Information System Security Officer Senior (ISSO)

Amentum; Washington (District of Columbia); On-site; USD 150,000 - 165,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

ESPP

Job summary

Amentum is seeking a Top-Secret cleared Information System Security Officer (ISSO) to join our Washington, DC team. You will guide security controls, ensure ATO readiness, and collaborate with the CISO/ISSM to protect mission-critical assets.

Responsibilities include developing POAMs, performing network inspections, and maintaining documentation for system security plans, with a focus on FISMA, NIST, and DCID 6/3 compliance.

Qualifications

• 7+ years of experience in information security roles
• Knowledge of security standards and regulations (ISO 27001, NIST, HIPAA)
• Experience with RMF, ICD 503, NIST SP 800-53 or DCID 6/3

Responsibilities

• Advise SO, BPO, and CISO/ISSM on information system security
• Implement and maintain security controls
• Develop POAM and ATO documentation
• Perform network self-inspections and ensure system security compliance

Skills

ISSO

RMF

NIST SP 800-53

FISMA

Risk assessment

Vulnerability mgmt

Education

Bachelor's degree in IS/CS/Engineering

Tools

Splunk

JIRA

Confluence

Nessus

SAST

Job description

Purpose and Impact:

Amentum is searching for a Top-Secret cleared ISSO to join our team in Washington, DC. You will be working in an organization that’s mission is to accelerate operations through data and new analytical insights. The entire section leverages agile and works to provide enhanced reporting and global searching capabilities to facilitate task management, cross-utilization, and address national intelligence priorities while protecting confidential data and sources.

You will be responsible for technical information assurance engineering efforts with network/server scanning, patching, mitigation, and compliance cross-checking of target network assets. Experience in ST&E process and POAM generation. You will need a strong understanding of approved COTS security analyst tools and government mitigation/compliance checkers. You will need a strong comprehension of FISMA, DIACAP, NIST-800 SPs and DCID 6/3 standards and policy control grouping. You will need experience determining products to meet client needs and presenting results.

Work Schedule:

Typically, Monday through Friday 8-hour days onsite. Flexibility within a 2-week pay period to reach 80 hours.

Essential Responsibilities:

Serves as the principal advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters, technical and otherwise, involving the security of an information system. ISSOs are responsible for ensuring the implementation and maintenance of security controls. Directs and implements the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction. Provides guidance and direction for the physical protection of information systems assets to other functional units. Provides reports to superiors regarding effectiveness of data security and makes recommendations for the adoption of new procedures. Assist with reviewing, developing, and navigating the system, team, and customer through the Authority to Operate (ATO) accreditation/certification documentation process. Perform network self-inspections. Create new and edit existing documentation that forms the Authority to Operate (ATO) package to include the System Security Plan and IS contingency plan. Develop Plan of Action and Milestone (POAMS) from vulnerability data and enter into the system of record.

Possesses and applies a comprehensive knowledge across key tasks and high impact assignments. Plans and leads major technology assignments. Evaluates performance results and recommends major changes affecting short-term project growth and success. Functions as a technical expert across multiple project assignments. May supervise others. Minimum of 8 years’ experience recommended. In absence of years of experience, certifications or past work may be used to show the level of experience needed to perform at this level.

Minimum Requirements (Knowledge, Skills, and Abilities):

• Minimum of 7 years of experience collectively with the following:
  • Proven work experience as an Information Systems Security Officer or a similar role, preferably in a complex organizational setting.
  • In-depth knowledge of information security principles, methodologies, and best practices.
  • Familiarity with industry standards and regulations (e.g., ISO 27001, NIST, HIPAA, etc.).
  • Experience in conducting risk assessments and implementing security controls.
  • Experience with Risk Management Framework (RMF), ICD 503, NIST SP800-53 or DCID 6/3
  • Proficiency in using security tools and technologies, such as firewalls, intrusion detection systems, SIEM, and vulnerability management tools.
  • Strong analytical and problem-solving skills to identify security gaps and develop effective mitigation strategies.
  • Knowledge of incident response procedures
  • Documented and demonstrated experience with troubleshooting and problem solving
  • Documented and demonstrated experience as an individual consultant or a team lead
  • Familiarity with the ATO process

Security Clearance Required:

• Active Top-Secret clearance with SCI eligibility

Minimum Education:

• Bachelor's degree in Information Systems Engineering, Computer Science, Engineering, Business or other related field.
• In absence of degree, additional years of experience may be substituted for educational requirements

Minimum Years of Experience:

• Minimum of 8 years of experience

Required Certifications:

• Cloud Practitioner Certification (or similar)

Preferred Qualifications:

• Development Tools:
  • Git source version control
  • Google DevOps project management
  • Static Application Security Testing (SAST, e.g. SonarQube, Gitlab SAST)
  • Unit and integration testing (e.g., xunit, nunit)
  • Automated testing
  • End-to-end testing (e.g., Selenium, Cucumber)
• Platforms:
  • Attribute and role-based access control paradigms (ABAC/RBAC)
  • Windows Service Fabric
  • Splunk administration
  • Windows and Linux server administration
• Business Analysis and Project Management:
  • Agile Principles
  • DevOps
• Splunk, JIRA, Confluence, Nessus
• Strong Excel experience
• Experience with major Cloud Services
• Experience implementing, reviewing, and providing recommendations on Cloud Security configurations
• Experience with Microsoft Windows Server and Linux
• Cloud Associate Level or above Certification(s)

Other Responsibilities:

Safety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.

Quality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.

Procedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.

Compensation Details:

US:$150,000 - $165,000

The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits Overview:

Our health and welfare benefits are designed to support you and your priorities. Offerings include:

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax-saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.