Cybersecurity Compliance & Validation Specialist

Amentum; Tampa (FL); On-site; USD 110,000 - 180,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching retirement benefits

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum seeks a cybersecurity professional to lead on-site assessments, compliance validation, and RMF-aligned reviews across USSOCOM components and deployed forces. The role focuses on patch validation, vulnerability management, and reporting findings with actionable mitigation within tight timelines.

Must hold an active TS/SCI clearance and BA/BS degree. Strong communication skills and DoD IA policy knowledge are essential for success in this fast-paced government environment.

Qualifications

• Experience with US Combatant Commands (USCENTCOM/USSOCOM) desired.
• Technical background in system administration, architecture and engineering.
• Technical background in networking, identity management, MS and Linux OS, database, mobility.
• Working knowledge of the RMF.
• Knowledge of Telos Xacta or eMASS desired.
• Excellent written and verbal communications skills.
• Knowledge/experience with DoD IA processes and policies (DODI 8510.01, NIST, CJCSM 65101.01).
• Active TS/SCI clearance required.

Responsibilities

• Provide on-site support for Cybersecurity assessments, compliance and validation.
• Perform Cybersecurity compliance/validation including site visits, inspections, scanning, remediation, patch reviews.
• Assess security posture of USSOCOM components and forces; create and report findings and mitigation in 60 days; track actions.
• Identify common security risks by analyzing findings and trends.
• Validate patching and perform validation scans; develop POA&Ms and report status.
• Assist commands and deployed forces with scanning and vulnerability management programs.
• Track/report compliance with USCYBERCOM, DIA directives.
• Maintain records of compliance with federal laws and USSOCOM guidance.
• If audits have findings, provide POA&M within 3 business days; track status.
• Review Information Security Plans and Physical Security Plans; recommend safeguards.
• Document physical security controls for access to DoD networks/devices.
• Execute IAVM programs; track IAVA/IAVB compliance; coordinate reporting.
• Execute cyber self-inspection programs; track compliance and completion.
• Perform FISMA network and system reviews.
• Publish trend analyses within 30 days of assessments.
• Provide SME for COA development and mitigation strategies.
• Develop and implement processes to mitigate vulnerabilities; submit docs for approval.
• Respond to RFIs and implement task orders; coordinate reporting and POA&Ms.

Skills

US Commands experience

Sysadmin/architecture

Networking/OS/database

RMF knowledge

Xacta/eMASS knowledge

Communication skills

DoD IA policies

TS/SCI clearance

Education

BA/BS

Job description

Amentum seeks a cybersecurity professional to lead on-site assessments, compliance validation, and RMF-aligned reviews across USSOCOM components and deployed forces. The role focuses on patch validation, vulnerability management, and reporting findings with actionable mitigation within tight timelines.

Must hold an active TS/SCI clearance and BA/BS degree. Strong communication skills and DoD IA policy knowledge are essential for success in this fast-paced government environment.