Senior Information Systems Security Engineer (ISSE)
Role Overview
Our health and welfare benefits are designed to support you and your priorities.
Offerings include:
Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance
Note: Benefits may vary based on employment type, location, and applicable agreements.
Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.
Full Job Posting
Key Responsibilities:
- Develop and review security architectures, designs, and requirements for classified enclaves, cross-domain solutions, cloud environments, and mission applications.
- Integrate security controls into the system development lifecycle, including DevSecOps pipelines, so that security is built in rather than bolted on.
- Evaluate emerging technologies (zero trust, cloud services, AI/ML tools, containerization) for security implications and recommend risk-informed adoption strategies.
- Define and validate security requirements traceable to mission needs, threat models, and applicable controls.
- Lead system categorization, control selection and tailoring, implementation, assessment, and continuous monitoring under the Risk Management Framework (RMF) as implemented by the IC.
- Prepare and maintain authorization packages, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones (POA&Ms), and risk assessments.
- Brief Information System Security Managers (ISSMs), Authorizing Officials, and program leadership on residual risk and recommended mitigations.
- Support reciprocity and inheritance of controls across IC elements and accrediting bodies.
- Analyze vulnerability scan results, configuration baselines (STIGs/SCAPs), and penetration test findings, and drive remediation with system owners and engineering teams.
- Support incident response, including technical analysis, root-cause determination, and lessons-learned integration into system designs.
- Review change requests and configuration changes for security impact.
- Support audits, inspections, and security reviews by oversight bodies.
- Interpret and apply IC and national policy, including ICD 503, ICD 705 and its technical specifications, CNSSI 1253, NIST SP 800-37/53/53A, and applicable agency directives.
- Participate in configuration control boards, architecture review boards, and security working groups.
- Coordinate with counterintelligence, physical security, supply chain risk management, and cross-domain teams.
- Mentor junior and mid-level ISSEs and security analysts.
- Serve as a technical authority and escalation point for complex or ambiguous security issues.
- Ability to translate complex technical risk into clear, actionable guidance for non-technical decision makers.
- Strong written and oral communication skills, including producing high-quality technical documentation.
- Sound judgment and the ability to balance mission needs against security requirements
- Contribute to the development of standards, templates, and best practices.
- Work Environment, Physical Demands, and Mental Demands:
- Employee will work in a SCIF on a daily basis.
- Employee may also be required to work in a datacenter environment for specified periods of time.
- Minimum Requirements (Knowledge, Skills, and Abilities):
- Experience supporting classified networks, cross-domain solutions, or multi-enclave environments.
- Experience with cross-domain solutions, classified cloud environments (e.g., C2E/commercial cloud for IC), or zero trust implementation.
- Familiarity with automation and scripting (Python, PowerShell, Ansible) and infrastructure-as-code security.
- Experience with SIEM, vulnerability management, and continuous monitoring tooling (e.g., ACAS/Nessus, Splunk, eMASS or agency equivalent).
- Expert knowledge of information systems security principles, defense-in-depth, and threat modeling.
- Familiarity with ACAS, STIG Viewer, SCAP, and Assured Compliance tools.
- Experience supporting ATO packages for cloud environments (e.g., C2S/commercial cloud for classified workloads).
- Familiarity with IC-specific tools and processes for reciprocity and enterprise authorization.
- Experience briefing AOs, program managers, and senior leadership.
- Strong understanding of security control families and how to interpret implementation, inheritance, and assessment procedures.
- Ability to translate technical findings into clear risk statements.
- Excellent written communication, with a strong attention to detail in documentation.
- Ability to manage multiple packages and competing deadlines.
- Sound judgment when handling classified and sensitive information.
- Ability to work independently and within cross-functional teams.
- Hands-on experience managing system records, controls, artifacts, and POA&Ms in eMASS.
- Working knowledge of the RMF, NIST SP 800-37, 800-53, and 800-53A, CNSSI 1253, and ICD 503.
- Thorough knowledge of IC and national security information system policy, including CNSS issuances and agency directives.
- Skill in assessing risk and applying technical, operational, and management controls.
- Ability to translate policy into practical implementation guidance for system administrators.
- Ability to work independently, manage multiple systems and deadlines, and exercise sound judgment in handling classified information.
- Security Clearance Required:
- Must have active Top Secret clearance with SCI eligibility
- Minimum Education:
- Bachelor's degree in cybersecurity, computer science, engineering, or a related field, plus [8-12] years of relevant experience (additional experience may substitute for education). Additional experience may substitute for a degree or equivalent professional experience (typically 4 additional years in lieu of degree).
- Minimum Years of Experience:
- At least [5] years of experience performing ISSE or equivalent security engineering duties in classified or IC environments.
- Demonstrated experience executing the RMF and producing authorization artifacts for national security systems.
- Working knowledge of network security, operating system hardening (Windows/Linux), identity and access management, encryption/PKI, and auditing/logging.
- Required Certification: (One or more of the following)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- CompTIA Advanced Security Practitioner (CASP+)
Preferred Qualifications:
- Certified Information Systems Security Professional (CISSP) Information System Security Engineering Professional (ISSEP)
- Certified Information Security Manager (CISM)
- Certified Information System Auditor (CISA)
- #javelin
- As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government.
- Other Responsibilities:
- Safety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.
- Quality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each
- employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.
- Procedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.
- Compensation Details:
- $190,000 - $225,000
- The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.
- Benefits Overview:
- Our health and welfare benefits are designed to support you and your priorities. Offerings include:
- Health, dental, and vision insurance
- Paid time off and holidays
- Retirement benefits (including 401(k) matching)
- Educational reimbursement
- Parental leave
- Employee stock purchase plan
- Tax-saving options
- Disability and life insurance
- Pet insurance
- Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.
- Original Posting:
- 11/02/2026 - Until Filled
- Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.
- Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Amentum
Software Engineer 3
, USA
IVA Spacesuit Project Manager
, USA
Aircraft Engine Mechanic/FEDS Operator
, USA
Facilities Planning and Project Coordinator
, USA
Cybersecurity Analyst
, USA
Plane Captain
Corpus Christi, USA
Legal Administrative Specialist, Team Leader
Pocatello, USA
Aircraft Worker
, USA