able to remain in a stationary position 50% of the time. * Needs to occasionally move about inside the office to access file cabinets and office machinery. * Frequently communicates with co-workers, management, and customers, and must be able to exchange accurate information in these situations. ## Description * Lead, mentor, act as a SME (Subject Matter Expert) and supervise a team of contractor security professionals responsible for the end-to-end implementation of the Risk Management Framework (RMF) lifecycle for FBI IT systems. * Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained. * Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements. * Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements. * Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables. * Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards. * Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts. ## Related Videos - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)