> Markdown version of [/jobs/ext/4658588-information-system-security-engineer](https://www.wearedevelopers.com/jobs/ext/4658588-information-system-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Engineer

- **Company:** Mantech International Corporation
- **Location:** Chantilly, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Configuration Management, Cyber Security, Information Systems, Identity and Access Management, Information Security Management, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Network Security, Systems Integration, Splunk
- **Published:** November 10, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9301247/information-system-security-engineer

## About the Role

* Bachelor's Degree and 4 years of relevant experience, or high school diploma/GED and 9 years of relevant experience
 * Familiarity with information system security principles.
 * Experience with interfacing and briefing military, civilian, and contractor personnel at all levels.
 * Knowledge of security-related IC and DoD policies, procedures and operating instructions.
 * Experience in applying system security engineering expertise in one or more of the following: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification, authentication, and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing.
 * One of the following certifications required Information Assurance Management (IAM) Level I: CAP, GSLC, CISM, CASP, CISSP, CCISCO, Security+.

Preferred Qualifications:

 * Experience in supporting the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
 * Experience in supporting the building of security architectures and enforcing the design and implementation of trusted relations among external systems and architectures.
 * Experience as a primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments.
 * Experience in assessing and mitigating system security threats/risks throughout the program life cycle.
 * Experience with Trellix ePolicy Orchestrator
 * Experience Tenable Security Center
 * Experience with Splunk

Security Clearance Requirement:

 * Active/current TS/SCI with Polygraph is required.

Physical Requirements:

 * Must be able to be in a stationary position more than 50% of the time
 * Must be able to communicate, converse, and exchange information with peers and senior personnel
 * Constantly operates a computer and other office equipment

## Description

* Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies.
 * Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
 * Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
 * Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content.
 * Support security authorization activities in compliance with Information System Certification and Accreditation Process (ICD 503), the NIST Risk Management Framework (RMF) process, and prescribed ICs business processes for security engineering.
 * Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of government security policy and enterprise solutions.
 * Occasional travel, 25% CONUS