ISSO: Lead Security Operations & Compliance (TS/SCI)

Amentum; Hanover (MN); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amentum is seeking a Level 2 Information Systems Security Officer (ISSO) to independently manage day-to-day security operations for designated systems. You will coordinate continuous monitoring activities, perform vulnerability scans, validate STIG compliance, and support RMF reporting with the ISSM.

The role requires strong coordination with system admins, engineers, and government stakeholders, plus IAM control execution and ongoing evidence management. A valid TS/SCI with Poly is required.

Qualifications

• Doctoral degree with no experience; OR
• Master’s degree plus 3 years of relevant experience; OR
• Bachelor’s degree plus 5 years of relevant experience; OR
• Associate’s degree or 18 semester hours of military computer-related coursework plus 7 years’ experience; OR
• Degree in Information Assurance, Information Security, Information Systems, Information Technology, Computer Networking, Cyber Security, or related is preferred

Responsibilities

• Lead day-to-day security operations for assigned systems and oversee triage of alerts/logs.
• Plan and execute vulnerability and compliance scanning with documented remediation.
• Coordinate STIG/compliance checks and remediation with admins; validate fixes via re-check.
• Maintain security evidence repositories with labeling and access controls.
• Support IAM control actions and periodic access reviews; document discrepancies.

Skills

Security operations

Vulnerability scanning

STIG compliance

Incident triage

RMF reporting support

Education

Doctoral degree

Master's degree + 3 years

Bachelor's degree + 5 years

Associate's degree + 7 years

Information Assurance/ Security-related degree

Tools

Vulnerability tooling

RMF tooling

Job description

Amentum is seeking a Level 2 Information Systems Security Officer (ISSO) to independently manage day-to-day security operations for designated systems. You will coordinate continuous monitoring activities, perform vulnerability scans, validate STIG compliance, and support RMF reporting with the ISSM.

The role requires strong coordination with system admins, engineers, and government stakeholders, plus IAM control execution and ongoing evidence management. A valid TS/SCI with Poly is required.